Privacy Policy

Effective date: September 28, 2026
Developer: Popov Pavel Gleb, IE
Support: [email protected]

This page is only available in English.

1. What We Store

Your chats with sotie are stored on our servers — everything you write to her, the photos you send her, everything she writes back, her running summaries of your days, and the short set of things she remembers about you. She cannot answer without reading a chat, and cannot remember you between days without keeping one. It runs on Cloudflare (Workers, Durable Objects, R2) and is kept until you delete it (Section 9).

Your phone keeps its own copy as well, so the app is fast and works offline. Deleting the app removes that copy. It does not remove ours.

Your account is Sign in with Apple. We receive a private identifier from Apple, and an email address only if you choose to share it. Your Apple ID password never reaches us.

2. The AI Services That Write Her Replies

sotie's replies are written, photos described, and her voice spoken, by AI models run by other companies. To do that, what they need is sent to them:

• Replies: your message, the recent conversation, her summaries and what she remembers about you, sent through OpenRouter, which routes each request to an AI provider.
• Photos: a photo you send is shrunk on your phone first, with its location and camera details removed, then sent once to an AI model that describes it in words. She answers from that description, and the description is kept with the chat.
• Voice calls: what you say becomes text on your phone, and your audio never leaves it. To speak her answer, her reply is sent through OpenRouter to an AI voice model. We do not keep the audio.

What these companies may and may not do:

• May keep it for a limited time — usually 30 to 55 days — to detect abuse and keep their service safe. A request their systems flag may be reviewed by their staff.
• May not train their AI on it. We only use providers whose terms, or our settings with them, exclude training.
• Your Apple ID and email are not included. A nickname you gave sotie may appear in the chat or memory that is sent.
• They may process it in the United States and other countries.

We may change which AI companies we use, to keep sotie working and to make her better. Every one we use follows the rules above. The current list is in Section 10.

Before your first message, the app asks for your permission to send your chats to these services and to use them as described in Section 3. If you choose not now, nothing is sent.

3. How We Use Your Chats

• To run sotie: to write her replies, remember you, restore your chats on a new phone, and keep you safe (for example, showing crisis resources when a chat suggests you may be in danger).
• To make her better: to improve sotie.
• Never: sold, used for advertising or to target ads, or shared with anyone for their own purposes.

We may share information if the law requires it (for example, a valid court order), or to protect someone's life or safety.

4. Analytics

We use PostHog (servers in the United States) to understand how the app is used and to make sotie better (Section 3).

• Usage events: which screens and features are used, session counts, device type, app version and time zone.
• Chat records:a record of each exchange with sotie, with that request's technical details (AI model, timing, cost), kept for up to 12 months and then deleted. Photos themselves are never stored with PostHog; the words describing a photo are part of the chat.
• Approximate location: your country and city are estimated from your IP address when an event arrives. The IP address itself is not stored. No GPS or precise location is collected.
• Events are labelled with a pseudonymous installation identifier: a random value generated on your device. It lives in the device keychain, so it can survive deleting and reinstalling the app. Never shared with advertisers, never used to track you across other apps or websites.
• Session recording, screen recording and automatic tap capture are switched off.

5. Health-Related Information

What you tell sotie can reveal how you feel — worries, mood, stress, relationships, and sometimes your mental health. Some laws call this health or consumer health data. We collect it only because you write or send it to her, we use it only as described in Section 3, and we ask for your permission before the first message is sent. We never sell it and never use it for advertising. sotie does not read Apple Health, fitness or biometric data.

6. Support & Feedback

If you write to us (me and you → write to us), your message carries your device model, iOS version, app version and installation identifier. Diagnostic logsare attached only if you switch that on — the last 24 hours of technical events, not your chats. It is sent through your device's mail client and used only to answer you.

If you answer one of sotie's feedback questions, we receive your answer and note, your device and app details, language and store region, plan, coarse usage counts and a short list of recent in-app events. No chat content is included in that answer.

7. In-App Purchases

Subscriptions are handled entirely by Apple through StoreKit. We do not process, store, or have access to your payment card information.

8. Children

sotie is not for children under 13, and we do not knowingly collect data from them. Users aged 13 to 17 need a parent or guardian's permission. Companion chatbots may not be suitable for some minors. If you believe a child under 13 is using sotie, write to [email protected] and we will delete that account.

9. Deletion & How Long We Keep Things

• Delete everything: delete your account in the app, or email [email protected] from the device (me and you → write to us carries the identifier we need). That erases your chats, memory, photos and chat records in analytics, and cannot be undone. She starts over.
• Deleting the appremoves your phone's copy only.
• How long:chats, memory and photos — until you delete them. Chat records in analytics — up to 12 months. AI providers — their own limited abuse-monitoring period, usually 30 to 55 days. Backups and operational logs — follow Cloudflare, PostHog, OpenRouter and Apple's own schedules.

10. Third-Party Services

11. Your Choices and Rights

• Say not now to the permission before your first message, and nothing is sent to AI services.
• Withdraw permission at any time by deleting your account. We then stop using your data and erase it (Section 9).
• Ask for a copy of what we hold about you, or ask a question, at [email protected]. We answer within 30 days. If we refuse a request, you can reply to appeal and we will review it again.
• If you live in the EU or UK, we rely on your consent (and, for health information, your explicit consent) and on providing the service you asked for. Some providers are outside your country; transfers rely on the EU-US Data Privacy Framework or standard contractual clauses. You can complain to your local data protection authority.

12. Changes to This Policy

We may update this Privacy Policy. The "Effective date" at the top changes with it. If we start using data you already gave us in a new way, we will ask for your permission in the app first. Other material changes will be announced in the app before or when they take effect.

13. Contact

Questions about your privacy or this policy? Reach us at [email protected].