Your data on Eros³

1. Information we collect

a. Account and sign-in. You can sign in with Google, GitHub, an email one-time code, or a Solana wallet. With Google or GitHub we receive your account ID, email address, display name and profile picture URL through OAuth; we never receive your password. With email we store your email address; creating a new email account may require an invite code. With a wallet, your public wallet address becomes your account identity; we never have access to your private key or seed phrase. The demo creates a temporary anonymous account; if you later sign in, the demo conversation is carried into your account. Authentication is handled by Supabase Auth.

b. Profile and preferences. We store what you tell us during onboarding and in account settings: display name, gender, sexual orientation, location and nationality, personality type, content preferences (including the adult-content and image-generation switches), timezone, and the country or region derived from your IP address. Sensitive items are provided voluntarily so that companions can adapt to you. You can edit most of this in your account settings.

c. Conversation data. Messages you send to a companion, the companion's replies, and chat metadata (timestamps, session state) are stored on our servers so we can render your history, compute relationship state and generate replies. Voice calls are transcribed to text and stored as part of the conversation; the audio itself is not kept after transcription.

d. Derived profiles. From your conversations and roleplay, our systems extract and store memories, insights and inferred preferences about you so that companions remember you and adapt over time. These may touch sensitive topics such as sexual preferences and boundaries, health, beliefs or finances. Derived profiles are used to personalize the Service, to model your relationships with companions, and to develop future EtherFun Lab products. They may also be stored as numeric embeddings.

e. Photos, generated images and videos. Photos you upload are stored and may be analyzed by AI vision models so companions can respond to them, and may be used as references when you ask for an image to be edited. Images and videos generated for you, and avatars you upload, are stored with your account.

f. Characters you create. If you create a character, we store its name, description, appearance, instructions, voice choice and avatar. When you publish a character to the Plaza, its content becomes visible to other users; your identity as the creator is not shown there.

g. Payments and points. When you buy points or send a tip we record the sending wallet address and the transaction reference. We keep a ledger of points earned, purchased and spent, redemptions of top-up cards, promo codes and invite codes, and your membership tier. On-chain transactions are public, permanent and outside our control.

h. Telegram (optional). If you link Telegram or run a character bot, we store your Telegram user ID, username, first name and chat ID. Messages sent through Telegram pass through Telegram's servers.

i. Reactions and feedback. Likes and dislikes on images and videos, reactions on messages, and feedback you send us.

j. Technical data, cookies and similar technologies. We collect standard request metadata (IP address, user-agent, locale, timestamps). On a first visit to the demo we also record the referrer and campaign parameters. We use first-party cookies only: sign-in session, locale, region, theme, a pending invite code, demo verification and merchant session. Visitors who use the Service in a European language, or from Europe, see a one-time notice about these cookies. Your browser's local storage holds your theme, voice settings, pending payment state, an image cache, and whether you have dismissed the cookie notice. We do not use third-party advertising or cross-site tracking cookies, and we do not run an analytics SDK. The demo uses Cloudflare Turnstile, which loads a verification script, to block bots.

k. Staff access. Authorized staff may access account and profile data, chat images and message excerpts, and engine logs for support, abuse investigation and quality work. Logs may be replayed to test and improve companion behavior.

2. How we use your information

• To authenticate you and keep your session active.
• To render your conversations, relationship state and per-companion history, and to generate companion replies, images, videos and voice.
• To build and apply the derived profiles described in section 1d.
• To operate features you opt into (points and payments, tipping, character publishing, Telegram, wallet identity).
• To debug, secure and improve the Service, and to detect abuse or fraud.
• To send essential service email (sign-in codes, security, account changes). We do not send marketing email unless you opt in.
• To comply with applicable law and respond to lawful requests.

3. Third parties

We share the minimum information necessary with the providers that run the Service:

• Google and GitHub — sign-in. Subject to their privacy policies.
• Supabase — authentication, database and storage, hosted in Singapore. Conversation, profile, media and payment records are held in Supabase on our behalf.
• Vercel — web hosting and request routing; it also derives your approximate region from your IP address.
• Fly.io — hosting for the companion engine, in Singapore.
• Cloudflare — DNS, firewall and bot verification on the demo.
• AI model and media vendors — conversation content, photos, voice audio and text to be spoken are processed by our infrastructure and by the model, image, video, voice and embedding vendors we pay to operate the Service.
• Telegram — only if you link Telegram or run a character bot.
• Solana network and RPC providers, and the wallet you choose (Phantom, Solflare, Coinbase Wallet, etc.) — for sign-in, purchases and tips. Their privacy policies apply when you connect.
• Font and asset CDNs — standard content-delivery providers serve fonts and static assets and see your IP address when they do.

We do not sell your personal information. We do not share conversation content with third parties except as needed to operate the Service or to comply with law.

4. AI processing

Companion replies, images, videos, voice and derived profiles are produced by AI models running on our infrastructure and our vendors' infrastructure. Your conversation content, photos and voice are sent to those systems to generate output and update relationship state. We do not train foundation models on your conversations. Our vendors process content in order to provide their services to us, under their own terms; some keep it for a limited period to detect abuse.

5. Data retention

We retain account, profile, conversation, media and derived-profile data for as long as your account is active. Ending a conversation with a companion archives it; the history and generated media are kept unless you ask us to delete them. Operational logs are kept for debugging and abuse prevention.

You can request deletion of your account by email. We delete or anonymize associated personal data within 30 days of a verified request, except where retention is required for legal, accounting or security purposes (for example transaction records and abuse logs). On-chain transactions cannot be deleted from the blockchain.

6. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us at lab@etherfun.net. We will respond within a reasonable time.

7. Security

We use TLS in transit, encryption at rest provided by our hosting providers, access controls on our systems, and application-level encryption for bot tokens and top-up card codes. No system is perfectly secure; please protect the account you sign in with and never share your wallet seed phrase.

8. Age

The Service is intended for users aged 18 and older. Age is self-declared during onboarding; we do not knowingly collect data from anyone under 18. The demo applies a content filter, and everything a companion says is fictional. If you believe a minor has used the Service, please contact us so we can remove the account.

9. International transfers

Our primary data storage and processing is in Singapore. Our providers may store and process data in other countries. By using the Service you consent to such transfers. We require our providers to apply reasonable safeguards.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be announced in the app or, where we hold an email address for you, by email. Continued use after the effective date constitutes acceptance of the revised Policy.

11. Contact

Questions, requests or complaints: lab@etherfun.net.