Privacy Policy

Last updated: July 2026

Our commitments

  • Your conversations are never used to train AI models

    Always on, on every plan. We only send your messages to AI providers under terms that prohibit training on them, and we set that restriction on every single request.

  • We never sell your data or share it for advertising

    Not to advertisers, not to data brokers, not to anyone for marketing of any kind. We do not run ad networks, we do not build advertising profiles, and we do not share your information for cross context behavioural advertising.

  • AI providers never receive your account details

    Requests carry no account identifier: no email, no user ID, no billing information. A provider sees the conversation it is asked to continue and has no way to link it to you or to any other conversation. What you type into a chat is part of that conversation, so the usual advice applies: do not share anything you would not want processed.

  • You can turn on zero data retention

    Available on paid plans in Settings. With it on, your messages are routed only to AI providers that store nothing at all: they process your request and discard it. A few models have no such provider available and will ask you to choose another.

1. Introduction

SognoAI ("we," "our," or "us") explains here how we collect, use, and protect your information when you use our AI character chat and image generation platform ("the Service"). This policy covers everyone who uses the Service. By using it, you agree to the practices described below.

2. Information We Collect

Account Information

  • Email address, provided through our authentication provider
  • An account identifier issued by that provider
  • Account creation and update timestamps
  • Subscription status and plan. Card details are handled by our payment provider and never reach our servers
  • Whether you have confirmed you are 18 or older, and whether you have chosen to see mature content

Content You Create

  • Characters you make: names, descriptions, personas, scenarios, world information
  • Chat conversations and messages
  • Images you upload, and images generated for you
  • Documents, audio, and video you attach to a chat for analysis
  • Your profile settings: display name, pronouns, and any personas you write

Voice

If you use voice chat, speech to text, or text to speech, audio is sent to a speech processing provider to be transcribed or synthesised. We do not store audio recordings on our servers, and we do not create or store voiceprints or any other biometric identifier. Transcripts of what you said are saved as ordinary chat messages, and you can delete them like any other message.

Character Memory

When memory is enabled, a character can save short facts from your conversations so it remembers them next time, such as a name you gave it or a preference you mentioned. These are stored against your account and that character, and are included in later prompts to keep the conversation consistent. You can view, edit, and delete every saved memory in the chat settings, and you can switch memory off entirely. Memory is never used to build an advertising or marketing profile.

Usage Data

  • Credit consumption and quota usage, so we can bill and enforce limits accurately
  • Which features are used and when
  • Device and browser type
  • IP address, and the approximate region derived from it
  • Access timestamps and error diagnostics

3. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Generate AI replies, images, and speech at your request
  • Authenticate you and keep your account secure
  • Store and retrieve your characters and conversations
  • Process payments, manage subscriptions, and meter credit usage
  • Respond to your support requests
  • Detect, investigate, and prevent fraud, abuse, and security incidents
  • Understand which features are used, in aggregate, to decide what to build
  • Meet our legal obligations

We do not use your conversations to train AI models, we do not sell your personal information, and we do not share it with anyone for their own marketing.

4. How AI Processing Works

To generate a reply, an image, or speech, we pass your request to specialist AI providers. This is the part of the Service that involves the most sensitive data, so here is exactly what happens.

What we send

The conversation itself: the character's description, the messages in the current chat, any attachments you added, and any memories that character has saved. Nothing else travels with it. In particular we do not send your email address, your account identifier, your billing details, or your IP address, and we do not tag requests in a way that lets a provider group them together. A provider cannot tell who you are or that two conversations came from the same person.

The exception is anything you write yourself. If you tell a character your real name or where you live, that text is part of the conversation and is sent with it, because it has to be for the character to respond.

No training

Every request we make carries an instruction restricting it to providers that are contractually barred from training on the content. This applies on every plan, to every conversation, and there is no setting to weaken it.

Zero data retention

Providers ordinarily keep requests briefly for abuse monitoring. On paid plans you can turn on zero data retention in Settings, which restricts routing to providers that retain nothing whatsoever. Some models have no zero retention provider available, and the model picker will tell you which.

Incognito chats

An incognito chat is not saved: no conversation, no messages, and no memories are written to our database, and generated images are not stored. Credit usage is still recorded, because it has to be for billing.

5. Who We Share Information With

We share information only with service providers who process it on our behalf, under contracts that limit them to our instructions and prohibit using it for their own purposes. We describe them by category rather than by name so this page stays accurate as the underlying services change:

  • Authentication and payments: account sign in, subscription and card processing
  • AI providers: chat model, image generation, and speech processing, as described in section 4
  • Hosting, database, and file storage: running the Service and storing your content
  • Product analytics: aggregate usage measurement, as described in section 6

We will give notice through the Service before introducing a new category of recipient. If you need the current list of named providers, for example for a due diligence or compliance review, contact us and we will provide it.

