Privacy Policy

Fondness ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website and services at fondness.app.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR) where applicable.

By using our services, you acknowledge that you have read and understood this policy. If you do not agree with our practices, please do not use our services.

We collect the following categories of personal data:

Under the GDPR, we rely on the following lawful bases to process your personal data:

Contract performance : Processing your account information, conversation data, and payment information is necessary to provide you with the services you have signed up for.

Legitimate interests : We process usage and technical data to maintain the security, stability, and performance of our services, and to improve the user experience. We have assessed that these interests do not override your fundamental rights and freedoms.

Consent : Where we send you marketing communications or use non-essential cookies, we do so only with your explicit consent. You can withdraw consent at any time.

Legal obligation : We may process data where required to comply with applicable laws, regulations, or legal proceedings.

We use your personal data to:

• Provide and maintain your account and access to our services
• Enable AI characters to remember you across conversation sessions
• Process payments and manage subscriptions
• Send transactional emails (account confirmations, billing receipts)
• Improve our services, fix bugs, and develop new features
• Detect and prevent fraud, abuse, and security threats
• Comply with legal obligations

We do not sell your personal data to third parties. We will never monetise your conversations, profile information, or any other personal data by selling it to advertisers, data brokers, or any other third party.

We may share limited data with trusted service providers who help us operate our platform (such as payment processors, cloud hosting providers, and email delivery services). These providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.

We may disclose personal data if required by law, regulation, legal process, or governmental request.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how you use our services.

Essential cookies are required for the platform to function and cannot be disabled. These include authentication tokens and session identifiers.

Analytics cookies help us understand usage patterns so we can improve the product. These are only set with your consent.

You can manage your cookie preferences through your browser settings at any time. Disabling essential cookies may prevent you from using certain features.

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it for longer.

Conversation data is retained for the duration of your account to enable the memory feature. You can delete individual conversations at any time from within the app.

Under the GDPR, you have the following rights regarding your personal data:

• Right of access : You can request a copy of all personal data we hold about you.
• Right to rectification : You can ask us to correct any inaccurate or incomplete data.
• Right to erasure (Article 17) : You can request that we delete your personal data. We will comply unless we have a lawful reason to retain it.
• Right to restrict processing : You can ask us to limit how we use your data in certain circumstances.
• Right to data portability : You can request your data in a structured, commonly used, machine-readable format.
• Right to object : You can object to processing based on legitimate interests at any time.
• Right to withdraw consent : Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@fondness.app. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption in transit and at rest, access controls, and regular security reviews.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.