Privacy Policy

The short version

• We keep your account, characters, chats and photos so the service works, until you delete them.
• Your chats are intimate. We treat them as sensitive data, keep them private to your account, and don’t publish them.
• We don’t sell your data or share it for advertising.
• We don’t train AI models on your chats or photos.

What we collect

• Account: your email address, and a password if you sign up with email. We store only a salted hash of the password, never the password itself. We store a display name, and when you confirmed your email.
• Google or X: if you sign in with one, we keep its ID for you. Google also gives us your email address. We keep it, and use it to match an existing account, only when Google vouches that it is yours. X gives us your X ID and your name or username, never an email, and we use that name as the display name on a new account. We keep nothing else from either.
• Sign-in: a cookie keeps you signed in until you sign out or go 30 days without a visit. We store only a hashed copy of it. Signing in with Google or X also sets a cookie that lasts 10 minutes and is used only to finish that sign-in.
• Age check: that you confirmed you are 18 or older. If you pass an AgeGO check, we save when you passed, and the country and state you were in. AgeGO runs the check on its own pages, under its privacy policy. It tells us whether you passed, and we tell it the country and state your connection comes from. If the check isn’t accepted, we save no result and you can try again.
• What you create: characters you design, your messages and her replies, things she remembers about you, conversation summaries, photo requests, and the photos made for you, including the face used to keep her looking the same.
• Coins and Premium: your balance, a record of coins added, spent and returned, how many free messages you’ve used, and your plan and when it ends.
• Usage and safety: daily usage counts, request records, and the results of safety checks. Our technical logs record events such as a photo’s size and fingerprint (hash), not your messages.
• Location: our host tells us your country and state from your IP address so we can block places we don’t serve. We don’t save it to your account, except the country and state where you passed an age check.
• Site analytics: on the landing site, Mixpanel records how you use the page, such as pages viewed, clicks, scrolling and the options you pick in the character builder, and makes recordings of visits that replay what happened on the page. Recordings hide what you type, including the name you give her. In the app, Mixpanel gets only a few named events, such as signing up, signing in, the age check, a plan or pack picked and a purchase. It makes no recordings and never gets your messages, name or email address. Analytics stays off when your browser sends Global Privacy Control or Do Not Track.
• Waitlist: if you joined the waitlist, we keep the email address you gave, the plan you picked and when you joined. We never send it to Mixpanel.
• Payments: our payment processor, CCBill, collects your card details on its own page. It tells us about each payment, and we keep only what we need to add your plan or coins, such as a transaction ID, the product, the amount and whether it went through. We don’t store your card details.
• Reports: if you send a content report, we store the link or place you give, your reason and details, and your email address if you add one.

How we use it

• To sign you in, check your age, and email you to confirm your address or reset your password.
• To run the chat, write her replies, and make the photos you ask for.
• To keep each character consistent, including her face.
• To count free messages, charge coins and turn Premium on and off.
• To enforce our rules and the law, including reporting apparent child sexual abuse material to NCMEC.
• To prevent fraud and abuse, answer support requests and content reports, and meet legal duties such as counting crisis referrals.
• To see how people use the site and make it better.

Sensitive data

Your chats may reveal your sex life, sexual orientation or health. We use what you share only to provide the chat and photos you ask for, keep you safe, and comply with the law. By confirming you are an adult and chatting, you consent to that use. You can delete it at any time.

Washington and Nevada residents: see our Consumer Health Data Privacy Policy.

Who we share it with

• AI providers that run the text, image and safety-check models for us. They receive your messages, photo requests and character details to produce replies and photos.
• Cloudflare, which hosts the site, database and photo storage, and sends our emails.
• Mixpanel, which measures how people use the site and stores visit recordings.
• CCBill, our payment processor. It gets what you give it at checkout, and tells us whether you paid.
• AgeGO, our age-verification service, when we send you through an age check. It gets what you give it, and tells us whether you passed.
• Google or X, if you sign in with them.
• NCMEC and law enforcement when the law requires it, or when someone’s safety is at risk.
• A buyer of the business, who must follow this policy.

These providers may use your data only to provide their service to us. We don’t sell personal data or share it for targeted advertising.

Who can see your chats

Your chats and photos are private to your account. Photos are stored privately and sent only to your signed-in account. Automated checks review requests and photos for safety. Our staff look at your content only to help you when you ask, to investigate a report, to enforce our rules, or to meet a legal duty.

How long we keep it

Until you delete it or close your account. Deleting a conversation removes its messages, memories and photos. Deleted records can stay in database backups for up to 30 days.

Some records are kept longer because the law requires it: material reported to NCMEC is preserved for one year, and payment records are kept as long as tax law requires. We keep content reports, and what we did about each one, as a record.

Waitlist emails are kept until you ask us to remove them or we delete the list. To be removed, email us at ronald@aibaker.io.

Your choices and rights

Delete memories, photos, characters and conversations in the app, or delete your whole account under Delete my account on the account sheet. To get a copy of your data or correct it, email us at ronald@aibaker.io. We answer within 45 days. If we say no, you can appeal by replying, and we answer the appeal within 60 days.

We honor Global Privacy Control and Do Not Track signals. We don’t track you across other sites.

Children

bitchbuilder.com is for adults only. We don’t knowingly collect data from anyone under 18. If we learn we have, we delete it and close the account. Tell us at ronald@aibaker.io.

Security

Data is encrypted in transit, photos are kept in private storage, and access is limited to people who need it. No system is perfectly secure. If a breach affects your data, we’ll tell you as the law requires.

Changes

We post changes here with a new date. We’ll ask before using your data in a materially different way, such as AI training.

Contact

RJ Galactic Consulting LLC, 5511 Parkcrest Dr, Suite 103, Austin, TX 78731. Email ronald@aibaker.io.