Privacy Policy

Last Updated / Effective Date: September 2026
Application Name: Tamannah: Your AI Girlfriend
Publisher / Developer: SimplifyLifeApps
Contact Email: my.feedback@yahoo.com
Website: https://chatwithtamannah.netlify.app

1. Introduction & Overview

Welcome to Tamannah: Your AI Girlfriend (referred to herein as the "App", "we", "us", or "our"), developed and operated by SimplifyLifeApps. We respect your privacy and are committed to protecting your personal data in strict compliance with the Google Play Developer Program Policies (including User Data, Families, and Generative AI Policies) and global data protection regulations, including:

General Data Protection Regulation (GDPR) (EU & EEA) and UK GDPR (United Kingdom)
California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) and other US State Privacy Laws (VCDPA, CPA, CTDPA, UCPA, TDPSA)
Children's Online Privacy Protection Act (COPPA)
Lei Geral de Proteção de Dados (LGPD) (Brazil)
Personal Information Protection and Electronic Documents Act (PIPEDA) (Canada)
Privacy Act 1988 & Australian Privacy Principles (APPs) (Australia)
Digital Personal Data Protection Act, 2023 (DPDP) (India)

This Privacy Policy explains how we collect, use, store, share, and protect your information when you download, install, access, or use our mobile application and associated online services.

Please read this Privacy Policy carefully. By downloading, accessing, or using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please do not use the App and delete it from your device.

2. Age Restriction & Strict Children’s Privacy Policy (18+ Requirement)

2.1 Age Restriction (Strictly 18+)

The App is strictly intended for individuals who are at least 18 years of age (or the legal age of majority in your jurisdiction).
Because the App features simulated AI companion dating conversations, persona customization, and mature conversational themes ("Spicy Mode"), minors under the age of 18 are prohibited from using the App.

2.2 Compliance with COPPA and Global Minor Protection Laws

We do not knowingly collect, solicit, or maintain personal information from children under 13 (USA - COPPA), under 16 (EU/UK - GDPR), under 18 (India - DPDP), or any individual under the age of 18 worldwide.

The App is not directed to children and is not categorized in the "Families" section of Google Play.
If we become aware that personal information of an individual under 18 has been collected without verified parental consent, we will promptly take steps to permanently delete that information and terminate the associated account.
If you are a parent or guardian and believe your child under 18 has provided us with personal information, please contact us immediately at my.feedback@yahoo.com or submit a request via our Account Deletion Portal.

3. Generative AI Disclosures & Safety Guidelines

In compliance with the Google Play Generative AI Policy, this section explains how artificial intelligence is utilized within the App:

3.1 Nature of AI Personas

All companion characters (including Tamannah and custom user-created personas) are fictional, simulated artificial intelligence agents powered by large language models (LLMs) via Google Firebase AI / Vertex AI / Gemini.
AI characters are not real human beings. Responses are generated algorithmically and should not be considered factual statements, professional guidance, or real human expressions.

3.2 Chat Input & Prompt Processing

When you send messages to an AI persona, your text prompts and recent conversation context are transmitted securely to our AI model processing backend (Google Firebase AI / Vertex AI) to generate conversational responses.
Your conversation logs are stored in our secure cloud databases (Google Cloud Firestore / Realtime Database) and cached locally on your device to maintain your chat history and memory continuity.
We do not sell your private chat logs to third-party data brokers.
We do not use your private one-on-one chat conversations to train public foundation AI models without explicit, informed consent.

3.3 Content Moderation, Safety Filters & User Reporting

We implement automated filtering mechanisms to prevent the generation of prohibited content, including:
- Child Sexual Abuse Material (CSAM) or Child Sexual Exploitation and Abuse (CSAE) — Zero Tolerance Policy
- Hate speech, harassment, violent threats, or promotion of illegal acts
- Suicide, self-harm, or self-injury encouragement
- Non-consensual explicit sexual depictions or real-person deepfakes
User Reporting Mechanism: Users can report offensive, harmful, or inappropriate AI responses, or delete specific chat threads directly within the App interface or by contacting my.feedback@yahoo.com.

