Ayme — Privacy Policy

Last updated: October 13, 2026 Contact: juan@saturntech.company

Ayme is an AI companion app ("Ayme", "we"). This policy explains what data we collect, how we use it, and the choices you have. It is written to be read, not skimmed, and it only promises what the app actually does.

The most important things

• Ayme is artificial intelligence, not a person. Conversations are generated by AI language models.
• Ayme is not therapy, medical care, or an emergency service. If you are in danger, contact your local emergency number.
• Your conversations are private by default: no ads, no selling of data, no cross-app tracking, no third-party analytics SDKs.
• A small number of safety situations may involve human review (see below).
• For support and quality debugging, the operator can open a conversation through an authenticated admin tool. This access is limited to the operator, logged, and never used for advertising.

No account, no email

Ayme does not ask you to create an account. When you first open the app, it generates a random identifier and stores it in your device's secure storage (the iOS Keychain). That identifier is how we tell your conversation apart from everyone else's. We do not collect your name, email address or phone number unless you choose to tell them to Ayme in conversation.

Because the identifier lives in the Keychain, it survives uninstalling and reinstalling the app on the same device. A new device starts fresh: "Restore purchases" restores your subscription access, not your conversation history. If you want data from a previous device deleted, email us.

What we collect

• Your messages. Text you write, and voice messages you send. Voice recordings are transcribed to text to generate a reply; the audio is processed in memory and sent to the speech-recognition provider, and we do not store the audio file.
• Derived profile. So that Ayme feels like it knows you, we generate and store summaries of your conversations ("memory snapshots"), a writing-style profile, detected goals, important people and recurring topics ("insights"), the name you give Ayme and, if you share it, your own name. All of this is derived from what you choose to say in chat.
• Notification data. Your device push token and timezone, used to deliver Ayme's messages and to respect your local quiet hours (no notifications between 22:00 and 09:00 local time).
• Purchase data. Your subscription status and plan, and the transaction identifiers Apple assigns to your purchase. Apple also sends us a signed notification for each subscription event (purchase, renewal, failed renewal, expiration, refund) that includes the product, the amount charged and the currency. Payments are processed entirely by Apple; we never see your card or payment details.
• Referral code. If you enter an ambassador's code, we store it to attribute the referral and to calculate that ambassador's commission on your payments. Ambassadors only see aggregate counts and amounts, never who you are or what you say.
• Product events. A few internal events such as "onboarding completed" or "paywall seen", tied to your identifier, used to understand where people get stuck. These are stored in our own database, not sent to any analytics company.
• Technical logs. Operational events (errors, notification delivery status, usage volumes and AI cost accounting) needed to keep the service reliable.

We do not collect your contacts, location, photos, or browsing activity.

How your messages are processed (third-party AI services)

• What is sent. To generate each reply, we send to AI model providers: the text of your messages, the transcription of your voice messages, and the derived profile described above (memory snapshots, writing-style profile, detected goals, important people and recurring topics, the name you give Ayme and your own name if you shared it). We do not send your identifier, push token, purchase data or referral code to AI providers.
• Who it is sent to. Replies are generated by Anthropic (Claude models) and Moonshot AI (Kimi models), accessed through OpenRouter (an API router that forwards the request to the selected provider). Voice messages are transcribed by OpenAI (Whisper speech-recognition API). The set of providers may change as models improve; this policy will be updated when it does.
• Your permission. Before your first conversation, the app shows you this information on a dedicated screen and asks for your explicit consent. Nothing is sent to an AI provider until you accept. You can review it at any time in Settings → Your data and AI, and withdraw it by deleting your account.
• Protection. We access these providers only through their APIs, under their published API terms, which commit them not to use data sent this way to train their models and to apply confidentiality and security obligations to it. We select providers on that basis.
• We do not train AI models on your conversations.

Human review (safety only)

Ayme is AI end to end, with one exception: safety. If our systems detect that you may be at risk (for example, signs of self-harm or crisis) or that you are severely frustrated with the app, an excerpt of the relevant message can be sent to our operator through a private Telegram channel so a human can review the situation and, in rare cases, step in. This exists to protect you, not to monitor you. These alerts are rate-limited and limited to the flagged content.

Crisis situations

If you express intentions of self-harm or immediate danger, Ayme will respond honestly, telling you it is an app and not a professional, and will show you verified crisis resources for your region (for example 024 in Spain or 988 in the United States). These numbers are written into the app and verified by us, never generated by AI. For 72 hours after such an event, Ayme will not send you proactive notifications.

Data retention and deletion

• Your data is kept while your identifier exists.
• You can delete everything from the app: Settings → Delete account. Deletion removes, from our database, your messages, memory snapshots, writing profile, goals, people, insights, usage records, scheduled notifications, product events and the record of your identifier, and it clears the identifier and local data from your device. It cannot be undone.
• You can also request deletion by email at juan@saturntech.company.
• What we keep after deletion: Apple's transaction records (transaction identifiers, product, amount, currency and dates) as accounting records, for as long as tax and accounting law require. They contain no conversation content and are no longer linked to a usable profile.
• Operational logs are kept for 7 days and contain at most short message excerpts (safety alerts) and technical metadata.

Where your data lives

Our database and servers are hosted on Railway (PostgreSQL), in the United States (US West, Oregon). AI providers process message content as described above. Push notifications are delivered through Expo's push service and Apple. Subscription events reach us from Apple's App Store servers.

Your rights

Depending on where you live (for example in the EU, UK or California), you may have the right to access, correct, export or delete your data, and to object to certain processing. You can exercise deletion directly in the app; for anything else, email juan@saturntech.company and we will respond within 30 days. We process your data to provide the service you asked for, to keep it safe (legitimate interest) and, for notifications, on the basis of the permission you grant in iOS.

Children

Ayme is rated 17+. It is not directed at children and must not be used by anyone under 17.

Changes

We will update this policy as the product evolves and change the date above. Material changes will be announced in the app.