Privacy Policy

Overview

This Privacy Policy explains what Swoony (operated by Vlippers) collects, how we use it, and the choices you have. On the web, you need to be 18 or older to create an account, and we ask you to confirm this when you sign in. The Swoony apps follow the age rating shown on the App Store and Google Play, and content in the apps stays closed-door. It is written around US law, including the California Consumer Privacy Act (CCPA/CPRA) for California residents, and includes a section for users in Brazil under the Lei Geral de Proteção de Dados (LGPD).

Information we collect

Account information: your email address and display name. If you sign in with Google or Apple, we receive basic profile information from them. Profile avatars are shown as initials - we do not collect uploaded profile photos.

Conversations: the messages you send and the AI responses, along with relationship state such as progression, the scenes and character POVs you unlock, and which characters you chat with.

Characters: the characters you create - your text descriptions and the character art you upload.

Support messages: when you contact us in the app, what you write, the topic you pick, and your app version, device, language, and country, so we can look into it and reply in your notifications. We may use an AI service to translate them so we can read and reply; we never use them for training.

Payments: when you buy Hearts, our payment processor (Stripe on the web, Apple or Google in the apps) handles your payment. We receive a record of the purchase but never your full card number.

Usage and analytics: page views and key actions (for example, creating a character, starting a chat, or beginning a purchase), collected via Google Analytics and Amplitude.

Technical data: log, device, and usage information needed to operate and secure the service, including the approximate country you sign up from, based on your IP address.

Sensitive information

Romance chats can reveal intimate details about you, such as your sexual life or orientation, especially if you turn on the Uncensored setting. We process that content only to run your chats and keep the service safe. We never use it for advertising, never sell it, and you can delete any chat, or your whole account, at any time. Turning on Uncensored requires your explicit confirmation that you are 18 or older and want this content; you can turn it off in any chat.

How we use your information

To provide and personalize the service; remember your relationships and progression; generate character responses, scenes, and POVs; store the character art you upload; process Hearts purchases; measure and improve the service; keep the service safe through moderation and abuse and fraud prevention; communicate with you (for example, sign-in emails or optional notifications you turn on); and comply with the law.

AI processing

To write your character's replies, stories and images, the name and pronouns you give us, your messages and the relevant chat context are sent to third-party AI providers, such as Google Gemini, which process them only to return a response. We share only what is needed.

Content safety

You upload your own character art. Uploaded images are sanitized (re-encoded, metadata stripped) and may be reviewed and removed. Prohibited content - including any sexualization of minors - is not allowed. If child sexual abuse material (CSAM) is ever identified, it is reported as required by law, including to the National Center for Missing & Exploited Children (NCMEC).

Analytics

We use Google Analytics and Amplitude to understand how Swoony is used. These tools use cookies and similar identifiers for measurement. We have configured them for first-party measurement only and have disabled advertising and cross-context behavioral-advertising (“sharing”) features. You can opt out using the Google Analytics opt-out browser add-on or by contacting us.

Service providers we share with

We share data with vendors that run Swoony on our behalf, under contract: hosting (Vercel), database (Neon), image storage (Vercel Blob), AI models for chat, stories and images (third-party AI providers, such as Google Gemini), payments (Stripe, Apple, Google), email delivery (Resend), push notifications (Apple, Google; the notification text, which can include a short preview of a character's message, passes through their servers), error monitoring, and analytics (Google Analytics, Amplitude). We do not sell your personal information.

Legal and safety disclosures

We may disclose information to comply with the law, enforce our Terms or Content Policy, or protect the safety of our users and others - including mandatory CSAM reporting.

Cookies and sessions

We use a session cookie to keep you signed in, a cookie to remember your language, and analytics cookies/identifiers as described in the Analytics section. We do not use third-party advertising cookies. If you are in the EU, the EEA or the UK, analytics stay off until you accept them in the cookie banner, and you can change your choice at any time with Cookie settings at the bottom of the page. The cookies we set: the sign-in session cookie (30 days), swoony.locale (your language, 12 months), sw_consent (your cookie choice, 12 months), sw_attr (where you first came from, 12 months), _ga and _ga_* (Google Analytics, up to 2 years), and AMP_* (Amplitude, up to 1 year). The first three are needed for the site to work; the rest are analytics.

Data retention and deletion

You can delete any chat from your chats list, and delete your account at any time from your profile, which deletes your account, chats, scenes, and POVs. Support messages are deleted when you delete your account. We may retain limited records where required for legal, security, or financial reasons.

Security

We use industry-standard security measures to protect your data in transit and in storage. No system is perfectly secure, and we cannot guarantee absolute security.

