Privacy Policy

Effective date: August 12, 2026
Operator: Pedro Miguel Ribeiro ("we", "us", "our")
Contact: [email protected]

1. Overview

This Privacy Policy explains what information we collect through waifumaker.io and its services (the "Service"), how we use it, and the choices you have. By using the Service you agree to the practices described here.

The Service contains adult content. You must be 18 or older to use it (see the Terms of Service).

2. What We Collect

2.1 Information you provide

• Email address — only if you choose to add one for account recovery or upgrade from anonymous play.
• Chat messages — messages you send to AI companions, plus conversation history needed to maintain context.
• Game state — your in-game progress: body parameters, hormone levels, unlocked content, bond level, preferences, and similar state needed to operate the Service.

2.2 Information collected automatically

• Account identifier — an anonymous identifier (created on first visit) that lets us persist your game state. This is the device account for your progress.
• Usage data — analytics events (via PostHog): pages viewed, features used, session timing, approximate region, device/browser type.
• Session recording — on the founder offer page only, PostHog records how the page is used (scrolling, clicks, page timing) so we can fix what breaks. Typed text is masked and never recorded, and no founder key is captured.
• Push tokens — via OneSignal, only if you enable push notifications.
• Technical data — IP address, browser user agent, and request logs, used for security and abuse prevention.

3. How We Use Information

We use the information we collect to:

• Operate, maintain, and improve the Service;
• Persist game state across devices (via your account);
• Generate AI companion responses (chat messages are sent to our AI processing provider);
• Deliver push notifications (only if you enable them);
• Analyze usage to improve features and content;
• Detect, prevent, and address fraud, abuse, and security issues;
• Comply with legal obligations.

4. How We Share Information

We do not sell your personal information. We share information only with the service providers necessary to run the Service:

Each provider processes data under its own terms and privacy policy and only as necessary to provide its service to us.

We may also disclose information if required by law, legal process, or governmental request; to enforce our Terms; or to protect the rights, property, or safety of the Operator, users, or others.

5. Legal Bases (GDPR / UK GDPR)

If you are in the EEA, UK, or Switzerland, we rely on the following legal bases under the General Data Protection Regulation:

• Contract — processing needed to provide the Service you requested (e.g. persisting game state, generating responses);
• Legitimate interests — analytics, abuse prevention, and service improvement, balanced against your rights;
• Consent — where required (e.g. push notifications, optional analytics), which you may withdraw at any time;
• Legal obligation — where we must retain or disclose data to comply with law.

6. International Transfers

The Service is hosted in Singapore and uses providers located in various countries (including the United States and the EU). When we transfer personal data internationally, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses or equivalent mechanisms, to protect your data.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy:

• Game state — retained while your account is active; deleted on account deletion.
• Chat messages — retained as needed to maintain companion conversation context and service quality; deletable on request.
• Analytics events — retained per PostHog's retention settings (aggregated/de-identified after processing).
• Server logs — retained for a limited period (typically 30 days) for security purposes.
• Email/account data — retained while your account exists; deleted on request.

8. Your Rights

Depending on your jurisdiction (including under the GDPR, UK GDPR, and CCPA/CPRA), you may have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Delete your personal data ("right to be forgotten");
• Restrict or object to certain processing;
• Data portability — receive your data in a structured, machine-readable format;
• Withdraw consent at any time, where processing is based on consent;
• Opt out of "sale" or "sharing" of personal information (we do not sell personal information);
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by law (typically 30 days). We may need to verify your identity before acting.

You may also delete your account in-product or by requesting deletion; deletion removes or anonymizes your game state and associated data, subject to legal retention requirements.

9. Children's Privacy

The Service is strictly for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal data, contact us and we will delete it promptly.

10. Security

We use reasonable technical and organizational measures to protect your data, including encryption in transit (TLS) and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Cookies and Tracking

We use necessary storage (localStorage) to persist your anonymous account identifier and game state. We use PostHog for analytics and, on the founder offer page, for session recording; both may set cookies or use local storage. You can block or clear these via your browser; some features may not function correctly without them.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on the Service and, where practicable, notified by email. The "Effective date" at the top of this Policy indicates when it was last revised.

13. Contact

Questions or requests regarding this Privacy Policy or your data: [email protected]