Adore — Privacy Policy

Last updated: 5 October 2026 · Operated by RARITY ("we", "us"). Contact: privacy@getadored.app

Adore is an AI companion app for adults 18 and over. Its characters, matches, messages and character photos are fictional. Discovery provides text and photo conversations; voice notes and calls are turned off in the current Discovery release. Existing classic interfaces and earlier versions may offer voice features, so their processing is described separately below. We ask for permission to process your content with the AI providers named in the app before you use those features. This policy explains the information we collect, its uses and your choices.

1. Information we collect

• Account & profile: a random account identifier, your chosen display name and adult-age declaration, profile fields and companion preferences. Discovery can start with a device account without an email address. If you create an optional recovery key, we store its cryptographic hash; possession of the key allows recovery of that account. Optional email recovery is offered only when enabled.
• Photos: Your profile photo stays on your device. If you choose profile-photo personalization, a reduced copy is processed by Google and a short description may be retained with your profile. Chat photos you choose to send are reduced and stripped of image metadata for content review. Approved chat photos and a short description used for replies are stored with that conversation; they are not displayed to other customers. Adore does not use your uploaded photo as the reference for FLORA character-image generation.
• Voice messages in classic interfaces or earlier versions: recordings you explicitly send and their transcripts are stored with the conversation. Generated companion voice notes may be cached so replay does not require new generation.
• Conversation data: the messages you send and the AI's responses, plus derived "memory" (facts you share and rolling summaries) used to maintain continuity. You can delete this at any time.
• Live-call data in classic interfaces or earlier versions: when you choose to call a companion, your microphone audio and a real-time transcript are processed to hold the call. Discovery stores the call duration and a bounded selection of your literal spoken turns for continuity. The classic interface may retain a short factual summary and durable details you chose to share. Adore does not store the raw call audio or full call transcript in your conversation history.
• Subscription data: purchase and entitlement status received from Apple. We never receive or store your full payment-card details — Apple processes all payments. We keep usage counters and request status to apply your plan’s allowance and delivery terms, restore access and reconcile refunds. Internal cost estimates help us plan service capacity; they are not a record of your personal spending.
• Device & notification data: a push token (if you enable notifications) and basic device/OS info for delivery and diagnostics.
• Usage & diagnostics: coarse app events such as opening the app or a Premium offer, plus server milestones such as the first accepted message and verified subscription access. Discovery measurement excludes message content, photos, audio, profile preferences and character identifiers. Raw discovery observations are retained for up to 90 days; account milestones last while the account exists. Operational error logs help diagnose failures.
• Content reports: when you report a message, we store the selected message, your chosen reason and any explanation you submit so an authorized reviewer can investigate.
• Advertising attribution: Apple may send privacy-preserving, aggregated attribution postbacks to Meta. In app versions that offer the optional Ad measurement control, we also offer consent-based install and purchase measurement, described in section 3a. Versions without that control do not send an Apple advertising identifier (IDFA) to Meta. Your conversations, photos, audio and relationship memory are never sent to Meta.

2. How we use your information

• To generate in-character responses and maintain conversation continuity ("memory").
• To operate voice features only in interfaces or versions where they are available, apply the displayed allowance and maintain relevant conversation context.
• To deliver scheduled character messages and eligible character photos, while applying your notification settings, quiet hours and chat controls. Quiet hours silence alerts rather than removing a message from the inbox.
• To record your adult-age confirmation, manage your subscription, apply its displayed allowance and delivery terms, and provide support. We do not sell your conversations or photos to advertisers.
• To keep the service safe — including automated detection of self-harm, crisis, content involving minors, and abuse.
• To measure advertising performance using Apple's aggregated attribution system and, only if you choose to allow it, the consent-based measurement described below.

3. AI processing & third parties

To provide the experience we share the minimum necessary data with service providers who process it on our behalf:

• Google (Gemini API): messages, relevant conversation context, photos you consent to share, and recordings submitted for transcription are processed to generate replies, describe images, transcribe speech and review content. The classic interface may also use Google for photo generation. This processing is used to provide Adore, not to advertise to you.
• Featherless: in current Discovery versions, and only after you agree to the updated AI-processing permission, your profile details, messages, relevant conversation history, remembered details and approved photo descriptions are processed by Featherless to generate character replies. Original uploaded photos are not sent to Featherless. Technical failures may be retried using another model on the same service. You can pause processing in the app’s Privacy controls. External processing and retention follow the provider’s service terms; we do not promise zero retention.
• Infermatic (Core API): in app versions that offer this choice, and only after you agree to the updated AI-processing permission, your profile details, messages, relevant conversation history, remembered details and approved photo descriptions may be processed by Infermatic to generate character replies. Original uploaded photos are not sent to Infermatic. Technical failures may be retried using another model on the same service. Older permission choices do not enable this provider. You can pause processing in the app’s Privacy controls. External processing and retention follow the provider’s service terms; we do not promise zero retention.
• FLORA and its image-model providers: when you request a new character photo, we send an approved fictional character reference and a brief describing the requested scene. Your uploaded profile or chat image is not used as the character reference. FLORA returns generated images for review and delivery. Processing and retention by external providers follow their service terms; we do not promise zero retention for all AI processing.
• ElevenLabs: for classic interfaces and earlier versions where voice features are available, companion text is sent to synthesize voice notes. During a live call, ElevenLabs processes your microphone audio, real-time transcript, relevant relationship context, and generated speech to operate the call. Audio saving is disabled and the provider is configured with a zero-day scheduled retention period. Deletion runs through the provider's processing schedule and can lag behind the end of a call; transcripts may remain available during that interval. This is not a claim of immediate deletion or that enterprise "Zero Retention Mode" is enabled. Call duration and billing metadata may remain available for usage reconciliation.
• OpenAI: for classic interfaces and earlier versions where voice features are available, during a live call, the ElevenLabs agent may send the real-time transcript and relevant relationship context to an OpenAI language model to generate the companion's next spoken response. This processing is used to provide the call, not for advertising.
• Apple: payments, subscription management, and push delivery (APNs).
• Expo: push notifications (your push token and the notification text) are routed through Expo's notification service on their way to Apple.
• PostHog (classic interface): usage events and a device identifier help us understand use of the classic experience, without message content. Discovery uses our own bounded event service and does not initialize PostHog.
• Our hosting/database provider stores your account, memory, and conversation data.