California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it; to request access to, correction of, or deletion of your personal information; and not to be discriminated against for exercising these rights.

We do not sell your personal information. Some analytics may be considered “sharing” under California law; we have disabled cross-context behavioral-advertising features, and you can opt out as described in the Analytics section. To exercise your rights, contact us at harris@vlippers.com.

Users in Brazil (LGPD)

If you are in Brazil, the Lei Geral de Proteção de Dados (Law 13.709/2018) applies to how we handle your personal data. Vlippers is the controller (controlador). Our data protection officer (encarregado) can be reached at harris@vlippers.com.

Legal bases: we process your account, conversation, and payment data to perform our contract with you (art. 7, V); analytics and security data on our legitimate interest in running and protecting the service (art. 7, IX); and sensitive data that may appear in your chats, such as sexual life or orientation, only with your consent (art. 11, I), which you give when you create an account and, for explicit content, when you turn on Uncensored. You can withdraw consent at any time by turning Uncensored off, deleting a chat, or deleting your account.

Your rights (art. 18): confirmation that we process your data; access; correction of incomplete or outdated data; anonymization, blocking, or deletion of unnecessary or excessive data; portability; deletion of data processed with your consent; information about who we share data with; information about the consequences of refusing consent; and revocation of consent. To exercise them, write to harris@vlippers.com. You may also lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).

International transfer: your data is stored and processed in the United States and other countries where our service providers operate, under contractual safeguards (art. 33).

Children

On the web, accounts are for people aged 18 and over. In the apps, we follow the store age rating. We never knowingly collect data from anyone under 13, or under the age your country sets for online consent if that is higher; if we learn that we have, we delete it.

International users

Swoony is operated from the United States. Your information may be processed in the United States and other countries where our service providers operate. Users in Brazil: see the LGPD section above.

Changes to this policy

We may update this policy; the "Last updated" date above reflects the latest version.

Contact

Privacy questions or requests: harris@vlippers.com.

Users in the EU, EEA and UK (GDPR)

If you are in the European Union, Iceland, Liechtenstein, Norway or the United Kingdom, the GDPR or the UK GDPR applies to how we handle your personal data. The controller is Vlippers (details at swoony.ai/legal), reachable at harris@vlippers.com.

Legal bases. We process your account, conversations, characters, purchases and support messages to provide the service you signed up for (Art. 6(1)(b)); payment and tax records to meet our legal obligations (Art. 6(1)(c)); security, fraud and abuse prevention, error monitoring and basic service measurement on our legitimate interest in running and protecting Swoony (Art. 6(1)(f)); and analytics cookies only with your consent (Art. 6(1)(a)). Romance chats can reveal information about your sex life or sexual orientation; we process that only with your explicit consent (Art. 9(2)(a)), which we ask for when you sign up. You can withdraw consent at any time by deleting a chat or your account, or by changing your cookie choice; withdrawing does not affect processing that happened before.

Recipients. Hosting and database providers, image storage, AI model providers that generate replies, stories and images (third-party AI providers, such as Google Gemini), payment providers (Stripe, Apple, Google), email delivery, push notification services (Apple, Google; the notification text, which can include a short preview of a character's message, passes through their servers), analytics (Google Analytics, Amplitude), error monitoring, and internal team notification tools. They act on our instructions under contract, except that Stripe, Apple and Google also act as independent controllers for payments.

International transfers. Your data is processed in the United States and in other countries where these providers operate. Where a country has no EU or UK adequacy decision, we rely on the EU-US Data Privacy Framework (and its UK extension) where the provider is certified, or on the European Commission's Standard Contractual Clauses with the UK Addendum. You can ask us for a copy of these safeguards.

How long we keep data. Account and profile data: until you delete your account. Chats: until you delete the chat or your account. Characters and uploaded images: until you delete them or your account. Support messages: until you delete your account. Purchase and Hearts records: as long as tax and accounting law requires and to handle chargebacks, after which they are deleted. Error reports: up to 90 days. Short-lived technical logs: up to 30 days. Analytics data: in pseudonymous form for as long as it is useful to measure how the service is used.

Your rights. You can ask us for access to your data and a copy in a portable format, correction, deletion, restriction, and you can object to processing based on our legitimate interest. You can delete chats and your account yourself in the app. For anything else, email harris@vlippers.com; we reply within one month.

Complaints. You can complain to the data protection authority in the country where you live or work. In the UK, that is the Information Commissioner's Office (ico.org.uk); you can also complain to us first, and we confirm receipt within 30 days.

You need to give an email address to create an account; everything else is optional. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

We are appointing representatives in the EU and the UK under Article 27; their details will be published at swoony.ai/legal.