Privacy Policy
The short version
- Darling is for adults (18+). We collect what we need to run the app: your email, name, birthday, the people you make, your conversations, and the memories the AI keeps about you.
- Your messages, photos and voice are processed by OpenAI to write replies, make images and run calls. OpenAI doesn’t use them to train its models.
- We don’t sell your data. We don’t show ads. We don’t track you across other apps and websites.
- You can export your data and delete your account from inside the app.
Who we are
Nevin Solutions (org. no. 936 682 960), Schøningsdal 3, 7020 Trondheim, Norway, runs Darling and is the controller of your personal data. For privacy questions or requests, write to privacy@getdarling.app. For anything else, support@getdarling.app.
What we collect and why
| What | Examples | Why |
|---|---|---|
| Account | Email address, sign-in codes, a user ID | To sign you in and run your account |
| Profile | Your name, birthday, who you’re interested in, time zone, profile photo | To confirm you’re 18+, personalise the app, and show the right crisis helpline |
| The people you make | Their look, personality, voice, job and portrait, from your Lab choices and any name or job you type | To create and keep your person |
| Conversations | Messages, photos you send, voice messages and their transcripts, call records, Moments | To run the chat, calls and Moments |
| Memories | Facts the AI keeps about you (like your sister’s name or an exam date), short summaries of past conversations, and the story of you two | So characters remember you, for months or years |
| Photos and voices | Photos the characters send you, which are AI-made, and voice audio | To deliver the features you use |
| Purchases | Your plan, Gold balance, renewal date, purchase events | To give you what you paid for |
| Usage and safety | Daily counts of messages, calls and photos; safety events (the type of concern, not the message); reports you file | To enforce limits, keep people safe and meet legal duties |
| Device | A push notification token, if you turn notifications on | To send notifications |
We don’t ask for your location, contacts or advertising ID. We store a time zone and, if you give one, a city.
How the AI processing works
Darling’s characters are powered by OpenAI. When you send a message, photo or voice message, or make a call, our servers send what’s needed (your message, recent conversation, the character’s details and a small set of relevant memories) to OpenAI to write a reply. OpenAI also makes images and voices, transcribes your voice messages, turns memories into searchable vectors, and runs content moderation.
- We use OpenAI’s API with
store: false, so OpenAI is asked not to keep this content for its own use, and API data isn’t used to train its models. - The app only works with your consent: onboarding explains this and asks you to agree.
- Our servers decide what each AI call gets. The AI never has direct access to the database.
Who we share data with
Only service providers that process data for us:
- Supabase (database, sign-in, file storage and server functions). Our project runs in the EU (Ireland, eu-west-1).
- OpenAI (chat, memory, images, voice, calls and moderation). OpenAI is in the United States.
- Apple (the App Store and billing) and RevenueCat (subscription management). RevenueCat receives a random user ID and purchase details, not your email or messages.
- Expo (push notifications). It receives your push token and the notification text, which is a short preview of a message.
We may also share data if the law requires it, to protect someone’s safety, or if the company is sold (we would tell you first).
We don’t sell or rent your personal data, and we don’t share it for advertising. We don’t use advertising or tracking SDKs.
Permissions
All permissions are optional and used only for the feature described:
- Notifications: so characters can text you first and you can see replies.
- Microphone: for voice messages and calls.
- Camera: to take a photo to send in a chat.
- Photo library: to send a photo or choose your profile picture.
You can change these any time in iOS Settings. The app still works without them, apart from the matching feature.
How long we keep data
| Data | Kept |
|---|---|
| Account, profile, people, messages, photos, voice messages, Moments | Until you delete your account |
| Memories (facts) | Until you tell a person to forget them or delete your account. We keep at most 2,000 facts per person and merge duplicates. |
| Summaries and episodes | Kept so the person remembers your story. Forgetting a memory also rewrites the summaries that mention it. |
| Reports you file | Until you delete your account |
| Safety events | Kept with your account link removed after you delete your account, for legal reporting |
| Usage and purchase records | Usage rows are kept without your identity after deletion. Purchase events are kept as needed for accounting and fraud checks. |
| Voice and image files | Until you delete your account |
| Backups | Deleted data can remain in encrypted backups for a limited period before it is overwritten |
Ending things with a person (Settings, then Your People, then End Things) deletes that conversation, everything they remembered about you, your Moments with them and the photos of that chat, from your phone and from our servers. Reports you made about them, and our safety records, are kept without the conversation attached. To remove only one thing they know, use Forget on a memory. To remove everything, delete your account.
If you try the Lab as a guest and never save an account, email us and we will delete that data.
Your rights and choices
Wherever you live, you can:
- See and export your data: Settings, then Export My Data. You get a JSON file with your profile, people, messages, memories and usage.
- Delete your data: Settings, then Delete My Account. This permanently removes your account, people, conversations, memories, Moments, photos and voice files.
- Correct your data: edit your name, who you’re interested in and your photo in Settings, or email us.
- See and forget memories: open a person’s card in the app.
- Turn off notifications in Settings.
If you’re in the EU or UK (GDPR and UK GDPR), you also have the right to restrict or object to processing, to data portability, and to complain to your data protection authority. Our legal bases are: your contract with us (running the app), your consent (AI processing by OpenAI, notifications, and optional permissions, which you can withdraw), our legitimate interests (safety, abuse prevention, security), and legal obligations.
If you’re in California (CCPA/CPRA), you have the right to know, access, correct, delete, and to opt out of the sale or sharing of personal data. We don’t sell or share it, and we don’t discriminate against you for using your rights. We treat chat content as sensitive personal information and use it only to provide the service you asked for.
To use a right that the app doesn’t cover, email privacy@getdarling.app from the address on your account. We reply within 30 days (45 for California requests, which we may extend). We may need to confirm it’s you.
International transfers
Your data is stored in the EU (Supabase, Ireland). OpenAI processes it in the United States, and our team may access it from other countries. When data leaves the EU or UK, we rely on safeguards such as the EU-US Data Privacy Framework (where the recipient is certified) or Standard Contractual Clauses.
Security
Data is encrypted in transit, and encrypted at rest by our storage provider. Each person’s data is separated by access rules in the database, and your files are private and reached only through short-lived links. Servers that call AI hold the keys, never the app. No system is perfectly secure, so please tell us at privacy@getdarling.app if you notice a problem. If a breach affects you, we’ll tell you and the authorities as the law requires.
Children
Darling is only for people 18 and over. We don’t knowingly collect data from anyone under 18. The app checks your birthday and watches for signs a user may be a minor. If we find that someone under 18 has an account, we will end the conversation and may delete the account and its data. If you think a child is using Darling, email privacy@getdarling.app.
Changes
If we change this policy in a way that matters, we’ll tell you in the app or by email before it takes effect. The date at the top shows the last update.
Contact
Privacy requests: privacy@getdarling.app. General help: support@getdarling.app.
Nevin Solutions (org. no. 936 682 960), Schøningsdal 3, 7020 Trondheim, Norway