kudl.ai Privacy Policy

1. Who We Are

kudl.ai is an AI companion platform that lets you chat with fictional, AI-generated personas through text, voice, and images. All companions are entirely fictional and AI-generated; they are not real people, and any resemblance to a real individual is coincidental.

This Privacy Policy applies to the kudl.ai website and web application. It works alongside our Terms of Service. If you have questions about how we handle your data, you can reach us any time at support@kudl.ai.

2. Strictly 18+

kudl.ai is an adult (18+) service and is intended only for people who are at least 18 years old (or the age of legal majority in your jurisdiction, if higher). The Service can include mature and explicit content.

By using kudl.ai you confirm that you are 18 or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected data from a person under 18, we will delete the account and associated data. If you believe a minor has provided us with information, please contact support@kudl.ai immediately so we can remove it.

See Section 11 (Children's Privacy) for more detail.

3. Information We Collect

Account and authentication data. When you sign up with email and password, we collect your email address and a securely hashed password. Passwords are stored and managed by our authentication provider (Supabase Auth) as a one-way hash; we never see or store your plaintext password, and password hashes are never sent to other third parties. We also generate a unique internal user ID (a UUID) that links all of your data within the Service. If you choose to sign in with Google, see 'Google sign-in data' below.

Google sign-in data (optional). If you sign in using Google OAuth, Google shares a limited set of basic profile information with us through our authentication provider: your email address and basic profile details such as your name and avatar picture. We use this only to create and authenticate your account. We do not request access to your Google contacts, Gmail, Drive, or other Google data. This information is stored in your account profile (in Supabase auth user metadata). Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Profile information. You may optionally provide a display name / full name and an avatar image, which are stored in your account profile.

Companion and personalization settings. We store the configuration of the companions you create or customize, including companion name, emoji, 'vibe', persona description (custom text you write), bio, an in-app phone value, age setting, and timezone. The timezone is used to give your companion local time and weather context (see Section 4).

Chat content. We store the messages you exchange with your companions, including the text content, the role (you or the companion), timestamps, the companion involved, and a reference (path) to any image attached to a message. To give your companion context, we load roughly the last 20 messages per companion when generating a reply.

Memories. The Service may extract short key-value 'memories' from your conversations (for example, a stated preference) so your companion can remember context across chats. These are stored per companion (limited to a small number extracted per turn). You can view and delete individual memories on your Profile page (under 'Memories'), and you can turn memory extraction off entirely there — when off, no new memories are saved.

Uploaded images. If you upload images in chat, the image files are stored in our cloud storage (Supabase Storage) under a path tied to your user ID, and a reference to the file is saved with the related message.

Voice input and output. If you use voice features, your spoken audio is sent to our voice provider for transcription (speech-to-text), and reply text is sent to the same provider to generate spoken audio (text-to-speech). Both your voice notes and the companion's generated voice replies are stored in our cloud storage (Supabase Storage) under a path tied to your user ID — alongside the transcribed text saved as normal chat content — so voice messages remain playable when you reload the app. Stored audio is retained until you erase that chat or delete your account (see Section 7).

Usage, quota, and in-app counters. We keep counters and records needed to run the Service, such as your daily image-generation usage (which resets daily), your subscription tier (free, basic, or premium), your in-app Roses balance (a spendable token used to unlock gated photos), and the recent persona photo paths last sent to you (to avoid repeating images).

Subscription and payment metadata. When you purchase a subscription, we store billing-related records such as your Stripe customer ID, Stripe subscription ID, product and price IDs, subscription status, billing periods, and the environment (test/live). Payments and card details are handled entirely by Stripe — we do not collect, see, or store your full card number or other payment card details.

Technical and log data. Like most web services, our hosting and infrastructure providers automatically process standard technical information such as your IP address, browser/user-agent, and request metadata as part of normal server logs. We do not deliberately store this as part of your profile, but it is processed by our hosting and network providers (see Section 6).

Information we do NOT collect about you. We do not collect precise device GPS location from you. Any latitude/longitude used by the Service comes from a companion's configured timezone for weather/time context, not from your device or your real location.

4. How We Use Your Information

To provide the Service: to create and secure your account, authenticate you, deliver chat, voice, and image features, and keep your companions and conversations available to you.

To personalize your experience: to remember your companion settings and conversation context (including 'memories') so interactions feel consistent and tailored to you.

To generate AI content: to produce companion text replies, understand images you share, synthesize and transcribe voice, and generate companion photos — which requires sending the relevant content to our AI sub-processors (see Section 5).

To handle payments and subscriptions: to process purchases through Stripe, manage your subscription tier and billing, and provide access to paid features.

