Privacy Policy

• Data controller: the operator of Paper Boyfriend
• Privacy contact: hello@boyfriend.click
• Data Protection Officer: not appointed

Information you give us:

• Account information: your email, nickname, and a hashed version of your password. If you sign in with Google, we receive the basic profile information you authorize (email and name).
• Chat content: your conversations with AI characters, the voice messages and photos generated from them, and an automatically generated “conversation memory” summary that lets characters remember what you have talked about.
• Payment information: order number, amount, currency, payment status, and subscription status. We never see or store your full card number — card data is handled by Waffo Pancake (see Section 5).
• Communications: emails (including content reports) and live-chat messages you send us.

Information we collect automatically:

• Device and network: IP address, browser and device type, operating system, time zone, and language.
• Usage and logs: pages visited, features used, request times, error logs, usage records (such as daily message counts), and moderation records (excerpts of blocked content).
• Human verification: data collected by Cloudflare Turnstile at sign-up to prevent bot abuse. https://www.cloudflare.com/privacypolicy/

We use your information only for the following purposes (legal basis in brackets):

• providing and maintaining the Service, including chat, voice, photos, and conversation memory (performance of contract);
• billing, subscription management, and issuing credits (performance of contract);
• customer support (performance of contract / legitimate interests);
• service notices such as email verification, password resets, billing, and policy changes (legitimate interests);
• security and prevention of fraud and abuse (legitimate interests);
• product analytics and improvement (legitimate interests);
• complying with the law (legal obligation);
• sending daily love-letter emails (legitimate interests; you can unsubscribe at any time — see Section 9).

We may aggregate or de-identify data for statistics; such data cannot identify you.

• Strictly necessary (cannot be disabled): keep you signed in and make core features work.
• Functional: remember your language preference.
• Analytics — Google Analytics: measures traffic and usage so we can improve the product. https://policies.google.com/privacy
• Analytics — Microsoft Clarity: records interactions such as clicks and scrolling to help us find usability issues. https://privacy.microsoft.com/privacystatement
• Live chat — Tawk.to: powers the support chat in the bottom-right corner. https://www.tawk.to/privacy-policy/

You can block or clear cookies in your browser settings, or install the Google Analytics opt-out add-on (https://tools.google.com/dlpage/gaoptout). Disabling strictly necessary cookies may prevent you from signing in.

We do not sell your personal information (including “selling” as defined by the CCPA), and we do not use it for targeted advertising. We share it only in these cases:

• Payment processor: Waffo Pancake, our Merchant of Record, processes orders, payments, taxes, and refunds. Card data is handled exclusively by Waffo Pancake under PCI-DSS and is never stored on our servers.
• AI providers: to generate replies, voice, and photos, relevant conversation content is sent to OpenRouter, DeepSeek, and Volcano Engine (a ByteDance company). Models used — Chat replies: DeepSeek V3 (DeepSeek, via OpenRouter); Photos: Seedream 4.0 (ByteDance · Volcano Engine); Voice messages: Doubao Seed-TTS 2.0 (ByteDance · Volcano Engine). Photo descriptions are also sent to Waffo Prompt Sift for content-safety screening before generation.
• Infrastructure providers: Vercel (hosting), Neon (database), Resend (email delivery), and Cloudflare (human verification).
• Analytics and support providers: Google Analytics, Microsoft Clarity, and Tawk.to (see Section 4).
• Legal requirements: when required by law, court order, or a lawful request from the authorities.
• Business transfers: in a merger, acquisition, or similar event, we will notify you in advance and make sure your information stays protected.
• With your consent: in any other case where you explicitly agree.

These providers may use your information only as needed to provide services to us and are bound by confidentiality and security obligations.

• all traffic is encrypted with HTTPS (TLS);
• passwords are stored hashed — we cannot see your plain-text password;
• access follows the principle of least privilege, and third-party service keys are kept server-side only;
• payment card data is handled entirely by Waffo Pancake and never passes through our servers.

If a data breach affects your rights, we will notify you and the relevant authorities within 72 hours of discovering it, as required by law. Please keep your account credentials safe and do not share them.

• Account information: kept while your account exists; deleted within 90 days after you close it.
• Chat history and conversation memory: kept while your account exists, and you can ask us to delete it at any time; deleted within 90 days after you close your account.
• Transaction records: kept for 5 years to meet tax and accounting obligations, then deleted.
• Support communications: kept for 2 years, then deleted.
• Server and security logs: kept for up to 12 months.

You can exercise any of the following rights by emailing hello@boyfriend.click. We will respond within 30 calendar days:

• Right to be informed: know what data we collect and how we use it;
• Right of access: get a copy of your personal information;
• Right to rectification: correct inaccurate or incomplete information;
• Right to erasure: ask us to delete your chat history, conversation memory, or entire account;
• Right to restrict processing: ask us to pause processing in certain cases;
• Right to data portability: receive your data in a machine-readable format;
• Right to object: object to processing based on legitimate interests (such as daily love-letter emails);
• Right to withdraw consent: withdraw any consent you gave earlier.

If you believe we have not handled your personal information properly, you have the right to complain to your local data protection authority.

We send daily love-letter emails to your registered address. To stop receiving them, simply reply to the email or write to hello@boyfriend.click and we will stop sending them. Essential service notices — email verification, password resets, billing, and policy changes — are not affected. We do not currently send advertising or marketing emails; if we ever do, we will ask for your consent first and include an unsubscribe link in every email.

Our servers and service providers are located mainly in the United States (Vercel, Neon, OpenRouter, and others) and China (Volcano Engine), so your information may be processed outside your country or region. For transfers of personal data from the EU or UK, we rely on safeguards such as the Standard Contractual Clauses (SCCs) offered by our providers, and we transfer only the data needed to provide the Service.

The Service is intended only for users aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, please contact us and we will delete it promptly.

The Service may link to or integrate third-party services (such as the Waffo Pancake checkout). This Policy covers only the information we collect directly; third parties’ data practices are governed by their own privacy policies.

If we make material changes to this Policy, we will notify you at least 15 days in advance by email or an on-site notice and update the date at the top of this page. Continuing to use the Service after the changes take effect means you accept the updated Policy.

If you have any questions, comments, or requests about this Privacy Policy or your personal information, contact us at hello@boyfriend.click (we usually reply within 2 business days). You can also read our Terms of Service.