Privacy Policy

This Privacy Policy explains how her & him ("we," "us") handles personal information when you use herandhim.ai and our Telegram experience (the "Service"). By using the Service you agree to this policy and to our Terms of Service.

1. Information we collect

You give us

• Account details — your name or a pseudonym and the email tied to your sign-in (e.g. Google), or your Telegram username and ID.
• Companion setup — the preferences you choose during onboarding: your companion's name, personality, your preferred language, your city/time zone, and similar settings.
• Conversations — the messages you send and the replies, memories, and photos your companion creates with you.
• Images and voice you send — if you upload a reference image or send a voice message, we process it to generate your companion's photos or to transcribe what you said. See Biometric and likeness data below.
• Payment info — if you upgrade, our payment processor handles your card; we receive your plan and billing status, not your full card number.

We collect automatically

• Usage and device data — basic logs such as time zone, approximate region, and how you interact with the Service, used to keep it running and secure.
• Cookies — a session cookie to keep you signed in. We don't use third-party advertising cookies.

2. How we use your information

• to run your companion — generate replies and images, and remember the context that makes it feel personal;
• to deliver proactive messages at sensible times for your time zone, if your plan includes them;
• to operate, secure, debug, and improve the Service;
• to process subscriptions and prevent abuse or fraud;
• to comply with the law and respond to lawful requests.

3. AI processing and service providers

To produce your companion's replies and photos, your messages and prompts are sent to the third-party AI model and image-generation providers that power the Service. Some of these AI providers operate in China, which means the text and image prompts you send may be processed on servers located there. Your account and conversation history are stored separately with our infrastructure providers (database, object storage, and hosting). All of these providers act on our behalf as processors and are only permitted to use your data to deliver their service to us.

We do not sell your conversations or share them for third-party advertising. If you would prefer not to have your prompts processed by a China-based provider, please contact us before using image or chat features so we can advise on current options.

By sending messages, images, or voice to your companion, you consent to that content being transmitted to and processed by these third-party AI providers (including providers located in China) for the sole purpose of generating your companion's responses and photos. If you do not consent to this processing, do not use the chat or image features.

3a. Biometric and likeness data

If you upload a reference image (for example, to shape how your companion looks) or send a voice message, that image or audio is sent to our image-generation or transcription providers to produce the requested output. We use it only to deliver the feature you asked for. We do not use your images or voice to identify you, we do not create or store a facial-recognition or voiceprint template for identification, and we do not sell this data. Reference images and voice data are retained only as long as needed for the feature and are deleted when you delete your account.

Only upload images of yourself or of fictional characters. Do not upload photos of other real people without their clear consent, and never upload images of anyone under 18. If you are an Illinois resident or are otherwise protected by a biometric-privacy law and have questions about how we handle face or voice data, contact [email protected].

4. Where your data is stored

her & him is operated from Singapore. Your account and conversation data are stored in our database, and generated photos are stored in encrypted object storage. Data may be processed in Singapore and other countries. Where required, we rely on appropriate safeguards for international transfers.

5. How long we keep it

We keep your information for as long as your account is active so your companion can remember you. When you delete your account, your messages, photos, and personal data are permanently removed from our active systems within a reasonable period, except where we must retain limited records to meet legal, security, or billing obligations.

6. Your choices and rights

• Access & export — you can request a copy of your data.
• Correction — update your account and companion settings at any time.
• Deletion — delete your account from your settings, or email us, to remove your data.
• Objection & restriction — depending on where you live (e.g. under Singapore's PDPA, the GDPR, or the CCPA), you may have additional rights, including the right to object to certain processing or to lodge a complaint with your local data-protection authority.

To exercise any of these, email [email protected].

7. Security

We use encryption in transit, access controls, and isolated per-user storage to protect your data. No system is perfectly secure, but we work to keep your conversations private and limit who can access them.

8. Children

her & him is for adults. We do not knowingly collect data from anyone under 18. If we learn an account belongs to a minor, we will delete it. See Safety.

9. Changes to this policy

We may update this policy from time to time. The current version always lives here, with the "Last updated" date above. Significant changes will be reflected here when they take effect.

10. Data Protection Officer & contact

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing how we handle your personal data and for answering your privacy questions and requests. You can reach our DPO and our privacy team at [email protected].

If you are in Singapore and are not satisfied with our response, you may also contact the Personal Data Protection Commission (PDPC). If you are in the EU/EEA or UK, you may contact your local data-protection authority.