3.4 Medical, Psychological & Crisis Disclaimer

The App is designed solely for entertainment, companionship, and conversational simulation.
The AI is not a therapist, psychologist, medical doctor, or suicide prevention hotline. If you are experiencing mental distress, self-harm thoughts, or an emergency, please contact a qualified human professional or local emergency crisis services immediately.

4. Information We Collect

We collect information in three ways: (1) information you provide directly, (2) information collected automatically, and (3) information from third-party services.

4.1 Information You Provide Directly

Data Category	Specific Data Points	Purpose of Collection	Optional / Required
Authentication & Profile Data	Display name, email address, profile picture (obtained via Google Sign-In), or anonymous Guest Identifier	Account creation, authentication, profile display, session management	Required for signed-in features
Chat & Interaction Data	Text messages, prompts, chat histories, preferences, and "Spicy" mode toggle selections	Delivering AI companion chat, conversation continuity, sentiment adaptation	Required for chat functionality
User Creations (My Creation)	Custom persona names, character bios, custom avatars, roleplay prompts, character traits	Allowing users to build, save, and interact with custom AI characters	Optional (Feature-dependent)
Customer Support & Feedback	Email communications, bug reports, feedback submitted via help channels	Resolving technical issues, customer support, service improvement	Optional

4.2 Information Collected Automatically

When you use the App, certain technical data is collected automatically through our SDKs (Google Mobile Ads, Firebase Analytics, Firebase Crashlytics):

Data Category	Specific Data Points	Purpose of Collection
Device & Hardware Data	Device model, manufacturer, operating system version, screen resolution, system language, network carrier	Ensuring app compatibility, UI scaling, and technical performance
Identifiers	Google Advertising ID (`AD_ID`), Firebase Installation ID, Anonymous User ID, Hive local storage keys	Ad delivery & frequency capping, analytics, guest session continuity
Network & Diagnostic Data	IP address (coarse location at city/country level, immediately anonymized/truncated where required), connection type (WiFi / Cellular), connection status	Routing API calls, network state checking, fraud prevention
Crash & Performance Data	Stack traces, crash timestamps, memory state at time of crash, Firebase Crashlytics logs	Identifying, debugging, and fixing software crashes and stability issues
App Usage & Analytics Data	Session duration, screens viewed, feature interactions, button clicks, in-app review triggers	Understanding user engagement to improve UI/UX and feature stability

4.3 Information We DO NOT Collect

To protect your privacy, we explicitly confirm that we do NOT:

Request or collect precise background or foreground GPS location.
Access your device contacts, SMS, phone call logs, or calendar.
Access your microphone or camera without explicit runtime permission (we do not record ambient audio/video).
Collect financial account numbers, credit card numbers, or government-issued IDs (in-app transactions, if applicable, are handled exclusively through the secure Google Play Billing system).

5. How We Use Your Information (Purposes & Legal Bases)

We process your personal information according to applicable data protection laws under the following legal bases:

Purpose of Processing	Categories of Data Used	Legal Basis (GDPR / UK GDPR / LGPD)
To Provide & Maintain the Service	Profile info, Chat logs, Custom personas, Guest IDs	Contractual Necessity (Art. 6(1)(b)) — Fulfilling our service to you
To Generate Real-Time AI Responses	User prompts, chat context, character settings	Contractual Necessity (Art. 6(1)(b)) & Consent (Art. 6(1)(a))
To Authenticate & Protect Accounts	Google Sign-in token, Firebase App Check tokens	Legitimate Interest (Art. 6(1)(f)) — Securing our infrastructure against bots & abuse
To Serve In-App Advertisements	Advertising ID (`AD_ID`), coarse location, ad interaction events	Legitimate Interest (Art. 6(1)(f)) / Consent (Art. 6(1)(a)) where required for personalized ads
To Analyze Usage & Debug Errors	Analytics events, Crashlytics reports, device metrics	Legitimate Interest (Art. 6(1)(f)) — Improving app performance and stability
To Enforce Policies & Comply with Law	Audit logs, moderation flags, account records	Legal Obligation (Art. 6(1)(c)) & Legitimate Interest (Art. 6(1)(f))

