Privacy Policy

The short version

• Your conversations are processed by automated systems — that is how a reply gets written, and how we find bugs and measure quality.
• Nobody on our team reads your chats as a matter of routine.
• We never sell your data, and we never license your conversations to anyone for training their own general-purpose AI models.
• Ask us to delete your account and we delete it. That is a right, not a favour, and we never withhold it as a penalty.

1. What we collect

• Account identifiers — your Telegram user id and username, or the identifier you sign in with on the web, plus your display name and language.
• Your conversations — the messages you send, the replies generated for you, the voice notes and images exchanged, and the long-term memories the product builds from them so a companion can remember you.
• Payment records — what you bought, when, for how much, and the status of the payment. Card numbers never reach us; our payment providers handle those.
• Technical data — device type, operating system, browser, approximate country derived from your IP address, and the times you were active.
• Product events — what you tapped, what you unlocked, what you were shown, so we can tell what works.

2. What we use it for

• Running the service: generating replies, voice and images, and keeping a companion's memory of you consistent over time.
• Taking payment, applying your plan, and handling disputes and refunds.
• Keeping the service safe: detecting abuse, fraud, and content we do not allow.
• Improving the product: measuring quality, finding bugs, and understanding which features matter.

3. Automated processing — the honest part

Generating a reply means sending the relevant part of your conversation to an AI provider. There is no way around that: it is what makes the product work.

We also run automated analysis over conversations — scoring quality, flagging safety problems, hunting bugs, summarising what went wrong in a session. This is machine processing at scale, not people reading your chats.

A small number of people on our side can access conversation data. They do so to investigate a bug you reported, a payment dispute, a safety report, or where the law requires it — not as a matter of routine, and not out of curiosity.

4. What we never do

• We do not sell your personal data or your conversations. Not to advertisers, not to data brokers, not to anyone.
• We do not license your conversations to anyone for training their own general-purpose AI models.
• We do not use your conversations to advertise to you elsewhere, and we do not share them with ad networks.
• We do not publish anything you have said, and we do not use your chats as marketing material.

5. Who else is involved

Running LipBytes means other companies process some of your data on our behalf. These are the ones that matter:

• Telegram — the messaging platform the bots run on. Everything you send through a bot passes through Telegram under their own privacy policy.
• Mollie — card and wallet payments.
• Telegram Stars — in-app purchases made inside Telegram, handled by Telegram.
• DeepSeek and OpenRouter — the AI providers that generate a companion's text replies. They receive the conversation text needed to produce a reply.
• ElevenLabs — voice synthesis. It receives the text of a voice note in order to speak it.
• FAL and Replicate — image generation. They receive the prompt used to produce an image.
• Cloudflare R2 — storage and delivery of the media in your conversations.

Each of these acts under its own terms as our processor. We share the minimum each one needs to do its job, and we do not give any of them your data for their own purposes.

6. How long we keep it

We keep your account and conversation data for as long as your account exists, because that is what a companion's memory is made of.

When you ask us to delete your account, we delete it. Payment and invoice records are kept for as long as tax and accounting law requires — that part we cannot delete on request.

Backups roll over on their own schedule, so a deleted account can persist in a backup for a short period before it is overwritten.

7. Your rights

Wherever you live, you can ask us to: give you a copy of your data, correct something that is wrong, delete your account and its contents, or stop a particular use of your data. If you are in the EU, the UK or another region with equivalent law, these are statutory rights and we treat them as such.

Ask through the contact page on this site or by messaging @LBsup on Telegram, from the account concerned. We answer within a few business days, and we do not make you justify a deletion request.

8. Under-18s

LipBytes is for adults only and we do not knowingly hold data about anyone under 18. If we find out that an account belongs to a minor, we close it and delete the data behind it. If you believe a minor is using the service, tell us.

9. Security

Data is encrypted in transit, access to production systems is restricted to the few people who need it, and payment credentials never touch our servers.

No service is perfectly secure, and we will not pretend otherwise. If a breach affects you, we will tell you what happened, what was exposed, and what to do about it.

10. Where your data goes

The companies listed above operate in several countries, including outside the European Economic Area. Using LipBytes means your data is processed in those places. We rely on the transfer terms those providers offer and share only what each of them needs.

11. Changes

We update this page as the product changes. The date at the top says when we last did. If a change materially affects how your data is handled, we will tell you rather than quietly editing the page.