1. Information We Collect
Depending on how you use the service, we may collect the following categories of information:
- Email address (for account registration, account recovery, or support communications).
- IP address and device/network metadata used for security, fraud prevention, and service operations. Product analytics stores country and a coarse network range rather than an exact IP address.
- Cookies and similar local storage identifiers (including age-verification and session-related preferences).
- Messages, conversation history, and image requests that you submit so the service can respond and maintain the memory features you use.
- Product feedback you choose to provide, such as a photo rating, a selected reason for a dislike, or a report that a safety refusal was incorrect.
- Limited product events such as a page visit, feature use, chat delivery, or server-confirmed sign-in outcome, together with random first-party identifiers and technical timing or outcome metadata. For a newly delivered chat reply, our local quality measurement may also retain one closed, content-derived intent category (general conversation, emotional support, practical advice, continuity, romance, adult conversation, photo request, or unknown) and a low/medium/high confidence value, linked to a pseudonymous first-party actor for up to 60 days. These events do not include the text of your conversations or image prompts.
- If checkout is enabled and you choose to buy something, limited transaction records such as an opaque order identifier, product, amount, currency, provider status, and cryptographic references needed to reconcile the payment. Intimora does not store a cryptocurrency wallet private key or card number.
2. How We Use Information
We use collected information to operate and improve the service, including to:
- Provide access to features and maintain platform functionality.
- Provide conversation history, character memory, and generated-content features.
- Enforce adult-access controls and site preferences.
- Detect abuse, prevent unauthorized access, and protect infrastructure.
- Measure and improve response quality, image quality, and the accuracy of safety controls.
- When a focused quality review is explicitly run, permit authorized operators to inspect a strictly limited, protected sample of recent conversation turns. This temporary review sample is not added to product analytics and is removed after its short review period.
- Respond to support requests, legal notices, and safety reports.
3. Cookies
We use cookies and similar storage technologies to remember settings and improve usability. For example, the site may store an age-verification cookie and other session-related preferences. You can control cookies through your browser settings, but disabling cookies may affect site functionality.
We also set first-party measurement identifiers so we can count visitors and visits without identifying anyone. They contain random values only. They are never shared with third parties, are never used to track you across other websites, and the visitor identifier is rotated after no more than 180 days. The measurements are limited to which pages were opened, which links and buttons were used, how far down a page was scrolled, how long it was open, and whether the device is a phone, tablet or computer. This measurement system does not record the text you type, the content of your conversations, or your precise location. Conversation content is processed separately as described in Sections 1, 2, and 7 so the requested chat, memory, safety, and feedback features can operate. The closed chat-intent quality category described in Section 1 is retained without the underlying text and is used only for aggregate product-quality measurement.
4. Third-Party Services
The service may rely on third-party providers for infrastructure and operations, including:
- Hosting providers and CDN/network infrastructure services.
- Cloud GPU providers and AI inference/image generation infrastructure.
- A third-party payment provider, if checkout is enabled. The provider processes the payment under its own terms and privacy practices; Intimora receives only the transaction information needed to confirm delivery, prevent duplicate credit, and resolve exceptions or disputes.
- Operational monitoring or error tracking tools, if enabled.
These providers may process data on our behalf under their own service terms and privacy practices. We recommend reviewing their privacy documentation when applicable.
5. No Sale of Personal Data
We do not sell personal data for monetary consideration. If data practices change in the future, this Privacy Policy will be updated before such changes take effect.
6. Data Security and Security Disclaimer
We use reasonable administrative, technical, and organizational measures to protect information. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Launch notifications
If you ask to hear when payments become available, we store your email address, selected plan or photo pack, language, and the time and version of your consent. We use this information for the requested launch notification. Joining does not create a purchase, payment obligation, or subscription. Email addresses are not included in product analytics. You can withdraw your request through our contact page; account deletion also removes linked requests.
7. Data Retention
Conversation history, character memory, generated images, and limited non-prompt version metadata for those images are retained while needed to provide those features, unless you clear or delete them or request account deletion, subject to limited operational backups and legal obligations. Conversation text is not copied into the product-analytics or chat-reliability logs. If an encrypted off-site continuity backup is enabled, it excludes conversations, prompts, character memory, photo metadata, and runtime logs.
Our normal maximum retention periods are 14 days for operational logs; 30 days for content-free chat reliability metadata and photo-generation diagnostic records; 60 days for product analytics and account funnel metadata; 90 days for feedback, photo ratings, and privacy-safe safety decision statistics; 365 days for de-identified human safety labels that contain only fixed categories and confidence (not the reviewed request or context); and 7 days for the encrypted safety-review queue described below. Closed files are rotated and expired records are removed automatically. These periods do not replace any shorter deletion right that applies to your account data.
When the safety-review feature is enabled, a blocked request may be copied into an encrypted, access-restricted review queue for no more than 7 days so we can investigate false refusals. We do not append your email address, IP address, or raw account identifier as separate review metadata; a request or its recent context can still contain information that you chose to type. Aggregated or de-linked decision statistics may be retained longer to measure safety accuracy. If an output-age scanner quarantines a generated image for owner review, the image and the minimum prompt and restore locator needed to judge and reverse a false positive are kept in a private, access-restricted quarantine for no more than 14 days. The moderation event log does not copy the prompt, full image URL, email address, IP address, or raw account identifier; expiry is recorded before the quarantined evidence is deleted. Photo ratings and their selected reason may be retained with a pseudonymous identifier so we can compare versions and improve image quality. Retention may be extended where reasonably necessary to investigate abuse, comply with law, or resolve a dispute.
If a purchase is made, limited order, payment-confirmation, fulfillment, refund, dispute, and reconciliation records may be retained for fraud prevention, accounting, legal compliance, and dispute resolution. When an account-deletion request is completed, active passes and unused image credits are removed and the retained financial records are detached from the account identifier and kept under a restricted internal pseudonym. A late or conflicting provider event is held for manual review and does not recreate account access.
8. User Rights
Depending on your location and applicable law, you may have rights regarding your personal information, such as requesting access, correction, deletion, or additional information about our data practices. We may need to verify your request before responding.
9. Policy Updates
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date.
10. Contact
For privacy-related questions or requests, contact: intimora.team@proton.me