Privacy & Data

1. What we collect

You give us

• A nickname (whatever you want him to call you)
• Email address (sign-in, recovery, important updates)
• Year of birth (we store only the year, not the full date)
• Your chosen experience style (Slow Burn or Whirlwind)
• Messages and any content you create in conversations
• Your choice about marketing emails, and when you made it
• Payment info — handled entirely by Apple. We never see your card details.

We collect automatically

• Device type, OS version, app version
• Usage data: features used, message counts, session length
• Purchase records: which chemistry packs you bought and when (no card details)
• IP address (security and fraud prevention)
• Push notification token (only if you allow notifications), and a log of the notifications we send you
• Your time zone (to count your daily streak correctly)
• Your country, taken from your device's region settings (to show the right crisis helplines and send notifications at a reasonable local time)

We do not collect

• Your real name (unless you share it in chat)
• Your GPS location
• Your contacts
• Photo library or camera access
• Biometric or health data

2. How we use it

• To make the experience work: your messages are processed by AI models so characters can respond. Bond progress, chemistry, and history live in your account.
• To improve the service: we look at aggregate, anonymized usage patterns. We do not routinely read individual conversations.
• For safety: automated systems detect signals of self-harm, abuse, or minors. Human review occurs only when content is flagged by automated safety systems or when required to investigate abuse, fraud, security incidents, or legal obligations.
• For purchases and support: we use your account info and purchase records to deliver the chemistry you bought, handle refunds, and resolve issues.
• Marketing emails (only if you opted in): In our newsletters we measure link clicks through Resend (links are redirected via links.crushondemand.app) to understand which content is useful. We do not track email opens. You can unsubscribe at any time using the link in every email.
• Legal compliance: when required by Italian or EU law.

We do not

• Sell your data. Ever.
• Share your conversations with advertisers.
• Use your conversations to train AI models.
• Show targeted ads based on your chats.
• Combine your chats with marketing profiles.

Character memory

Effective 5 January 2027, Character Memory is enabled: characters may remember details you share across conversations to provide continuity. It is on by default and can be turned off at any time in Profile → Character memory. You may also ask a character to forget specific information. Certain categories are never stored, including health information, crisis or self-harm content, body or weight details, age, and contact details.

To make conversations feel continuous, each character keeps short notes about what you tell them. Each character has its own notes: what you tell one character, the others don't know.

• What a character may remember: your name and what you like to be called; your job or studies; your city or country (never your address); people and pets that matter to you (first name and role); things you share about your life, including hard times (a difficult week, wanting to change jobs, a breakup); things you love or dislike; moments in your relationship with the character, like the first time you said "I love you".
• What is never kept: health and clinical details (illnesses, diagnoses, medication, therapy); messages about a crisis or self-harm; weight, body measurements or diet; contact details (phone, email, social media, address); religion, political opinions, sexual orientation or ethnicity; sexual details; financial or identity data; the age or school year of anyone, you or anyone else.
• How notes are made: automatically, by the same AI provider that writes the characters' replies (Anthropic, Claude API). Every note must be based on something actually said in your conversation, and a second automated check discards notes it cannot confirm. Notes are never used for advertising or to train AI models.
• How long they are kept: notes about recent events expire after about 30 days. All other notes are kept while your account is active and are permanently deleted with your account, within 30 days of deletion.
• "Forget that": if you ask a character to forget something, the character stops bringing it up, but the note is kept so the character knows not to raise it again. To have your notes deleted, email hello@crushondemand.app or delete your account. Your notes are included when you export your data.

3. Who we share with

We use a small number of trusted vendors. Each has its own privacy policy and is bound by a Data Processing Agreement.

Guarantees

• Anthropic retains API data according to the retention period specified in its current API documentation and contractual commitments. Anthropic does NOT use our API data to train Claude.
• All transfers outside the EU rely on the Standard Contractual Clauses (EU Commission decision 2021/914) and, where applicable, the EU-US Data Privacy Framework.