6. Third-Party Service Providers (Sub-Processors)

We partner with reputable third-party service providers who assist us in operating, securing, and maintaining the App. These providers process data on our behalf under strict data processing agreements:

6.1 Google Firebase & Google Cloud

Services Used: Firebase Authentication, Cloud Firestore, Firebase Realtime Database, Firebase App Check, Firebase Vertex AI / Gemini API, Firebase Analytics, Firebase Crashlytics.
Purpose: User authentication, database storage, app security, AI response generation, analytics, and crash diagnostics.
Privacy Policy: https://firebase.google.com/support/privacy and https://policies.google.com/privacy

6.2 Google Mobile Ads (AdMob)

Services Used: Google Mobile Ads SDK.
Purpose: Serving non-personalized and personalized banner, interstitial, or rewarded advertisements, preventing ad fraud, and measuring ad effectiveness.
Data Collected: Advertising ID (AD_ID), approximate IP location, ad interaction metrics.
Opt-Out / Privacy Policy: https://policies.google.com/technologies/ads

6.3 Google Sign-In (Google Identity Services)

Services Used: Google OAuth 2.0 Sign-In.
Purpose: Streamlined, secure user authentication.
Privacy Policy: https://policies.google.com/privacy

7. Advertising & Tracking Choices

7.1 Google Advertising ID (`AD_ID`)

On Android devices running Android 12 or above, you can reset or delete your Advertising ID at any time via your device settings:

Go to: Settings > Google > Ads > Delete advertising ID or Reset advertising ID.
Opting out prevents ad networks from building behavioral profiles across different apps.

7.2 Non-Personalized Ads & Consent Management

Where required by law (such as the European Union under the ePrivacy Directive and GDPR), we present a Consent Management Platform (CMP) allowing you to choose whether to consent to personalized advertisements and vendor tracking cookies/identifiers.

8. Data Retention & Storage

8.1 Retention Periods

Active Account Data: We retain your account details, custom personas, and chat history for as long as your account remains active.
Guest Account Data: Local cache data is retained on your device until you clear app data, uninstall the app, or delete your profile. Cloud-associated guest sessions are purged periodically after extended inactivity (e.g., 90–180 days).
Crash & Diagnostic Data: Firebase Crashlytics data is retained for up to 90 days, after which it is automatically purged.
Analytics Aggregations: Firebase Analytics data is retained in accordance with standard retention schedules (up to 14 months) in anonymized or pseudonymized form.

8.2 Data Storage Location & Cross-Border Transfers

Our servers and cloud databases are hosted in secure Google Cloud data centers. If you access the App from outside the host country (e.g., from the EU, UK, or Australia), your information may be transferred across international borders. We ensure all cross-border data transfers comply with applicable law through Standard Contractual Clauses (SCCs) and appropriate technical and organizational safeguards.

9. Account & Data Deletion (Google Play Compliance)

In full compliance with Google Play’s Account Deletion Policy, we provide all users with simple, transparent, and direct methods to delete their account and all associated personal data.

9.1 In-App Deletion (Instant Self-Service)

You can permanently delete your account and data directly within the App:

Open the App and navigate to Account / Settings screen (AccountScreen).
Tap on "Delete Account".
Confirm your choice on the confirmation prompt ("Are you sure you want to delete your account? This action cannot be undone.").
Your account, authentication credentials, cloud chat history, custom personas, and local storage data will be immediately and permanently erased from our systems.

