This policy explains how TengoFeed, Inc ("we") handles your information when you use TengoChat.
What we collect
- Account details: your name, email address, date of birth, a hashed password, your language, timezone and country.
- Your companions: the descriptions, settings and portraits you create, and the photo of yourself if you choose to upload one.
- Conversations: your messages, call transcripts, and the memories our system keeps from them.
- Billing: records from Stripe, such as your plan and payment status. We never receive your card number.
- Technical data: standard logs such as IP address, browser and device type.
Why we use it
To run TengoChat: to sign you in, to let your companions remember what you told them, to bill you, to keep the service safe, and to answer your questions. We do not sell personal data, and we do not use your conversations for advertising.
Teaching our own model, only if you agree. TengoChat may run a model of its own on servers we rent. If you switch on "Help improve TengoChat's replies" in your settings, the replies you mark as good, together with the few messages just before them and your companion's personality, may be used to teach that model to talk better. Only replies our own model wrote are used. Your account details, such as your name and email, and what your companion remembers about you are never added. The examples are deleted from the training server as soon as each round of learning ends. The setting is off unless you switch it on, and switching it off stops any further use.
Age checks
Explicit content is only for adults who have verified their age. You choose how, and you agree before anything starts:
- The camera check. You look at your camera and turn your head as asked. Our own software, running on our own server, estimates your age from a few frames and checks that a real person is in front of the camera. No outside company receives them. The frames are held in memory only while they are checked and are never stored, and the software does not recognise who you are. We keep only the result, the estimated age and the date.
- An ID. You send a photo of an identity document and a selfie. They are encrypted, seen only by the owner of TengoChat to check your age, and deleted as soon as the check is done, and in any case within 14 days. We keep only the decision and the date.
- Our identity partner, when offered: you verify on the partner's own page, and we receive only the result.
Who else sees it
Your messages are sent to the AI model that generates your companion's replies: a model provider, or our own model running on servers we rent. During calls, audio goes to our speech providers and your companion's portrait to our video provider. Payments go through Stripe and email through our email provider. Each of them acts on our instructions and under contract. We disclose data when the law requires it.
How long we keep it
Text conversations are kept while your account is open. Raw call transcripts are deleted 30 days after the memories worth keeping have been taken from them. A photo you uploaded of yourself is deleted with the companion it belongs to. When you delete your account, your companions, conversations and memories are removed; billing records are kept as tax law requires.
Your choices
From inside the app you can read and delete individual memories, export all of your data, change your language and timezone, and delete your account. For anything else, including requests under the GDPR, the CCPA or similar laws, contact us at [email protected].
Cookies
We use a small number of cookies that the service needs to work: one keeps you signed in, one remembers your language, and one protects forms against forgery. We do not use advertising or tracking cookies.
To know how many people visit and from where, each page tells us when it is open, without a cookie: we count the page, the country (and sometimes the city) worked out from your connection or your time zone, your type of device and browser, and your language. We never keep your IP address, and the same person cannot be recognised from one day to the next. These counts are kept for three months.
Security
Passwords are hashed with Argon2id. Keys for the services we connect to are encrypted at rest. Traffic is encrypted in transit. No system is perfectly secure; if you suspect a problem, tell us straight away.
Children
TengoChat is for adults. We do not knowingly collect information from anyone under 18, and we delete such accounts when we learn of them.
Contact
Questions about this policy go to [email protected].