Privacy Policy

Musóna is built with privacy as a foundation. We collect the minimum data necessary to provide the Service and do not sell your personal information to third parties. This policy explains what we collect, how we use it, and your rights.

Account information: Your email address and an encrypted password when you register. If you set a timezone in your profile, we store that to personalize features like morning prompts, evening reflections, and offscreen companion scheduling.

Conversation data: Messages between you and your AI companions, including any images you share. This data is stored to provide the companion memory features that make Musóna work. Memory summaries and milestones are extracted from conversations and stored separately.

Companion configurations: The companions you create, including their names, appearance settings, personality details, backstory, scenario, and relationship type.

Offscreen activity data: Your companions generate daily life events (activities, thoughts, social encounters) when you are not actively chatting. These events are stored and used to enrich future conversations and your companion's profile.

NPC relationship data: When your companion introduces you to NPC (non-player character) friends, we store those NPC profiles and relationship connections.

Mood and wellness data: If you use emotional tools, mood tracking, morning intention prompts, or evening reflections, we store that information to provide continuity and pattern insights.

Push notification data: If you enable push notifications (web or mobile), we store your device push token or web push subscription to deliver check-ins, morning prompts, and evening reflections. You can disable notifications at any time from your profile settings.

User Character Photo: If you optionally upload a character photo in your profile settings, we store that image in our secure file storage. This photo is used to represent you in AI-generated scene images with your companions and to generate a brief written appearance description (e.g., hair color, build, style) so your AI companions can naturally reference how you look in conversation. The photo is transmitted to third-party AI image generation services (Novita AI and fal.ai) and to a vision AI service (Google Gemini via OpenRouter) for the appearance description. Uploading a photo is entirely optional. We recommend uploading a photo that you are comfortable sharing with AI processing services. The photo is not used for identity verification, facial recognition, or any purpose other than AI art generation and conversational reference.

Reference Photos for AI Training (Premium): Premium subscribers may upload up to 10 selfies for AI training (LoRA model) so their likeness can appear in scene images with their companion. These photos are transmitted to fal.ai for training and stored as a trained model identifier. Original training photos can be removed at any time from your character settings.

Crisis detection signals: The Service automatically scans messages for indicators of self-harm or suicidal crisis to surface professional resources (988 Suicide & Crisis Lifeline, Crisis Text Line). Detected events are logged with severity for safety review. We do not share this data with third parties beyond what is required by law.

Contact form submissions: If you use our contact form, we store your name, email address, and message to respond to your inquiry.

Usage data: Basic analytics such as feature usage and error logs, used to improve the Service. We do not track you across other websites or apps.

Payment data: Subscription billing is handled by PayPal (web) or the Google Play Store (mobile). We receive a subscription identifier and status from these providers and store it on your account. We do not store your payment card or bank account details.

• To provide and operate the Service, including conversations, memory, and companion behavior
• To give your AI companions memory, context, and continuity about your interactions
• To generate offscreen companion activities based on their personality and schedule
• To create and manage social circle profiles and interactions
• To provide mood tracking, emotional tools, and wellness pattern insights
• To send push notifications you have opted into (check-ins, morning prompts, evening reflections)
• To process subscription payments
• To respond to contact form inquiries
• To identify and fix technical issues
• To detect crisis indicators and surface professional support resources
• To comply with legal obligations

We do not use your conversations to train AI models. Your data is yours.

All content produced by your AI companions — including chat messages, voice audio, generated images, and offscreen events — is AI-generated. AI companions are not real people and do not have human awareness, memory, or feelings outside the simulated context of the Service. Image generation and voice synthesis use third-party AI models that may produce inaccurate or unexpected results. You can flag any AI-generated message you find offensive, inaccurate, or inappropriate using the report button on each message; reports are reviewed for safety improvements.

Your data is stored in Supabase (PostgreSQL), a secure cloud database with industry-standard encryption at rest and in transit. Conversation data is protected by Row Level Security — only your account can access your conversations. We use HTTPS for all data transmission.

To provide the Service, we use the following third-party providers:

• Featherless AI — Primary AI language model hosting for chat conversations
• OpenRouter — AI language model API for utility tasks (summaries, image prompt generation, vision analysis)
• Novita AI — AI image generation for companion avatars, NPC portraits, and scene images (including user character photos where provided)
• fal.ai — AI image generation for explicit content on adult-enabled companions (web only) and Premium-tier LoRA training (including user character photos where provided)
• OpenAI — Text-to-speech voice features (Plus tier)
• ElevenLabs — Premium voice features (Premium and Platinum tiers)
• Supabase — Database and authentication
• Railway — Backend hosting
• PayPal — Web payment processing
• Google Play Billing / RevenueCat — Mobile subscription management
• Resend — Transactional email delivery (contact form notifications)

Each provider has their own privacy policy governing data they process on our behalf.

We retain your data for as long as your account is active. If you delete your account, your personal data and conversations will be deleted within 30 days. Some anonymized usage data may be retained for analytics purposes.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability (receiving your data in a machine-readable format)

To exercise any of these rights, contact us at support@musona.app.

Musóna is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us immediately and we will delete the account.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated date. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

For privacy questions or to exercise your rights, contact us at support@musona.app.