9.2 Web-Based Deletion Request (Without Reinstalling the App)

If you have uninstalled the App or cannot access your device, you can submit a deletion request online:

Dedicated Deletion Portal: https://chatwithtamannah.netlify.app/delete-account
Enter your registered email address or account identifier and submit the request.

9.3 Email Deletion Request

You can also request account and data deletion by sending an email:

Email: my.feedback@yahoo.com
Subject: Data Deletion Request - Tamannah AI Girlfriend
We will process your request and confirm data purging within thirty (30) calendar days.

9.4 What Happens Upon Deletion

Permanently Erased: Your Firebase Authentication record, Firestore user document, custom personas, cloud chat logs, profile metadata, and local database keys.
Retained (Limited): Certain anonymized transaction logs or crash aggregates that cannot be linked back to your personal identity may be retained strictly for legal compliance, fraud prevention, and accounting obligations.

10. Your Global Privacy Rights & Regional Disclosures

Depending on your country or state of residence, you have specific legal rights regarding your personal data:

10.1 European Economic Area (EEA) & United Kingdom (GDPR / UK GDPR)

If you reside in the EEA or UK, you have the following rights under Articles 15–22 of the GDPR:

Right of Access (Art. 15): Request a copy of the personal data we hold about you.
Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
Right to Erasure / "Right to be Forgotten" (Art. 17): Request permanent deletion of your personal data.
Right to Restriction of Processing (Art. 18): Request that we restrict the processing of your data under certain conditions.
Right to Data Portability (Art. 20): Request your data in a structured, commonly used, machine-readable format.
Right to Object (Art. 21): Object to data processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Withdraw previously granted consent at any time without affecting prior lawful processing.
Right to Lodge a Complaint: File a complaint with your local Data Protection Authority (DPA) or the UK Information Commissioner’s Office (ICO).

10.2 United States Residents (CCPA / CPRA & State Privacy Laws)

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, or other US states with enacted comprehensive privacy legislation:

Categories of Personal Information Collected in the Past 12 Months: Identifiers (Email, Advertising ID, Device ID), Internet/Electronic Network Activity (App usage, crash logs), Inferences (Chat context and companion preferences).
No Sale of Personal Information: We do not sell personal information for monetary consideration.
Sharing / Targeted Advertising: We may share pseudonymized device identifiers with advertising partners (such as Google AdMob) for targeted/cross-context behavioral advertising. You have the right to opt out.
Your US Rights:
- Right to Know / Access details about data collection and processing.
- Right to Delete personal information.
- Right to Correct inaccurate personal information.
- Right to Opt-Out of the "sharing" of personal information for targeted advertising.
- Right to Limit the Use of Sensitive Personal Information.
- Right to Non-Discrimination for exercising your privacy rights.
To Exercise Rights: Email my.feedback@yahoo.com or visit https://chatwithtamannah.netlify.app/delete-account.
California "Shine the Light" Law (Civ. Code § 1798.83): California residents may request a list of third parties to whom we disclosed personal information for direct marketing purposes (if any). We do not share personal information with unaffiliated third parties for their direct marketing.

10.3 Brazil (LGPD - Lei Geral de Proteção de Dados)

If you are located in Brazil, you have rights under Article 18 of the LGPD:

Confirmation of the existence of data processing.
Access to your personal data.
Correction of incomplete, inaccurate, or outdated data.
Anonymization, blocking, or elimination of unnecessary or excessive data.
Portability of data to another service provider.
Elimination of personal data processed with your consent.
Information on public and private entities with which we have shared data.
Revocation of consent.

10.4 Canada (PIPEDA)

Under PIPEDA, Canadian users have the right to access personal information held by us, challenge its accuracy, and understand how it is collected, used, and disclosed. Requests can be submitted directly to our contact email.

10.5 Australia (Privacy Act 1988 & APPs)

Australian users are entitled to rights under the 13 Australian Privacy Principles (APPs). We handle personal information fairly, securely, and transparently. If you believe your privacy has been breached, you may lodge a complaint with us or with the Office of the Australian Information Commissioner (OAIC).

