Privacy, in plain English

What we keep,
and what we don't.

Name: Bae
Rating: 4.9 (4 reviews)

The short version: we keep what makes the product work, and nothing else. You can ask for it back, or ask us to forget, whenever you want.

What we collect

If you take the quiz, we record your eight answers and the archetype it returned, tied to a random session id (not your name).
If you create a companion, we store the companion's name, what they call you, the archetype you forked from, your chosen register, the avatar (if generated), and every message exchanged with that companion. This is what makes them remember you.
If you send your companion a photo, we check it for content we don't allow, strip its location and camera data, and store it privately. You can open it from inside your chat, and our small moderation team can view it when reviewing content for safety and to enforce our rules — nobody else. We also keep a one-line description of it so your companion remembers what you showed them.
If you give us your email, we attach it to your account so you can come back from another device. Optional. We send email through Brevo, and once you've confirmed your address it's on our Marketinque mailing list; deleting your account takes it off.
We log a session cookie (psn_ses) so the site remembers which user you are. It's a random string, not your data.
We log basic request metadata for security (IP, user agent, timestamp) for 30 days. After that it's deleted from our logs.

We don't collect your name unless you tell us.
We don't sell your data. We don't sell anything to anyone right now.
We don't fingerprint you across the web.
We use Microsoft Clarity for anonymous session replay (heatmaps, where the site confuses people), Google Analytics for visit and page counts, Meta Pixel and Google Ads tags for ad attribution, and our own server-side analytics. Personally identifying fields are scrubbed before Clarity recording. None of these services receive your messages with your companion.

You. The infrastructure that runs Bae (us, our hosting and database provider DigitalOcean, our LLM provider). That's it.
Your messages and your companion's responses pass through Google's Gemini API to generate the next response. Per Gemini's API terms, paid API content is not used to improve their models.
Photos you send pass through the same Gemini API — once to check them and once so your companion can see them.
We do not share your conversations with the platforms we review, advertisers, or anyone else.
We do not read your conversations except when investigating an abuse report or a system bug, and even then we minimize what we look at.

The app keeps the same things as the site and talks to the same servers. Before your first message it asks your permission to send your messages to Google's Gemini, which writes her replies.
If you sign in with Apple, Apple tells us a stable account id and, if you choose to share it, your email (which may be an Apple relay address). We never see your Apple password.
If you buy Bae Unlimited in the app, Apple takes the payment. We receive a record of the purchase (which plan, when it renews or ends), never your card.
If you allow notifications, we keep your device's push token so we can tell you when she writes. Apple delivers them. You can turn them off in the app's settings or in iOS Settings, and we delete the token when you delete your account.
The app has no advertising or tracking SDKs and no session replay, and we don't send what you do in the app to advertising platforms. It does not track you across other apps or websites.
You can export your data and delete your account from inside the app. Deleting works like /goodbye below: your account, email and sign-in are deleted, and your conversations are kept without your identity unless you ask us at bae@ppl.studio to delete them too.

Forever, by default — until you ask us to forget. Memory is the product, and a year-old companion who forgot you wouldn't be a companion.
Photos you send are deleted, with their descriptions, when you delete that companion or your account. A photo our check flags stays in your chat blurred and is kept privately for up to 30 days so our moderation team can review it; your companion is told in a line of text what it shows, but is not shown the photo. The team may restore it to your chat, keep it blurred, or remove it, and if they don't restore it, it is deleted after those 30 days. A photo flagged as possibly showing a minor together with any nudity or sexual content is deleted the moment it is flagged and is never described to your companion.
If you click "forget everything" on /goodbye, we delete your user record (your email and sign-in), every session, your quiz answers and waitlist entries, and the photos you sent; backups holding them roll off within 30 days. Your companions leave your account, but their conversations are kept without your identity: no email, no account, nothing that ties them to you except whatever you wrote in them. We use them only to understand and improve Bae, never publish or share them, and delete them too if you write to bae@ppl.studio.
If your account is inactive for two years and there's no email attached, we'll delete it ourselves with a 30-day notice. If your email is attached, we'll write before doing anything.

You can ask us to show you everything we have on you. /me/export downloads it as JSON.
You can ask us to delete it all. /goodbye (or Delete account in the iPhone app) closes your account in one click; write to bae@ppl.studio and we'll delete your conversations as well.
You can ask us to correct anything you think is wrong. Write to bae@ppl.studio.
If you're in the EU, UK, California, or another jurisdiction with these rights codified — they apply to you the same way they apply to everyone.
We don't auto-make decisions about you using AI in any meaningful sense beyond generating the next message in a conversation you started.

We set one essential cookie (psn_ses) for your session. You can't opt out of that one — without it, we can't tell you apart from anyone else.
We also load Microsoft Clarity for anonymous session replay (PII-scrubbed before recording), Google Analytics for visit and page counts, Meta Pixel for ad attribution and remarketing, and Google Ads tag for the same. These load for every visitor; we don't gate them behind a consent banner.
To opt out, use a tracker-blocking browser extension or block the third-party domains in your browser's content settings. Both Meta and Google also offer account-level opt-outs (facebook.com/ads/preferences, adssettings.google.com).
See /cookies for the full per-cookie list, durations, and opt-out paths.

This site is for adults. We don't knowingly accept users under 18.
If you tell our companions you're under 18, they're instructed (in their system prompt) to step out of any romantic register and recommend you talk to a real adult you trust.
If you're a parent or guardian and you believe your child has signed up here, write to bae@ppl.studio and we'll delete the account immediately.

Last updated: October 2026.
If we materially change anything (collect more, keep it longer, share with a new party), we'll post the change on /changelog and email anyone who's given us their email at least 14 days before it takes effect.

Last updated · October 2026