Catalogue character photos are produced in advance using AI image tools. Requested character photos are generated when requested; the scene may reflect the conversation, but the reference identity is the fictional character.

We share the data needed to provide these services. We ask for your consent to AI processing inside the app before sharing your content with AI providers. The Chat and photos step explains processing of your profile details, messages, photos you deliberately send in chat, and requested character photos. We remember that permission, so sending another chat photo does not require another consent screen. Profile-photo personalization is optional and starts off; you can choose it during setup or change it in your profile settings. You can withdraw AI-processing permission through Discovery’s You → Privacy → Pause AI processing control, which pauses new AI processing while retaining your chats, or by deleting your account. Earlier app versions call this control Stop sharing with Google Gemini. Optional advertising measurement has a separate choice and is not part of your AI-processing consent.

3a. Optional advertising measurement

Apple's SKAdNetwork provides aggregated attribution without giving us your advertising identifier. Separately, in versions with the Ad measurement control, Adore asks for Apple's tracking permission after your initial experience, not as a condition of using the app or buying a subscription. Declining does not change access or prices. No identifiable advertising information is sent to Meta unless you opt in and iOS currently permits tracking.

If you opt in, we send only your Apple advertising identifier (IDFA), a random installation identifier, install information, Apple-confirmed paid purchase amounts, currencies and times, and app/build/iOS versions to Meta through its Conversions API. We do not send your Adore account identifier, name, email address, phone number, messages, photos, audio, relationship memory, chosen companion or conversation activity. We do not install Meta's automatic activity-collection SDK or use advanced matching with contact information.

This allows Meta to connect the approved install and purchase information with activity on its services to measure advertising. Meta processes received information under its Privacy Policy and Business Tools Terms, which include uses such as advertising measurement, delivery, personalization and product improvement. Meta is not an AI-processing provider for your conversations.

You can turn this off under You → Ad measurement in Discovery (or Notifications & privacy in the classic interface), and in iPhone Settings → Privacy & Security → Tracking. The app checks iOS permission before accessing an advertising identifier. Permission to deliver from our server lasts no longer than one minute without another in-app check. When the app becomes inactive, we request a pause immediately; if that request cannot connect, the permission expires. A charge that occurs while the app is closed may wait for the next permitted app visit, for no more than seven days. We do not backfill purchases made before your consent.

Your Apple advertising identifier is encrypted in separate, access-restricted storage, not stored with relationship memory. It is cleared when a pause or withdrawal is received, or by cleanup after the short permission window expires. Delivery and consent records are retained for up to 90 days for duplicate prevention and troubleshooting. After 30 days, a previous in-app opt-in must be renewed explicitly. Turning measurement off deletes pending unsent events; it cannot recall information already received by Meta. Deleting your Adore account removes our measurement records too. Contact us at privacy@getadored.app for data-access or deletion requests.

4. Sensitive content & safety

Adore is fictional entertainment, not a real relationship, and not a substitute for professional, medical, or mental-health advice. If our systems detect that you may be in crisis, the app will break character and direct you to crisis resources. If you are in danger, contact your local emergency services or a crisis line (in the US, call or text 988).

5. Data retention & your rights

We keep your conversation history and relationship memory while your account is active. We do not retain raw live-call audio or the full live-call transcript in Adore's database. If a call ends while the network is unavailable, the app may keep a minimal pending record in operating-system-protected app storage: call identifiers and a bounded selection of your own spoken turns. It is removed after acknowledgment, or on the next reconciliation or app resume once it is more than 24 hours old. It is not separately encrypted by the app. You can delete your conversation history and memory, or your whole account, from within the app (Discovery: You → Privacy → Delete dating account; classic: You → Safety & controls), or by emailing us. Depending on your region you may have rights to access, correct, export, or delete your data; email privacy@getadored.app to exercise them.

Discovery backs up accepted conversations and supported settings to our server within the supported storage limits. If those limits are reached, backup pauses and the app shows an error; backup is not unlimited. Unsent drafts, queued actions and local profile-photo files are not a complete cloud backup. A recovery key can recover supported account data on another device; the profile photo may need adding again. Keep the key private. Restoring an Apple purchase restores eligible paid access, not private conversations from another account.

Deleting an account removes its active conversation, image, voice, recovery, notification and discovery-analytics records. Minimal subscription transaction records may remain to prevent duplicate grants and reconcile refunds, without retaining the deleted account’s conversation content. Deleting the app or account does not cancel an Apple subscription; cancellation is managed in Apple settings.

6. Security

We use encryption in transit and access controls. No system is perfectly secure, but we work to protect your data and limit who can access it.

7. Children

Adore is strictly for adults 18+. We do not knowingly collect data from anyone under 18. If we learn an account belongs to a minor we will terminate it and delete the data.

8. Changes

We may update this policy; material changes will be surfaced in the app. A policy update or continued use does not enable optional advertising measurement. That requires your separate permission.

Questions about this policy or our processors can be sent to privacy@getadored.app.