Skip to content
Heroes, stories, tropes

Privacy Policy

Last updated: October 19, 2026

This policy explains what personal data Swoonfic collects, why, who receives it and what your rights are. Swoonfic is run by SwoonTech Inc. (“we”), the controller of your personal data. Questions: [email protected].

What we collect

When you use Swoonfic without an account

  • A guest profile with your story progress and messages, created when you start chatting.
  • Your display settings: theme, accent color and text size, kept on your device. The language is part of the page address.

When you create or use an account

  • Your email address, or the identifier and email Apple or Google share when you sign in with them (Apple may give us a private relay address).
  • The name you choose for characters to call you, how you ask them to address you (she, he or they), and the kinds of stories you tell us you like, if you answer those questions. You can skip the question about how to address you and change or remove the answer at any time.
  • Your confirmation that you are 18 or older and your consent to AI processing, with the time and the version of the text you saw.

When you chat

  • The messages you write, the characters’ replies, the narration lines and your story progress.
  • What characters remember about your story, and the notes you add to a character’s diary yourself.
  • Reports you send about a message, with a copy of the reported line and a few lines before it.
  • Chats you started over: when you press Start over, the earlier chat is kept in Earlier chats until you delete it.

When you buy in the app

  • Your subscription and purchase status from Apple or Google, through our purchase service RevenueCat. We never receive your card or bank details.

In the apps

  • If you allow notifications: a push token for your device, its time zone, and your choice of whether characters may write first and whether a preview is shown. To send a message at a time that suits you, we also count at which hour of the day you usually open the app for the first time (a count per hour, without exact times).
  • A confirmation from Apple or Google, through Firebase App Check, that a request comes from a genuine copy of the app. This does not identify you.

Technical and usage data

  • Your IP address, used briefly to protect Swoonfic from abuse (rate limits, bot checks) and to work out your country. We do not store it with your activity.
  • Your country, device type, platform, app version and language.
  • Facts about your use that our servers record: for example, that you signed up, opened a story or sent a message (never what you wrote).
  • On the website, which pages and stories you open, only with your consent where the law requires it. See the Cookie Policy.
  • The words you search for in the catalog, without anything that links them to you (no account, device or IP address); an email address or a long number in them is masked. We use them to learn what readers look for.

We do not use advertising trackers, do not track you across other companies’ apps or websites, and do not sell or share your personal data for advertising.

Why we use it

Purpose Data Legal basis (EEA, UK)
Run your account and chats, keep your progress on every device account, settings, messages, progress contract
Write characters’ replies with AI your messages and the story context contract and your consent
Keep Swoonfic safe: moderation, reports, abuse and fraud prevention, age confirmation messages, reports, technical data legitimate interests, legal obligation
Free limits, Swoonfic+ and sparks account, purchase status contract
Push notifications you turned on push token, time zone, usual hour consent
Understand and improve Swoonfic usage facts, website analytics legitimate interests; consent for website analytics where required
Answer you your messages to support contract, legitimate interests
Meet legal duties what the law requires legal obligation

AI processing

To write a character’s reply, we send your message together with the context of the story (what happened so far and what characters know and remember) to AI model providers who process it on our behalf. Today these are OpenAI, which writes the replies and the story memory, and TypeSafe, which checks messages for safety. Messages and replies are checked automatically before they are shown. We contract our providers so that they may not use your messages to train their models. If we add or change a provider, we update this policy.

If you describe the stories you like in your own words, we send that text once to the same AI provider to find the matching genres and tropes of our catalog. We keep only the genres and tropes you confirm, never the text.

Pictures of stories and characters are made in advance by our team with AI tools; what you write is never used for them.

We ask for your consent to AI processing when you start; without it, you can’t chat.

Who sees your data

Only people who need it to run Swoonfic:

  • Our team, only for moderation of reported messages, support you ask for, security and legal duties. We do not read chats otherwise.
  • Service providers who process data for us under contract:
    • OpenAI and TypeSafe, AI models (see above);
    • Cloudflare, which delivers our website, our API and our images and checks that a person, not a bot, asks for a sign-in code (Cloudflare Turnstile);
    • RevenueCat, purchases and subscription status;
    • Google (Firebase), push delivery and app checks, and Apple, push delivery and app checks;
    • Amazon Web Services (Amazon SES), which sends sign-in codes and notices;
    • Sentry, error monitoring, set up so that message text and personal data are not sent;
    • hosting infrastructure in the United States.
  • Apple and Google, when you sign in with them or buy through their stores, under their own privacy policies.
  • Authorities, when the law requires it or to protect someone’s safety.

International transfers

Our providers may process data outside your country, including in the United States. We use safeguards required by law, such as the EU Standard Contractual Clauses and the UK addendum.

How long we keep data

  • Account, settings and chats: until you delete them or your account. When you delete a chat, its messages, what the character remembered and your story progress in it are deleted for good, including chats you started over.
  • Guest profiles: deleted automatically about two months after their last use.
  • Sign-in sessions: 60 days after your last visit.
  • Push: a device token until you sign out, turn notifications off or the device has not opened the app for 270 days; the log of notifications sent, 30 days; the usual-hour counts, until 60 days without opening the app.
  • Usage facts: 1 year; analytics session identifiers: 400 days.
  • Search words: 180 days, not linked to you.
  • Reports of messages: a report, with a copy of the reported line and a few lines before it, is kept 180 days after we resolve it, or 365 days when we took action; deleting your account removes you, your comment and your own lines from it.
  • Deleted accounts: removed from our systems right away in a background process; backups expire within 30 days.
  • Records we must keep by law: for the period the law requires.

Your rights

Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict its use, and withdraw consent at any time (this does not affect earlier processing). You can delete a chat in Earlier chats and delete your account yourself in Me → Delete account, change cookie choices in Cookie settings, and send any other request to [email protected]. We answer within one month, or sooner where the law requires.

You can also complain to your data protection authority.

California and other US states: we do not sell or share personal information, and we do not use sensitive personal information to infer characteristics about you. You have the rights above and will not be treated differently for using them.

Age

Swoonfic is only for adults (18+). We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.

Security

  • In transit: connections between your device and Swoonfic use HTTPS (TLS).
  • Secrets at rest: values we must read back later (the push tokens of your devices, the Sign in with Apple token, a sign-in code waiting to be emailed, our team’s two-step sign-in keys) are stored encrypted with AES-256-GCM. Codes we only need to compare, such as sign-in and recovery codes, are stored as keyed hashes.
  • Your chats are stored on our servers and shared only as described in Who sees your data. They are not end-to-end encrypted: our servers have to read a message to write the character’s reply and to check it for safety.
  • In the apps, your sign-in is kept in your device’s secure storage (Keychain on iPhone, Keystore on Android).
  • We limit who on our team can access data, and keep logs free of message text and personal data.

No system is perfectly secure; we will tell you and the authorities about a breach where the law requires.

Changes

We will update this policy when Swoonfic changes and tell you about important changes in Swoonfic or by email. If the change affects what you consented to, we will ask again.