To enforce limits and prevent abuse: to track usage quotas (such as daily image generation), manage your Roses balance, and protect the Service against misuse, fraud, and violations of our Terms.

To provide context features: to fetch general local time and weather for a companion using a public weather API based on the companion's configured timezone (no personal data is sent for this).

To maintain, secure, and improve the Service: to operate our infrastructure, debug issues, and keep the platform reliable and safe.

To communicate with you: to send service-related messages such as account, security, or password-reset emails, and to respond to your support requests.

To comply with law: to meet legal, tax, and regulatory obligations, and to respond to lawful requests.

5. Third-Party Sub-Processors

We rely on trusted third-party providers ('sub-processors') to run kudl.ai. We share only the data each provider needs to perform its function. Each provider processes data under its own privacy policy and data-handling terms, which may include logging or retaining data for their own monitoring, security, or — in some cases — model-training purposes. The providers we use are listed below.

Supabase (database and authentication) — Provides our backend Postgres database and authentication (email/password and OAuth), session management, and row-level security. Stores your account/profile data, chat messages, memories, companion settings, subscription records, Roses balance, usage counters, and companion photo metadata, all held server-side.

Supabase Storage (file storage) — S3-compatible storage used to hold and serve files. Stores your uploaded chat images, your voice notes, and the companion's generated voice replies (all under paths tied to your user ID), plus generated companion photos (stored in a shared persona library used across users).

Google (OAuth sign-in) — If you choose Google sign-in, Google authenticates you and shares your email and basic profile info (name, avatar) with us via Supabase. Google does not receive your chat content. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Your use of Google sign-in is also subject to Google's own privacy policy.

Stripe (payments) — Processes subscription payments and provides billing/customer-portal functionality (accessed via a payment connector gateway). Receives your email and user ID (as metadata) and manages your Stripe customer ID, product/price IDs, subscription status, and billing periods through subscription webhook events. Stripe handles all card data directly; we do not store card numbers.

OpenRouter (LLM text and vision) — Our primary provider for generating companion text replies and for image/photo understanding (vision). Receives chat message text, the content of images shared during vision turns, and companion persona/context. OpenRouter may log requests for API monitoring per its privacy policy.

Lovable AI Gateway (optional fallback LLM) — An optional fallback LLM and vision provider used only for resilience when the primary provider is unavailable, and only if configured. Receives the same categories of data as OpenRouter (chat text, images, persona context).

ElevenLabs (voice) — Provides text-to-speech (voice generation) and speech-to-text (transcription). Receives reply text sent for voice generation and your voice audio recordings sent for transcription. ElevenLabs may retain data per its privacy and data-handling policy.

AtlasCloud (image generation) — Our primary image-generation provider (Z-Image Turbo model). Receives photo prompts (descriptive text of companion appearance and your request) and generation metadata to produce companion images, which can include explicit/mature content. AtlasCloud may log prompts per its policy.

Civitai (fallback image generation) — A fallback image-generation provider used only when the primary provider is unavailable, and only if configured. Receives photo prompts (appearance tokens, your request, negative prompts) and generation parameters.

Open-Meteo (weather) — A public weather API used to provide a companion's local time/weather context. Receives only latitude/longitude derived from the companion's timezone configuration (not your personal data); results are briefly cached. No personal data is shared.

DiceBear (default avatars) — A public API used to generate default companion avatar images from a deterministic seed. Receives only a companion name as a seed parameter; no personal user data is shared.

Google Fonts (typography) — Loads web fonts for the user interface. As with any externally loaded resource, your browser sends standard HTTP headers (such as IP address and user-agent); Google Fonts does not set cookies for this.

Vercel (hosting and network) — Hosts and serves the application; processes standard server logs (IP, user-agent, request/response metadata) per its privacy policy.

Cloudflare (application runtime and network) — Runs the application's serverless backend behind our edge. HTTP traffic that reaches the application is processed by Cloudflare, which handles standard server logs (IP address, user-agent, and request/response metadata) per its privacy policy.

We encourage you to review the privacy policies of these providers to understand how they handle data. We may add, remove, or change sub-processors over time as needed to operate the Service; material changes will be reflected in this policy.

6. How We Share Information (We Do Not Sell Your Data)

We do not sell your personal data, and we do not share it with third parties for their own advertising or marketing.

We share data only in these situations: (a) with the sub-processors listed in Section 5, strictly to operate the Service on our behalf; (b) to comply with the law, a valid legal request, or to protect the rights, safety, and security of kudl.ai, our users, or the public; and (c) in connection with a business transfer (such as a merger, acquisition, or sale of assets), in which case we will require the recipient to honor this Privacy Policy or notify you of any material change.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer or use Google user data for serving advertisements, and we do not allow humans to read this data except as permitted under that policy (for example, with your consent, for security purposes, to comply with applicable law, or where the data is aggregated and used for internal operations).

