Privacy Policy
This policy explains in plain language what Pink AI does with your information, how long we keep it and how you take it back.
Last updated: 12 August 2026
- Who we are. Pink AI operates the website at pink-ai.org and the companion chat experience offered through it. In this policy, 'we' and 'Pink AI' mean that operator.
- Scope of this policy. This policy covers every visitor to Pink AI, whether you browse the companion profiles anonymously or create an account and start chatting.
- Age requirement. Pink AI is intended for adults aged 18 or over. We do not knowingly process the data of minors, and any account identified as belonging to a minor is closed and erased.
- Account information. When you register we collect an email address, a display name and an encrypted password. We do not require your legal name, postal address or date of birth beyond age confirmation.
- Conversation content. Messages you exchange with a companion are stored so that the memory feature works. They are linked to your account and are not published, sold or shared with advertisers.
- Technical data. We record IP address, browser type, device category, language and referring page. This information keeps the service secure and helps us diagnose faults.
- Payment data. Card details are handled entirely by our payment processors. Pink AI receives only the last four digits, the card brand and the outcome of the transaction.
- Voice and media. If you send a voice note, the audio is stored alongside the conversation it belongs to and is deleted when that conversation is deleted.
- Legal bases. We process data to perform our contract with you, to pursue legitimate interests such as fraud prevention and service improvement, to comply with law, and on consent where consent is required.
- Purposes of processing. Data is used to operate the chat, maintain companion memory, provide support, process payments, prevent abuse, measure performance and meet legal obligations.
- No sale of personal data. Pink AI does not sell personal information and does not disclose it to third parties for cross-context behavioural advertising.
- Service providers. We rely on hosting, storage, analytics, email delivery and payment providers. Each is bound by contract to process data only on our instructions.
- International transfers. Where data leaves your region we rely on adequacy decisions or standard contractual clauses to keep protection at an equivalent level.
- Retention of conversations. Conversations are retained while your account is active. When you delete a thread it is removed from live systems immediately and from backups within thirty days.
- Retention of account data. Account records are held for the life of the account and for a further ninety days after closure, after which they are permanently erased or anonymised.
- Security measures. We use encryption in transit and at rest, role-based internal access, mandatory two-factor authentication for staff, and continuous monitoring of production systems.
- Breach notification. If a breach is likely to affect your rights we will notify you and the competent supervisory authority without undue delay and in any case within seventy-two hours of becoming aware.
- Right of access. You may request a copy of the personal data we hold about you, including an export of your conversation history.
- Right to rectification. If any information we hold is inaccurate or incomplete you can correct it in your account settings or ask us to do it for you.
- Right to erasure. You can delete individual conversations, a companion relationship or the entire account. Deletion is permanent and cannot be reversed by our support team.
- Right to restrict and object. You may ask us to pause certain processing or object to processing based on legitimate interests, and we will comply unless compelling grounds require otherwise.
- Right to portability. Your conversation history and account details can be exported in a structured, machine-readable format at any time.
- Withdrawing consent. Where processing rests on consent you can withdraw it at any moment without affecting the lawfulness of processing carried out before withdrawal.
- Cookies and similar technologies. Pink AI uses a small set of cookies described in our Cookie Policy. Non-essential cookies are only set once you agree to them.
- Analytics. We measure aggregate usage — page views, session length, feature adoption — using privacy-respecting analytics that do not build advertising profiles.
- Automated processing. Companion replies are produced automatically, but no automated decision is taken that produces a legal or similarly significant effect on you.
- Third-party links. Pages on Pink AI may link to external websites. Their privacy practices are their own and this policy does not apply to them.
- Complaints. If you believe your rights have been infringed you may lodge a complaint with your local data protection authority, and we would appreciate the chance to resolve it first.
- Changes to this policy. Material changes are announced on this page and, where the change affects your rights, by email at least fourteen days before they take effect.
- Contact. Privacy requests can be sent to our data protection contact published on Pink AI, and are acknowledged within seventy-two hours.
Getting in touch
Questions about this document can be sent to our legal desk through the contact details published on Pink AI. We answer every request within thirty days.