Your data on Eros

1. Information we collect

a. Account information

When you sign in with Google, we receive your Google account ID, email address, display name, and profile picture URL via Google OAuth. We do not receive your Google password. Authentication is handled by Supabase Auth.

b. Profile and preferences

We store the display name, preferred companion, and onboarding answers you provide. You can edit or delete most of this from your account settings.

c. Conversation data

Messages you send to a companion and the companion's replies are stored on our servers so we can render conversation history, compute the Affinity Mechanism (relationship state), and improve the quality of replies. Conversation content is associated with your account; it is not used to identify other users.

d. Wallet address (optional)

If you connect a Solana wallet, we record the public wallet address and link it to your account. We never have access to your private key or seed phrase. Wallet connection is required only for tipping, on-chain marketplace actions, and other opt-in Web3 features.

e. On-chain activity

Tips, listings, purchases, and other on-chain transactions you initiate are recorded on the Solana blockchain. This data is public, permanent, and outside our control. We may index it to display your activity within the Service.

f. Technical and device data

We collect standard request metadata (IP address, user-agent, locale, timestamps) and use first-party cookies for session state, locale preference, and CSRF protection. We do not use third-party advertising or cross-site tracking cookies.

2. How we use your information

• To authenticate you and keep your session active.
• To render your conversations, intimacy meters, and per-companion history.
• To operate features you opt into (tipping, wallet identity, marketplace).
• To debug, secure, and improve the Service; to detect abuse or fraud.
• To send essential service email (auth, security, account changes). We do not send marketing email unless you opt in.
• To comply with applicable law and respond to lawful requests.

3. Third parties

We share the minimum information necessary with the providers that run the Service:

• Google — OAuth sign-in. Subject to Google's privacy policy.
• Supabase — Authentication, database, and storage. Conversation, profile, and wallet records are held in Supabase Postgres on our behalf.
• Solana wallet providers (Phantom, Solflare, Coinbase Wallet, etc.) — Connection is mediated by the wallet you choose. Their privacy policies apply when you connect.
• Hosting and CDN — Standard infrastructure providers handle request routing and asset delivery.

We do not sell your personal information. We do not share conversation content with third parties except as required to operate the Service or comply with law.

4. AI processing

Companion replies are produced by AI models running on our infrastructure (the "eros-engine"). Your conversation content is sent to the engine to generate replies and update relationship state. We do not use the content of your conversations to train third-party foundation models without your consent.

5. Data retention

We retain account, profile, and conversation data for as long as your account is active. When you delete your account, we delete or anonymize associated personal data within 30 days, except where retention is required for legal, accounting, or security purposes (e.g., transaction records, abuse logs). On-chain transactions cannot be deleted from the blockchain.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us at henrylin@etherfun.xyz. We will respond within a reasonable time.

7. Security

We use TLS in transit, encrypted storage at rest, and Supabase Row Level Security to keep your data isolated. No system is perfectly secure; please use a strong, unique password on your Google account and never share your wallet seed phrase.

8. Children

The Service is intended for users aged 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has used the Service, please contact us so we can remove the account.

9. International transfers

Our providers may store and process data in countries other than the one in which you live. By using the Service you consent to such transfers. We require our providers to apply reasonable safeguards.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be announced in the app or by email. Continued use after the effective date constitutes acceptance of the revised Policy.

11. Contact

Questions, requests, or complaints: henrylin@etherfun.xyz.