Privacy Policy

This Privacy Policy explains how Inner Universe ("we", "us", or "our") collects, uses, shares, and protects information when you use the Inner Universe website, applications, and related services (the "Service"). It applies to everyone who uses the Service. Capitalized terms not defined here have the meaning given in our Terms of Service.

In short: we collect what we need to run the Service, we do not show ads, and we do not sell your personal data.

We collect the following categories of information.

• Account information. When you sign up, our identity provider collects your email address, name, and login credentials or social-login identifiers, and shares your email, name, and a user ID with us. We never see or store your password.
• Profile and persona information. The display name, avatar, and the personas you create, including the name, gender, age, and description you give each persona.
• Characters and content you create. Character definitions, personalities, instructions, scenarios, images and clips you upload or generate, expressions, backgrounds, and music links.
• Conversations. The messages you send and the responses characters give, along with derived data we generate to make characters consistent over time, such as scene, relationship, and state summaries, and long-term memory entries stored as text and vector embeddings.
• Voice and camera data. During a voice call we capture audio from your microphone to transcribe it to text. If you enable your camera, we capture periodic still frames and send them to a vision model so the character can react to them. Audio and frames are processed to produce a response and are not kept after the request completes; the resulting text transcript is stored as part of the conversation.
• Payment information. If you subscribe or buy tokens, our payment processor collects your card details directly. We receive a customer ID, subscription status, and transaction history, never your full card number.
• Usage and device data. Timestamps, pages and features used, token usage, rate-limit counters, approximate location derived from IP address, browser and device type, and error logs.
• Preferences. Theme, avatar size and position, default voices, and similar settings.

• To provide the Service: authenticate you, run conversations, generate images, voices, and video, keep characters' memories, and sync your settings.
• To process payments, meter token usage, and manage subscriptions.
• To keep the Service safe: moderate public characters and content, screen instructions that try to bypass safeguards, enforce rate limits, prevent abuse, and investigate violations of our Terms.
• To improve the Service: debug errors, understand which features are used, and tune quality. We do not use your private conversations to train our own machine-learning models.
• To communicate with you about your account, billing, security, and changes to our policies.
• To comply with law and protect our rights and the rights of others.

The Service is built on third-party infrastructure. We share information with the following categories of providers only to the extent needed for them to perform services for us, and each is bound by contractual obligations to protect it.

• AI model providers. To generate character replies, images, expressions, backgrounds, video, speech, transcription, and embeddings, we send the relevant conversation context, character and persona descriptions, and any audio or camera frames to a model-routing service and the underlying model providers. We choose routes that do not retain prompts for training where that option is offered, but retention and processing policies of these providers are governed by their own terms.
• Identity provider. Handles sign-up, sign-in, sessions, and account security.
• Payment processor. Handles checkout, subscriptions, invoices, and the customer billing portal.
• Database and storage hosting. Stores your account data, conversations, and uploaded or generated media.
• Hosting and infrastructure. Serves the application and stores server logs.

We do not sell your personal information and we do not share it with advertisers. We may disclose information if required by law, subpoena, or court order; to protect the safety of any person; to investigate fraud or abuse; or in connection with a merger, acquisition, or sale of assets, in which case this Policy will continue to apply to your data.

Some things you create can be made visible to other users if you choose: public characters (name, description, tagline, portrait, and personality, but never your conversations or private instructions), public expressions, discoverable backgrounds, and discoverable music links. Your account email is never shown to other users. Once another user has forked a public character or imported a shared item, their copy is theirs and is not removed when you make yours private.

We use strictly necessary cookies and local storage to keep you signed in, remember your theme and layout preferences, and protect against cross-site request forgery. We do not use advertising or cross-site tracking cookies. You can clear cookies in your browser, but the Service will not work without the necessary ones.

We keep your account data and content for as long as your account exists. Conversations and memories persist so that characters can remember you; you can clear a conversation, delete a character fork, delete a persona, or delete your entire account from the app at any time. Deleting your account removes your personal data, personas, private characters, conversations, memories, and uploaded media from our production systems within thirty days, after which it may persist in encrypted backups for up to ninety additional days before being purged.

We retain payment records for as long as required by tax and accounting law, and we may retain limited information about accounts terminated for abuse to prevent them from returning.

Data is encrypted in transit using TLS and at rest by our hosting providers. Access to production data is restricted to personnel who need it to operate the Service. No system is perfectly secure, so we cannot guarantee absolute security; if we learn of a breach affecting your data we will notify you as required by law.

Depending on where you live, you may have the right to access, correct, export, restrict, object to, or delete your personal data, and to withdraw consent where processing is based on consent. Most of this you can do directly in the app: edit your profile and personas, delete characters and conversations, manage your subscription, or delete your account from account settings.

For anything else, email oyy26@mails.tsinghua.edu.cn. We will respond within the time required by applicable law and may need to verify your identity first. If you are in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to complain to your local data-protection authority. If you are a California resident, you have the rights described under the CCPA/CPRA, and we confirm that we do not sell or share personal information for cross-context behavioral advertising.

Our providers operate in multiple countries, including the United States. When we transfer personal data across borders we rely on appropriate safeguards, such as standard contractual clauses, as required by applicable law.

The Service is for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact us at oyy26@mails.tsinghua.edu.cn and we will delete it.

We may update this Policy from time to time. We will post the updated version with a new effective date and, for material changes, notify you in the app or by email before the changes take effect.

Questions, requests, or concerns about privacy: oyy26@mails.tsinghua.edu.cn.