ErosVibe Privacy Policy

This Policy applies to the ErosVibe app, https://erosvibe.realaura.ai and related services we operate directly. The controller is EchoAI Digital Limited; contact us at echoai@realaura.ai.

Third-party app stores, sign-in services, payment channels and external websites process some data independently under their own privacy policies.

Account and identity data: email, password-verification data, user ID, Google or Apple sign-in identifiers, and profile information such as name, nickname, avatar, gender, birthday and age declaration.

Interactions and creations: AI conversations, prompts, memories, character and script settings, images, audio, speech transcripts, generated content, community posts, comments, relationships, direct messages, reports, appeals, feedback and attachments.

Device and usage data: IP address, device model, operating system, app version, language, network type, device or push identifiers, logs, crash and performance data and feature activity. We do not currently use cross-app advertising tracking.

Connected-device data: Bluetooth permission state and the name, model, identifier, connection state, battery level, control commands, waveforms and synchronization metadata of nearby or paired devices. Some Android versions associate Bluetooth scanning with location permission.

Optional device context: with system permission, we may process microphone audio, camera or photo media, calendar event titles and times, steps or motion data, phone battery and network state for voice, uploads, reminders and context-aware companion features you enable.

Transactions and creator data: products, subscriptions, credits, receipts, transaction and refund status; for creator payouts, beneficiary name, country, bank, account or IBAN, SWIFT/BIC, routing details, address, email, phone, authorization and withdrawal records. We do not directly store full payment-card details.

Website data: language choice and age confirmation are stored locally in your browser. The website does not currently use advertising-tracking cookies.

Because of the Service's nature, conversations, preferences and content can state or imply information about sex life, sexual preferences, sexual orientation, health, exercise or relationships. Submit it only when you choose to and have authority to do so.

Where law requires, we ask for separate or explicit consent. You can refuse optional permissions, but the related feature may not work.

We perform our contract with you by creating accounts, syncing profiles, generating AI replies and media, and providing memory, community, messaging, device-control, purchase and creator services.

With consent, we process optional permissions and certain sensitive information. You can withdraw consent through system or app controls without affecting earlier lawful processing.

Our legitimate interests include service security, fraud and abuse prevention, moderation, troubleshooting, quality improvement and protecting users and the Service; we balance those interests against your rights.

We also process information to comply with law, lawful authority requests, tax and accounting duties and to establish, exercise or defend legal claims.

AI features send your input, character settings and relevant conversation and memory context to us or contracted model, voice and media providers to generate output, perform safety checks and maintain quality.

Recommendations, risk detection and moderation may use automated classification. We do not make final decisions solely by automated means that produce legal or similarly significant effects about you; you can seek human review where a channel is available.

We use available provider controls and contractual measures to limit processing to the services requested from them. If we intend to use identifiable personal content for a materially different purpose, we will provide notice and obtain consent where required. We may evaluate and improve the Service using de-identified or aggregated data.

We do not sell personal information or share it for cross-context behavioral advertising.

We disclose the minimum necessary information to processors by feature. Categories currently include Cloudflare and other cloud or object-storage providers; AI/media providers such as Volcengine and MiniMax; voice providers such as Agora, Microsoft Azure Speech, Volcengine and ElevenLabs; JPush for notifications; Google and Apple for sign-in; RevenueCat, Apple and Google for payments; Sightengine for moderation; and Resend for email. Providers may change by feature or region.

We may also disclose information to other users at your direction for profiles, posts, comments, messages, creator content or remote-control state; to confidential participants in a merger, reorganization or asset transaction; or to authorities and relevant parties where law, urgent safety or protection of rights requires it.

Community profiles and posts may be visible, engaged with or shared according to your privacy settings. Direct messages go to a person you select or accept; reports are made available to reviewers.

Other users may save or reshare content they lawfully receive. Do not post sensitive details you do not want others to know, and respect every participant's consent.

We and our providers may process information outside your country. Where required, we use contractual terms, assessments, consent or another valid transfer mechanism and apply safeguards appropriate to the risk.

We keep information for the shortest period needed for its purpose, considering whether your account remains open, your memory and history choices, content status, contract and dispute needs, security, backup cycles and tax, financial or compliance duties.

After account deletion, we delete or de-identify account-linked information that is no longer needed. Payment, creator settlement, anti-fraud, moderation and dispute records can be retained where law or legitimate security needs require. Backup copies expire through normal rotation.

We use reasonable technical and organizational measures including encryption in transit, access controls, separation of privileges, logging and security monitoring. No system is absolutely secure.

Protect passwords and verification codes. Do not place financial credentials, identity documents or another person's intimate data in community content or untrusted conversations. Contact us promptly if you suspect misuse.

Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability, withdrawal of consent and account closure, and complain to your local supervisory authority.

You can edit profile data, manage some memories and content, adjust community settings and system permissions and delete your account in the app. You can also email us. We may reasonably verify identity to protect your account.

We do not discriminate against you for exercising privacy rights. Rights can be limited where necessary to protect others, meet legal duties or apply lawful security exceptions.

Where an applicable U.S. state law applies, you may request the categories, sources, purposes and recipients of personal information and ask to access, correct, delete or obtain a copy. We do not sell personal information or share it for cross-context behavioral advertising.

An authorized agent may submit a request where permitted; we will verify the request and authorization as required. If your jurisdiction provides an appeal right, reply to our decision email to appeal.

The Service is not for minors. We do not knowingly collect their personal information. If you believe a minor is using the Service or that such information has been submitted, contact us immediately with “Child Safety” in the subject so we can act under law and our Community Guidelines.

We identify the version and effective date at the top. Material changes will be announced through the app, website, email or another reasonable channel. Send privacy requests, complaints or child-safety concerns to echoai@realaura.ai.