4. Legal basis (GDPR)

• Performance of contract: to deliver the service you signed up for, including the chemistry you buy.
• Consent: for optional features (push notifications, marketing emails).
• Legitimate interest: security, fraud prevention, service improvement.
• Legal obligation: when required by Italian/EU law (for example, keeping purchase records for tax purposes).

5. Retention

• Account data: kept while your account is active.
• Conversations: kept while active; permanently deleted within 30 days of account deletion.
• Character memory: notes about recent events, about 30 days; other notes, while your account is active; permanently deleted within 30 days of account deletion.
• Purchase records & receipts: 10 years (Italian/EU tax law).
• Server logs, including IP addresses: kept by our hosting provider for up to 90 days for security monitoring.
• Country and time zone: kept while your account is active.
• Anonymous aggregate analytics: may be kept indefinitely.

6. Your rights

Wherever you live, we honor these rights:

• Access: get a copy of everything we hold about you.
• Correction: fix anything wrong.
• Deletion: erase your account and all data.
• Portability: get a machine-readable export.
• Restriction / Objection: stop certain processing.
• Withdraw consent: for optional features (such as marketing communications or push notifications) at any time.

EU/EEA/UK users: you can also file a complaint with your Data Protection Authority. In Italy: Garante per la Protezione dei Dati Personali (garanteprivacy.it).

California (CCPA/CPRA) users: you have the right to know, delete, correct, and opt out of "sale" or "sharing" of personal info. We do not sell or share.

Other US states (Virginia, Colorado, Connecticut, Utah, Texas): your rights mirror CCPA — exercise them the same way.

Email hello@crushondemand.app to exercise any right. We respond within 30 days.

7. Security

• Data in transit: encrypted with TLS 1.2+
• Data at rest: encrypted with AES-256
• Passwords: never stored in plaintext; if you use Sign in with Apple we don't see a password at all
• Access controls + audit logging on internal systems

No security system is 100% safe. If a breach affects you, where required by applicable law, we will notify affected users without undue delay.

8. Age & minors

Crush on Demand is strictly 18+. We ask for your date of birth before you can start, and anyone who confirms they are under 18 cannot continue. During conversations, automated systems detect when a user says they are under 18: when that happens, we close the account and delete the associated data.

We do not knowingly collect data from anyone under 18. If we learn that a minor has provided data, we delete it immediately. To report a minor using our service, email hello@crushondemand.app.

9. International transfers

We're based in Italy. Some vendors are in the United States: Anthropic, Apple, RevenueCat, Resend, Expo and Vercel. Supabase stores our data in the EU, but is a US company that may access it remotely. For these transfers we rely on the Standard Contractual Clauses (EU Commission decision 2021/914) and, where applicable, the EU-US Data Privacy Framework. You can request copies of SCCs by emailing us.

10. AI-specific disclosures

Crush on Demand uses generative AI (Anthropic's Claude) to create character responses. The characters are fictional and AI-generated.

• We do not use your conversations to train AI models.
• AI responses are simulated. Not advice, not human, not real intimacy. Users are solely responsible for decisions made based on AI-generated content.
• Characters "remember" facts you've shared via summarized memory. To erase it, delete your account or email us.
• Automated safety filters prevent harmful, illegal, or unsafe outputs.
• No human reads your chats unless flagged by automated safety systems or required for investigation of abuse, fraud, security incidents, or legal obligations.

11. EU AI Act transparency

12. Data Protection Officer

We have not appointed a Data Protection Officer because we are not legally required to do so under GDPR Art. 37. As a small business, we do not engage in large-scale systematic monitoring of data subjects nor large-scale processing of special category data, which would otherwise trigger that obligation.

Privacy inquiries are handled directly by Brunella Barbone, owner of the data controller, at hello@crushondemand.app.

13. Changes to this policy

If we make material changes, we'll notify you in-app and by email at least 30 days before they take effect. Minor changes (typos, clarifications) may be made without notice. "Last updated" is always at the top.

14. Contact