Privacy
What we store, who can see it, and how to take it back.
The short version. Your conversations are stored in our database so your companion can remember them. They are not end-to-end encrypted, and our engineers can technically read them. We do not sell them, and we do not use them to train models. You can download everything or delete all of it from your account settings, at any time, without asking us.
What we store
- Your email address and a hash of your password. We never store the password itself.
- Your companions - the names, personalities and interests you set up.
- Your messages, and your companion's replies. These are kept so the conversation still exists when you come back.
- Memories - short notes your companion extracts from what you have told it, so it can bring things up later.
- Billing state if you subscribe: which plan, whether it is active, and the Razorpay subscription reference. Card details never reach us - Razorpay handles those and we never see the number.
What we do not do
- We do not send email. Not receipts, not newsletters, not password resets, not "we miss you" reminders. There is no mailing list because there is no mail.
- We do not sell your data or share it with advertisers or data brokers.
- We do not use your conversations to train models.
- We do not require your real name. Sign up with any email you like.
Encryption, honestly
Traffic between your browser and the site is encrypted in transit over HTTPS. Your stored conversations are not end-to-end encrypted. That means that with database access, a person could read them.
This is a real trade-off rather than an oversight. Long-term memory requires that we can read the text in order to summarise it and give it back to your companion later. An end-to-end encrypted design would make the product's central feature impossible. We would rather say that than print the word "encrypted" and let you assume something stronger.
Who your messages are sent to
To generate a reply, your recent conversation is sent to Anthropic's Claude API. That is a third party, and it is the only one your conversation text reaches.
Taking your data back
Both of these are self-service in your account settings. Neither needs a support request.
- Export. Downloads one JSON file containing your account details, every companion, every memory and every message.
- Delete. Removes your account, your companions, your memories and your messages from the database. It is immediate and permanent - we have no backup we would restore you from. Cancel an active subscription first, from the subscription page.
Cookies
One cookie, for your login session. No analytics cookies, no advertising cookies, no third-party trackers - which is why you have not been asked to accept anything.
Age
heyyaar is for people aged 18 and over.
Asking us about any of this
Use the contact form. It reaches us without email being involved on our side.