Note that generated companion photos are stored in a shared persona library and may be reused across users. This library contains companion images and generation metadata — including the text prompt the photo was generated from, which can be derived from a photo request made in chat — but it is not linked to your account or any personal identifier, and the prompt text is not readable by other users.

7. Data Retention

We keep your information for as long as your account is active or as needed to provide the Service, and otherwise as required to meet legal, accounting, or security obligations.

Specific practices: your account/profile data, chat messages, and memories are retained until you delete your account or request deletion; voice audio (your voice notes and generated voice replies) and uploaded images are retained until you erase the related chat or delete your account; daily image-usage counters reset every day (UTC); only the most recent persona photo paths sent to you are kept (older entries are automatically removed); subscription and billing records are retained for billing history and legal/tax compliance; your Roses balance persists until used or your account is deleted; and generated companion photos may be retained in the shared persona library for reuse.

You can delete data yourself in the app: 'Erase chat' (in the chat menu) permanently deletes a conversation's messages, its memories, and your stored voice/image files for that chat, and 'Delete account' (on your profile page) permanently deletes your account and all data tied to it. You can also email support@kudl.ai and we will action your request within 30 days (and in any event within any shorter period required by applicable law), as described in Section 9.

Data processed by third-party providers is retained according to each provider's own policies (for example, some AI providers may log prompts or audio, and Stripe retains payment records as required by law). Please review those providers' policies for details.

8. Security

We take reasonable technical and organizational measures to protect your information. Data is stored server-side with our database provider using access controls and row-level security so that your data is scoped to your account. Passwords are stored only as one-way hashes, and card payments are handled directly by Stripe so that we never store your card details. Traffic to the Service is encrypted in transit.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep your login credentials confidential. If you believe your account has been compromised, contact us at support@kudl.ai.

9. Your Rights and Choices

Depending on where you live, you may have rights over your personal data, including the right to access, correct, export, or delete it, and to object to or restrict certain processing. We honor these rights for all users where we are able.

Deletion: you can permanently delete your account and all associated data yourself using the 'Delete account' button on your profile page, or erase an individual conversation (messages, memories, and stored voice/image files) with 'Erase chat' in the chat menu. You can also ask us to delete your account by emailing support@kudl.ai; we will action verified deletion requests within 30 days (or any shorter period required by applicable law). We may need to verify your identity before acting on an emailed request, and we may retain limited information where required by law (for example, billing records).

Access and export: you can request a copy of your data by emailing support@kudl.ai and we will provide it within the same timeframe.

Subscriptions: you can cancel a paid subscription at any time; access continues until the end of your current billing period. You can manage billing through the Stripe-powered billing portal where available.

Profile data: you can update or remove optional profile details (such as display name and avatar) and edit your companion settings within the app.

We will not discriminate against you for exercising any of these rights.

10. Cookies and Analytics

We use cookies and similar technologies that are necessary to operate the Service — for example, to keep you signed in and maintain your session.

We may use limited analytics to understand how the Service is used so we can improve it. We do not use your private chat content for advertising, and we do not sell your data to advertisers.

You can control or clear cookies through your browser settings, though disabling essential cookies may prevent you from staying signed in or using parts of the Service.

11. Children's Privacy

kudl.ai is strictly for adults aged 18 and over and is not directed to children. We do not knowingly collect personal information from anyone under 18.

If you are under 18, do not use the Service or provide us any information. If we become aware that we have collected information from a person under 18, we will delete that information and terminate the associated account. If you believe a minor has used the Service, contact support@kudl.ai and we will take prompt action.

12. International Data Transfers

kudl.ai is operated using global cloud infrastructure, and our sub-processors (listed in Section 5) may store and process data in countries other than the one in which you live, including the United States and other jurisdictions.

Where data is transferred internationally, we and our providers take steps intended to ensure your information continues to be protected consistent with this policy and applicable law. By using the Service, you understand that your information may be processed in these locations.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the Service, our sub-processors, or legal requirements. When we make material changes, we will update the 'Last updated' date and, where appropriate, provide additional notice.

Your continued use of kudl.ai after an updated policy is posted means you accept the changes.

14. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or wish to request access to or deletion of your data, contact us at support@kudl.ai.

We will respond to privacy requests within a reasonable timeframe and in accordance with applicable law, and will action verified deletion requests within 30 days as described in Sections 7 and 9.