Privacy Notice
Last updated: 2026-10-18 · Beta
This notice explains what personal data Persony handles, why, who else receives it and what you can do about it.
1. Who is responsible
LevelUp operates Persony and decides how your personal data is used (the "controller"). Contact for any privacy question or request: support@persony.org.
Persony is for adults (18+).
2. What we collect
- Account: your sign-in identifier, e-mail address, and — if you sign in with Google — your name and profile photo. Passwords are handled by our sign-in provider; we never see them.
- Conversations: text messages, voice messages and their transcripts, transcripts of voice calls, and the messages personas send you.
- Messages to Persony Guide: Persony Guide is our official AI helper and feedback channel. The Persony team reads what you write to it, to answer questions, fix problems and decide what to build next. Do not send it anything you would not want the team to see.
- Memories: short facts the app extracts from your conversations (for example "is learning Spanish"). You can view, edit, share across personas or forget each one on the Memory page.
- Personas and settings: personas you create or install, avatars you upload or generate, your regular-message schedules, interface language, time zone, and — if you enable notifications — a push subscription for your device.
- Technical and usage data: counts of requests and AI usage, estimated costs, errors, and IP address in server logs.
We do not sell your personal data and do not use it for advertising.
Sensitive information. Please do not share health, sexual, religious, political, financial or similar sensitive details unless you want a persona to use them. When the app recognises that a memory may be sensitive, it asks you before saving it.
3. Why we use it (legal bases)
- To provide the Service you asked for (contract): your account, conversations, memories, regular messages and notifications.
- Legitimate interests: security, preventing abuse, fixing errors, controlling costs, and anonymous product statistics. You can object to these.
- Consent: notifications on your device and saving sensitive memories. You can withdraw consent at any time in the app.
- Legal obligations: when the law requires us to keep or disclose information.
4. Who receives your data
| Provider | What for | What it receives | Where |
|---|---|---|---|
| Clerk, Inc. | Sign-in and sessions | E-mail, name, photo, sign-in events | USA |
| Google (Gemini API) | Replies, voice, transcripts, memories, persona drafts | Your messages, voice, persona details and relevant memories | USA and other countries |
| Cloudflare, Inc. | Hosting, database, logs, avatar image generation | Everything the Service stores; avatar descriptions | Worldwide |
| Your browser's push service (Google, Apple, Mozilla, Microsoft) | Notifications you enabled | Persona name and a short preview of the message | Depends on your browser |
| Paddle.com (only if you buy a paid plan) | Payment, tax, receipts, refunds — Paddle is our merchant of record | Name, e-mail, country, payment details (entered directly with Paddle; we never see card numbers), purchase history | UK, EU, USA |
Google's paid plan. We use Google's paid Gemini API tier. Under Google's terms for paid services, Google does not use your prompts and replies to improve its products; it may keep them for a limited period to detect abuse and meet legal obligations. Even so, do not share secrets you would not want an online service to process.
Paddle as an independent controller. When you pay, Paddle processes your payment data under its own privacy notice. We receive only what we need to give you access and support: your plan, its status and period, and Paddle's customer and transaction identifiers.
International transfers. If you are in the European Economic Area, the United Kingdom or Switzerland, your data is transferred to providers in the USA and other countries. These transfers rely on the providers' data processing terms with the European Commission's standard contractual clauses (and the UK and Swiss equivalents), and on the EU–US Data Privacy Framework where a provider is certified. You can ask us for a copy of the relevant safeguards at support@persony.org.
5. How long we keep data
- Account, personas, conversations, memories and schedules: until you delete them or your account.
- When you delete your account, your data is removed from the active database immediately and from database backups within 30 days.
- Server logs are kept for a short period (up to 30 days). Anonymous totals of usage and costs may be kept longer.
6. Your rights
Depending on where you live, you have the right to access, correct, delete and export your data, to restrict or object to its use, and to withdraw consent. In Persony you can:
- delete personas, chats and individual memories;
- download all your data — Settings → Download my data;
- delete your account and all data — Settings → Delete my account.
For anything else write to support@persony.org; we answer within one month. If you are in the EEA, the UK or Switzerland, you may also complain to the data protection authority where you live or work. California residents: we do not sell or share personal information for cross-context behavioural advertising.
7. Cookies and local storage
We use only what is needed to run the Service: sign-in session cookies (Clerk) and your browser's local storage for preferences (theme, drafts, pinned chats, unread markers). When you open checkout, Paddle uses the cookies it needs to process the payment. We use no advertising or analytics cookies.
8. Security
Connections are encrypted (HTTPS) and access to production data is restricted. No system is perfectly secure. If a breach affects your data, we will notify you and the authorities as the law requires.
9. Children
Persony is not for anyone under 18. If we learn that a user is under 18, we close the account and delete the data.
10. Changes
We will tell you in the app before material changes take effect.
11. Contact
LevelUp · support@persony.org