10.6 India (Digital Personal Data Protection Act, 2023 - DPDP)

In compliance with the DPDP Act 2023:

Data is processed only for lawful and specified purposes with user consent or legitimate uses.
Users (Data Principals) have the right to access summaries of personal data, request correction/erasure, nominate an individual in the event of death/incapacity, and access grievance redressal mechanisms.
Grievance Officer: Requests and grievances may be directed to our designated grievance contact at my.feedback@yahoo.com.

11. Data Security Measures

We have implemented robust technical, physical, and organizational security measures to protect your personal information from accidental loss, unauthorized access, alteration, disclosure, or destruction:

Encryption in Transit: All communications between the App, our servers, and third-party APIs (Firebase, Gemini AI, AdMob) are secured using industry-standard TLS 1.3 / HTTPS encryption.
Encryption at Rest: User records and chat databases stored in Google Cloud Firestore and local Hive cache are protected with AES-256 encryption.
Abuse Prevention: Integration with Firebase App Check to ensure only genuine, untampered instances of the App can communicate with backend endpoints.
Access Control: Strict role-based access control (RBAC) and least-privilege principles restricting server access to authorized personnel only.

Note: While we employ rigorous security practices, no method of transmission over the Internet or electronic storage is 100% secure. We encourage users to maintain secure device passwords and safeguard their Google accounts.

12. Changes & Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our legal obligations, technical architecture, or app features.

When changes are made, we will update the "Last Updated / Effective Date" at the top of this document.
For material changes that significantly affect your rights or data practices, we will provide prominent notice within the App (e.g., via an in-app notice or dialog prompt) prior to the changes taking effect.
Your continued use of the App after any modifications signifies your acceptance of the updated Privacy Policy.

13. Contact Information & Grievance Redressal

If you have any questions, concerns, comments, or complaints regarding this Privacy Policy or our data handling practices, please reach out to us:

Developer / Publisher: SimplifyLifeApps
Support & Privacy Email: my.feedback@yahoo.com
Official Website: https://chatwithtamannah.netlify.app
Account & Data Deletion Portal: https://chatwithtamannah.netlify.app/delete-account
Help & Terms: https://chatwithtamannah.netlify.app/terms

We are committed to resolving your inquiry or complaint within thirty (30) business days.

Appendix: Google Play Console Data Safety Form Reference

This quick-reference guide assists developers in completing the Data Safety section in Google Play Console accurately to ensure 100% policy compliance.

Data Type (Play Console)	Collected?	Shared?	Processed Ephemerally?	Required / Optional	Purpose(s)
Personal Info: Name	Yes	No	No	Optional (via Google Sign-in)	App functionality, Account management
Personal Info: Email address	Yes	No	No	Optional (via Google Sign-in)	App functionality, Account management
Personal Info: User IDs	Yes	Yes (Firebase / Analytics)	No	Required	App functionality, Analytics, Fraud prevention
Messages: In-app messages	Yes	No (Processed via Firebase Vertex AI)	No (Stored for chat history)	Required (Chat feature)	App functionality, AI response generation
App Info and Performance: Crash logs	Yes	Yes (Firebase Crashlytics)	No	Required	Analytics, Diagnostics, App performance
App Info and Performance: Diagnostics	Yes	Yes (Firebase Crashlytics)	No	Required	Analytics, Diagnostics
Device or other IDs (Ad ID, Installation ID)	Yes	Yes (Google AdMob / Firebase)	No	Required	Advertising, Analytics, Fraud prevention

Security Practices Declared in Play Console:

Data encrypted in transit: Yes (All traffic uses HTTPS / TLS 1.3).
Data deletion mechanism provided: Yes (Users can delete their account and data in-app or via web URL https://chatwithtamannah.netlify.app/delete-account).
Committed to follow Play Families policy: No (App is restricted to 18+ adults only).