Vixy Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account and authentication information: an anonymous account identifier by default and, if you choose Google Sign-In, your Google account email address and a unique account identifier. We do not receive your Google password or access other content in your Google account.
• Content you provide: messages sent to AI characters, conversation history, favorites, character and story preferences, and details saved by Vixy's memory feature. Please do not include sensitive personal information in conversations unless necessary for your use of the App.
• Profile details you choose to add: a nickname and an optional "About you" description that characters use to get to know you. Both can be edited or removed from Profile.
• Characters you create: the text you write for a character, the appearance options you pick in the character creator (such as style, age, hair, eyes, outfit, and setting), the AI portrait generated from those options, and any images you upload for it. Characters you make public are reviewed before other users can see them.
• Account setup choices: if you sign in with Google, the version of our terms you accepted, when you accepted them, and your onboarding preferences are stored with your account so you are not asked again after reinstalling or on a new device.
• Gifts, scenes, and invite codes: gifts you send and scenes you start in a conversation, the invite code generated for you, and whether you have redeemed another user's code.
• Usage and entitlement information: onboarding completion, characters viewed or favorited, chats started, AI reply usage, voice replies played, paywall views, purchase or subscription events, credit and Sparks balances, and subscription tier. Product usage events do not include message text.
• Reports and support communications: report reasons, details you provide, and related communications.
• Device and diagnostic information: app version, device and operating-system information, crash data, error logs, and similar technical information.
• Purchase information: transaction identifiers, product purchased, subscription status, and entitlement information provided by Google Play, other applicable app stores, or RevenueCat. We do not receive or store full payment-card details.
• Blocking preferences: the character IDs you choose to block so we can hide those characters from your Vixy experience.
• Advertising information: if you choose to watch a rewarded ad, Google AdMob may collect your device's advertising identifier (such as the Google Advertising ID), IP address, device information, and ad interaction data. We give AdMob your Vixy account identifier only so the reward can be credited to your account; we never share your messages with advertisers.

2. How we collect information

We collect information directly from you, automatically when you use the App, and from service providers involved in authentication, app distribution, purchases, subscriptions, analytics, diagnostics, backend hosting, and AI response generation.

3. How we use information

We use information to:

• Create and maintain anonymous or linked accounts and restore data across sessions or devices where supported.
• Generate AI responses and operate conversations, chat history, favorites, preferences, and memory features.
• Write a short follow-up message from a character after you leave a conversation, shown in a notification on your device and then in the chat.
• Turn a character's reply into audio when you choose to play it.
• Create an AI portrait and a written description for a character you design, and automatically check every generated portrait before it is shown to you (for example, that the person shown is clearly an adult and is not nude).
• Count portrait and character generations to apply daily limits, and review generated portraits that you report.
• Enforce free-tier limits, maintain credit balances, and provide paid entitlements.
• Show optional rewarded ads to free-tier users who choose to watch one, and credit the Sparks earned.
• Process reports, moderate content, enforce our Terms of Service, and prevent fraud, abuse, and security incidents.
• Provide support, troubleshoot errors, measure feature performance, and improve the App.
• Comply with legal obligations and protect the rights, safety, and integrity of users, Renvoy, and others.

We do not sell personal information or use message content for advertising. Vixy shows ads only when a free-tier user chooses to watch a rewarded ad in exchange for Sparks; ads are not shown beside conversations, and Plus and Pro subscribers do not see ads.

4. How we disclose information

We disclose information only as needed for the following purposes:

