Privacy Policy

Last updated: May 16, 2026

1. Data We Collect

• Account data: email address, display name, authentication identifiers.
• Billing data: Stripe customer ID, subscription status, last 4 of card (held by Stripe, not us).
• Usage data: messages you send to AI personas, gifts, unlocks, page views, device & IP for fraud prevention.
• Generated content: photos and voice notes produced for you, retained so you can re-access them.

2. How We Use Data

We use your data to operate the Service, process payments, generate AI replies and media, prevent abuse, send transactional emails, and comply with our legal obligations. We do not sell your personal data, and we do not use the content of your private chats to train third-party models.

3. Sharing

We share data only with sub-processors required to run the Service: Stripe (payments), our cloud provider (hosting & database), and our AI gateway (model inference for replies and media). All are bound by contract to protect your data.

4. Retention

Chat history and generated media are retained while your account is active. You may request deletion of your account and associated data at any time by emailing privacy@onlywhalesapp.com. We may retain limited billing records as required by tax and AML law.

5. Your Rights

Subject to your jurisdiction (GDPR, CCPA and similar), you have the right to access, correct, export or delete your personal data, and to object to certain processing. Contact us to exercise these rights.

6. Security

Payments are handled by Stripe and never touch our servers. Media is stored in a private bucket and served only via short-lived, signed URLs after we verify your subscription or unlock.

7. Cookies

We use strictly-necessary cookies for authentication and session management. We do not use third-party advertising cookies.

8. Contact

Questions? privacy@onlywhalesapp.com. See also our Terms of Service.