Privacy Policy
Last updated 27 October 2026
Conversations here are intimate, so this is specific. It lists what we store, what we deliberately do not, who else touches your data and why, and how to have it all removed.
What we store
| What | Why |
|---|---|
| Your messages and her replies, per conversation | It is the conversation. Voice notes you record are stored as audio files alongside their transcript; hers are stored as audio too. |
| Facts extracted from what you tell her | Her memory. A short entry per fact — your sister's name, the interview on Thursday — with a weight for how much it mattered. |
| Her relationship state with you | Her running impression of you, a private thought, a rolling account of what the two of you have been through, moments that landed, closeness and trust levels, and any plan you made together. Kept per conversation. |
| Photos she sends | Generated images, stored so they can be shown again. |
| Account: first name, last name, email, password hash, recovery-code hash, sign-up and last-login time, failed-attempt counter, and (if you used Google or X) the provider subject we linked | To recover your conversations on another device, and to pre-fill the card form. Passwords are salted, hashed and keyed with a server-side secret; we cannot read them. We cannot read your recovery code either. |
| Age check outcome | Whether the check passed, the method, the level of assurance, the country and state it was made from, and when. You confirm you are 18 or older before your first message; we do not ask for or store your date of birth. |
| Payment records | Order id, amount, currency, plan period, status, and the transaction or subscription reference reported by the payment processor. No card number, no billing address. First name, last name and email on the account may be sent to the card processor so their hosted form is not blank. |
| Credit balance and usage | To know what you have left. |
| Choices you make if you build a character | To build her, and to learn what people want authored next. |
| Messages you send through the contact form, and the email address you leave on the newsletter box | So Raj can read and answer you, and so the “new women” note can reach you if you asked for it. Nothing else is done with either. |
| The email address you leave to hear about product updates, and ideas you send from the roadmap page (with your email only if you add it) | So Raj can write to you when something new ships, and read what you asked for. Every update email has a one-click unsubscribe. Roadmap votes are counted against a salted hash of your network address; the address itself is not stored. |
Everything is keyed to an anonymous identifier your browser holds. Until you create an account, that identifier is the only thing that ties your data together.
What we deliberately do not do
- We do not store your date of birth.
- We do not send marketing email unless you ask for it — the only list is an optional “new women every day” note you can leave on the homepage. The only mail the service sends on its own is a password-reset link you asked for, and a short acknowledgement when you write to us through the contact form.
- We do not sell, rent or share your data for advertising, and there are no advertising trackers on the site.
- We do not use your conversations to train models.
Your location
Our hosting provider tells us the country (and, in the US, the state) a request comes from. We use it only to decide which age rule applies and whether the service is available where you are, and we record it with the age-check outcome. We do not store IP addresses ourselves.
Who else processes your data
Generating a reply, a photo or a voice note means sending something to a company that runs the model. Each one receives only what it needs for its job.
| Provider | What it receives |
|---|---|
| OpenRouter | The text of the conversation, so a language model can write her reply and update her memory. OpenRouter passes it to the company hosting the model; OpenRouter's own privacy terms govern what it keeps. |
| Sogni | The text description of a photo scene, so an image can be generated. Your messages are not sent. |
| Cartesia | The text of a line she is sending as a voice note, so it can be spoken. |
| PostHog (EU) | Product analytics: which pages and screens you open, what you tap, a session replay of how you move through the app, and your answers if you choose to fill in a short feedback survey, keyed to your anonymous identifier. Inside the app every message, every photo and everything you type is masked before it leaves your browser, so PostHog never sees your conversations or her pictures. |
| Cloudflare | Hosts and stores everything above, transcribes your voice notes, provides a fallback voice, and sends the few emails we send (a reset link, a contact acknowledgement) and routes mail to our inbox. Requests to the other providers pass through Cloudflare's AI Gateway. |
| ATLOS | Processes cryptocurrency payments. Sees the order id, amount and wallet transaction; never sees your conversations. |
| Card processor (CCBill) | Processes card payments. Sees what any card payment needs — name, email, card details you enter on their page — and the order id. Never sees your conversations; we never see your card number. |
| Google Fonts | Serves the typefaces on this page and the landing page, which means Google receives your IP address when they load. The app itself is the same. |
How long we keep it
For as long as you use the service. We do not currently delete anything automatically; a conversation you leave stays where it was so she still remembers when you come back. Everything listed above is deleted when you ask.
Deletion and access
Email support@slavia.ai from the address on your account (or, without an account, include the conversation id shown in the app). We will delete your conversations, facts, relationship state, media, voice recordings, account and age-check record, and confirm when it is done. You can ask for a copy of your conversations the same way.
Security
Everything travels over TLS. Passwords are hashed with a server-side secret so a stolen database alone cannot be attacked offline. Age and payment checks are enforced on the server, not in your browser. No system is perfect, and if something happens to your data we will tell you.
Under 18
The service is for adults only. If we learn someone under 18 has used it, we delete their data.
Changes and contact
If this policy changes, the date at the top changes. Questions go to /contact. The data controller is Niche stack s.r.o., registered in the Czech Republic.