• Backend infrastructure: Supabase processes account identifiers, authentication data, conversations, favorites, memories, preferences, blocked-character preferences, reports, and usage data to host and operate Vixy's backend.
• AI processing: AI model and inference service providers, reached through OpenRouter, process conversation context, messages, and — if you set them — your nickname and "About you" description as needed to generate character replies and follow-up messages and to support safety measures.
• AI character creation: when you generate a portrait, a text description built only from the appearance options you picked — never your messages, nickname, email address, or account identifier — is sent to fal.ai, which runs the image model (currently OpenAI's GPT Image). The resulting image is sent to an AI vision model (currently Google, through OpenRouter) for an automated safety check. When you ask Vixy to write a character's description, the details you entered in the creator are sent to an AI model through OpenRouter. Portraits are returned to your device and are stored on our servers only if you create the character.
• Voice replies: when you play a voice reply, the reply's text is sent to a text-to-speech provider (currently Google, through OpenRouter) to create the audio. The audio is delivered to your device and kept only in its temporary storage; we do not store it on our servers.
• Sharing you start: if you choose to share a milestone card, the image — showing the character, the milestone, and your invite code, never your messages, nickname, or "About you" description — is passed to the app you pick.
• Sign-in: Google processes sign-in requests when you choose Google Sign-In.
• Advertising: Google AdMob delivers and measures the rewarded ads you choose to watch. Where required (including in the EEA, the UK, and Switzerland), we ask for your consent through Google's User Messaging Platform before any ad is requested, and you can change that choice later from Profile → Ad privacy choices. You can also reset or delete your advertising ID in your device settings. Google's use of information is described at https://policies.google.com/technologies/partner-sites.
• Purchases and subscriptions: Google Play, other applicable app stores, and RevenueCat process purchases, subscription status, and entitlements.
• Operations and security: technical service providers may process limited analytics, diagnostic, support, or security information on our behalf.
• Legal and safety reasons: we may disclose information when reasonably necessary to comply with law, enforce agreements, investigate fraud or abuse, or protect rights and safety.
• Business transfers: information may be transferred as part of a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable law and appropriate safeguards.

Service providers process information under their own terms and privacy policies and, where applicable, under agreements with us.

5. Data retention

We retain account information, conversations, favorites, memories, preferences, usage records, and entitlements while your account is active or as needed to provide the App. When you delete your account, associated data is deleted from active systems, except for limited information we must retain for legal compliance, fraud prevention, security, dispute resolution, or enforcement. Residual copies may remain temporarily in protected backups until overwritten through the normal backup cycle.

For each portrait or character-description generation we keep a record of when it happened, its outcome, and (for portraits) the text description it was generated from, so we can apply daily limits and review portraits you report. This record does not include the image itself.

Content reports, moderation records, transaction records, and support communications may be retained longer when reasonably necessary for safety, accounting, legal, or compliance purposes. We delete or anonymize information when it is no longer needed for the purposes described here.

6. Your choices and rights

You can:

• View and delete remembered details in Vixy's chat memory viewer.
• Edit or remove your nickname and "About you" description from Profile.
• Delete individual conversations from chat history or the in-chat menu.
• Manage optional Google account linking where that control is available.
• Request account and data deletion in the App from Profile → Delete account & data, or use https://renvoyapps.com/apps/vixy/delete-account if you cannot access the App.
• Manage or cancel a subscription through the app store account used for the purchase. Deleting Vixy or your Vixy account does not automatically cancel an app-store subscription.

Depending on where you live, you may also have rights to access, correct, delete, or obtain a copy of your personal information; object to or restrict certain processing; withdraw consent where processing is based on consent; and appeal or complain to a data-protection authority. Email support@renvoyapps.com to exercise applicable rights. We may need to verify your identity before completing a request.

7. International data transfers

Renvoy and its service providers may process information in countries other than the country where you live. Where required by applicable law, we use appropriate safeguards for these transfers.

8. Data security

We use reasonable technical and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, and disclosure. However, no internet transmission or storage system is completely secure, and we cannot guarantee absolute security.

9. Children's privacy

Vixy is not directed to and must not be used by anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has used Vixy, email us so we can investigate and delete the associated account and information as appropriate.

10. Third-party services and links

Vixy may contain links to or integrations with third-party services. Their handling of your information is governed by their own terms and privacy policies. We encourage you to review those policies before using the relevant service.

11. Changes to this policy

We may update this Privacy Policy as Vixy's features or legal obligations change. We will post the revised policy and update the effective date. If changes are material, we may also provide notice in the App or through another appropriate channel.

12. Contact us

Vixy is operated by Renvoy. For privacy questions, requests, or concerns, contact support@renvoyapps.com.