Privacy Policy

Last updated: October 15, 2026

This Privacy Policy explains how Sutorichat ("Sutorichat," "we," "us," or "our") collects, uses, and shares information when you use the Sutorichat app and website (the "Service"). By using the Service, you agree to the practices described here.

Information we collect

We collect the following categories of information:

  • Account information. When you sign in, we collect your email address. Sign-in is handled by our authentication provider (WorkOS) using a one-time email code or a social login such as Google or Apple. We do not store passwords.
  • Profile data. Optional information you choose to add, such as a username, display name, avatar, and the characters or stories you create.
  • Chat and user content. The messages you send to characters, the characters and stories you create, images you generate or upload, and your in-app activity are stored so the Service can function.
  • Purchase data. When you buy coins or a subscription, the transaction is processed by Apple (App Store) and brokered by RevenueCat. We receive a record of the purchase and entitlement; we never receive or store your full payment card details.
  • Usage and analytics data. We record how you use the Service where a feature needs it, such as what you watch and how far, so we can resume playback, recommend shows, and count views. We do not use third-party product analytics or session replay.
  • Advertising data. When ads are shown, advertising partners may process device and advertising identifiers, IP address, and ad interaction data to deliver ads, measure performance, and prevent fraud, subject to your consent and device privacy settings.
  • Photos (optional). If you set an avatar or save a generated image, we access your photo library. This is used only for the feature you invoke and requires your permission.

How we use information

  • To provide, operate, and maintain the Service.
  • To generate character responses. Your messages are sent to third-party large language model providers to produce replies.
  • To process purchases and manage subscriptions and coins.
  • To show ads and measure their performance.
  • To understand usage, improve features, debug problems, and keep the Service secure.
  • To enforce our Terms of Service and prevent abuse or prohibited content.
  • To communicate with you about your account or support requests.

How we share information

We may sell or license data collected through the Service, including chat content and usage data, to third parties such as AI developers, researchers, and data partners. Before we do, we anonymize the data so that it does not identify you: we remove direct identifiers such as your name, email address, and account identifiers. We do not sell your payment details. We also share information with service providers that help us operate the Service, including:

  • WorkOS for authentication.
  • Render and PlanetScale for backend hosting and data storage.
  • Large language model and image providers for generating character replies and images from your prompts.
  • RevenueCat and Apple for processing in-app purchases and subscriptions.
  • Google AdMob, Meta Audience Network, and Pangle for in-app advertising and ad measurement. See Google's advertising privacy information, Meta's privacy policy, and Pangle's privacy policy.

We may also disclose information if required by law, to protect our rights or the safety of users, or in connection with a merger, acquisition, or sale of assets.

Data retention and deletion

The Delete all chats action removes conversations from your chat history. When you confirm the notice explaining training retention, we retain those conversations and their messages internally for AI training. They are no longer accessible in your chat history or used as memory in future conversations. This action is distinct from deleting your account or requesting erasure of your personal data, which also applies to retained conversations.

We retain your information for as long as your account is active or as needed to provide the Service. You can request deletion of your account and associated data at any time by emailing [email protected]. We will delete or anonymize your data within a reasonable period, except where we are required to retain it by law.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at [email protected].

Children

The Service is intended for adults and is not directed to children. You must be at least 18 years old, or the age of majority in your jurisdiction, to use the Service. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Security

We use industry-standard measures to protect your information, including encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

International users

We operate in the United States and may process and store information there and in other countries where our service providers operate. By using the Service, you consent to the transfer of your information to these locations.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, provide additional notice within the Service.

Contact us

If you have questions about this Privacy Policy or your data, contact us at [email protected].