We do not sell or share for advertising

We do not sell personal information, and we do not share it for cross context behavioural advertising, as those terms are defined under California law. We do not disclose your information to advertisers, data brokers, or any third party for their own marketing.

Public content

Characters you mark as public are visible to everyone, including their description, persona, scenario, and portrait, and they can be indexed by search engines. Your conversations are never public, including conversations with a character someone else published. Private characters are visible only to you.

Legal requirements

We may disclose information where we are legally required to, or where it is necessary to investigate suspected abuse or to protect the rights and safety of our users or the public. We will resist requests that we consider overbroad or improper.

Business transfers

If the Service is acquired or merged, your information may transfer to the acquiring entity, which would remain bound by this policy until you are given notice of any change.

6. Cookies and Analytics

We use a small number of cookies and similar technologies:

  • Essential: keeping you signed in and keeping your session secure. These cannot be turned off, because the Service does not work without them
  • Preferences: remembering settings such as your chosen model and display options
  • Product analytics: measuring which pages and features are used, so we know what to improve

Analytics measure how the Service is used in aggregate. They are not used to build advertising profiles and the data is not sold or shared for marketing. We do not record your screen and we do not log the contents of your conversations to our analytics provider. You can block cookies in your browser, though the Service will not work correctly without the essential ones.

7. Security

  • All traffic is encrypted in transit using HTTPS and TLS
  • Authentication is handled by a specialist provider, so we never store your password
  • Uploaded and generated images are served through an access controlled proxy rather than public links
  • Every request for your data checks that it belongs to your account
  • Card details are handled entirely by our payment provider and never touch our servers

No system is perfectly secure. We work to protect your information but cannot guarantee absolute security, and we will notify affected users and regulators as required by law if a breach occurs.

8. Data Retention

  • Account data: kept while your account is open, and deleted within 30 days of account deletion
  • Your content: kept until you delete it, or until your account is deleted
  • Incognito chats: never written to our database at all
  • Voice audio: not retained by us once it has been transcribed or synthesised
  • Usage and billing records: kept for up to 7 years where tax and accounting law requires it
  • Security and abuse logs: kept for up to 12 months

Deleted data may persist in encrypted backups for up to 30 days before those backups rotate out.

9. Your Rights and Choices

Controls in the Service

  • Turn zero data retention on or off, on paid plans, in Settings
  • Start an incognito chat, which is never saved
  • View, edit, or delete anything a character remembers about you, or switch memory off
  • Delete individual messages, whole conversations, characters, and images
  • Change your display name, pronouns, and personas at any time

Access, correction, and portability

You can view and correct most of your information directly in the Service. Contact us for a copy of your data in a portable format and we will provide it within 30 days.

Deletion

You can delete individual content at any time, or ask us to delete your account entirely. Account deletion is permanent and removes your characters, conversations, images, and saved memories. We may retain the minimum records needed for billing, tax, and abuse prevention as described in section 8.

Marketing

You can unsubscribe from product and marketing emails at any time. We still need to send essential account messages, such as billing and security notices.

Automated signals

We honour Global Privacy Control signals where applicable. Since we do not sell or share personal information for advertising, there is nothing for such a signal to opt you out of.

If you are in the UK or EEA

You have the right to access, correct, erase, restrict, and object to processing of your personal data, and the right to data portability. You also have the right to complain to your local data protection authority. Contact us and we will respond within one month.

If you are in California

You have the right to know what personal information we collect and why, to request correction or deletion, and to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of. We will not discriminate against you for exercising any of these rights.

10. Legal Bases for Processing

If you are in the UK or EEA, we rely on the following legal bases under the GDPR:

  • Performance of a contract: providing the Service, storing your content, generating AI replies, and processing payments
  • Legitimate interests: keeping the Service secure, preventing fraud and abuse, and understanding aggregate usage to improve the product
  • Consent: non essential cookies and marketing emails, which you can withdraw at any time
  • Legal obligation: tax, accounting, and responding to lawful requests

11. Age Requirement

The Service is for adults. You must be 18 or older to create an account, and mature content is available only to users who have confirmed their age. We do not knowingly collect information from anyone under 18. If you believe a child has created an account, contact us and we will delete it and the associated data.

12. International Data Transfers

We and our service providers operate in several countries, including the United States, so your information may be processed outside your country of residence. Where data leaves the UK or EEA we rely on appropriate safeguards, such as Standard Contractual Clauses, to give it equivalent protection. Contact us for details of the safeguards that apply to you.

13. Third-Party Links

The Service may link to other websites. We are not responsible for their privacy practices, and we encourage you to read their policies.

14. Changes to This Policy

We may update this policy. If a change materially reduces your privacy protections, we will give notice through the Service or by email before it takes effect. The date at the top of this page shows when it was last revised.

15. Contact Us

For any question about this policy, or to exercise any of the rights described above, email support@justbuildthings.com. We aim to respond within 30 days.

© SognoAI 2026. All rights reserved.