Privacy Policy

Development draft · 1 September 2026

This is the product-accurate development draft. The operating company, contact address, regional disclosures, and final retention periods must be completed and legally reviewed before launch.

What SodaPeach collects

• Account identity supplied by Google or X.
• Your age attestation and the policy versions you accept.
• Conversations, character settings, generated character images, memories you approve or edit, and relationship state.
• Subscription status, usage, device and security events, reports, and service diagnostics.

Why it is used

We use this data to provide and remember conversations, create and privately store your characters, run subscriptions, enforce limits, keep the service secure, respond to reports, and improve character quality. We do not ask you to upload personal photos for the V1 service.

Service providers

Supabase provides authentication, database infrastructure, and private file storage. xAI processes chat and character-image prompts for generation. Stripe is intended to process subscriptions. Each provider processes only the data needed for its role.

Control and deletion

You can view, edit, or delete character-specific memories and delete conversations. Account deletion removes product data while limited billing, consent, security, abuse-prevention, and safety records may be retained where necessary.

Security and international processing

We use access controls, row-level database policies, encrypted transport, and restricted server credentials. Data may be processed outside your country by our providers. No online service can promise absolute security.

Your rights

The final policy will explain how to request access, correction, export, deletion, restriction, or objection under the laws that apply to you.