Privacy Policy

At Charmup, your privacy isn't just a feature—it's the foundation of everything we build. We believe that emotional wellness conversations should be completely private, and we've designed our platform from the ground up to ensure that.

We collect only the minimum data necessary to provide our service:

• •Email address: For account creation and authentication
• •Chat messages: Stored encrypted to maintain conversation context
• •Usage data: Anonymous analytics to improve the service
• •Device information: For security and fraud prevention

All your conversations are encrypted using AES-256 encryption—the same standard used by governments and financial institutions. Here's how we protect your data:

• •Encryption at Rest: All chat messages are encrypted before being stored in our database
• •Encryption in Transit: All data transmitted uses TLS 1.3 encryption
• •Zero-Knowledge Architecture: Our encryption design means even we cannot read your messages
• •Secure Key Management: Encryption keys are stored separately from encrypted data

Your data is used solely to provide and improve our service:

• •Conversation Context: To maintain meaningful, contextual conversations with AI personas
• •Service Improvement: Anonymous, aggregated data helps us improve AI responses
• •Security: To detect and prevent fraud, abuse, or security threats
• •Communications: To send important service updates (you can opt out of non-essential emails)

We retain your data only as long as necessary:

• •Active Account: Your data is retained while your account is active
• •Account Deletion: When you delete your account, we schedule permanent deletion within 30 days
• •Grace Period: You have 30 days to cancel deletion and restore your data
• •Permanent Deletion: After 30 days, all your data is permanently and irreversibly deleted
• •Audit Logs: Minimal audit logs may be retained for security compliance (SOC 2 requirement)

You have full control over your data:

• •Right to Access: Request a copy of all data we have about you
• •Right to Correction: Update or correct your personal information
• •Right to Deletion: Delete your account and all associated data
• •Right to Portability: Export your data in a standard format
• •Right to Opt-Out: Opt out of non-essential data collection

We use minimal third-party services to operate Charmup:

• •Supabase: Database and authentication (SOC 2 Type II certified)
• •OpenRouter/AI Providers: AI model inference (no personal data shared, only conversation context)
• •Netlify: Hosting and deployment (SOC 2 compliant)

We use minimal cookies:

• •Essential Cookies: Required for authentication and security (cannot be disabled)
• •Preference Cookies: Remember your settings like dark mode
• •No Tracking Cookies: We do NOT use advertising or tracking cookies
• •No Third-Party Trackers: We do NOT embed social media trackers or analytics that track you across sites

If you have any questions about this Privacy Policy or our data practices, please contact us:

• •Email: connect@charmup.website
• •Response Time: We respond to all privacy inquiries within 48 hours