1. Who is responsible

[OPERATOR LEGAL NAME], established in the Netherlands ([ADDRESS]), is the controller for the personal data described here. You can reach us at [CONTACT EMAIL].

2. What we collect

• Account data: your email address and password, and any profile details you choose to add, such as a name or pronouns.
• Your content: your conversations with companions and everything that grows out of them, such as journals, memories, pictures and characters you create.
• Technical data: server logs with IP address, request path and timing, kept briefly for security and debugging.

3. Why we process it

We process your data to provide the service you signed up for (contract), to keep the service secure and prevent abuse (legitimate interest), and to meet legal obligations where they apply. Conversations exist so that your companions can respond and remember; we do not read them for any other purpose, and we do not use them to train AI models.

4. Who processes it for us

Querencia runs on our own servers in the European Union (hosted at OVH). To generate companion responses, pictures and voices, the relevant content is processed by AI model providers under agreements that prohibit them from storing it or training on it. Transactional email (such as password resets) is delivered through our EU email provider. We share personal data with no one else, unless the law obliges us to.

5. What we do not do

No advertising, no sale of personal data, no third-party analytics or tracking cookies. The only cookie Querencia sets is the one that keeps you signed in.

6. Storage and security

Your content is stored encrypted at rest on EU servers, with access limited and logged. Voice audio from calls is processed on our own servers and is not stored. Photos you share in a conversation are processed to generate a response; the image itself is not stored, but a short text description of what the companion saw becomes part of the conversation and its memory, and you can delete it like any other message or memory.

7. Signing in with Google

If you choose to sign in with Google, we receive your name and email address from your Google account and use them only to create and access your Querencia account. We get no other Google data, and we never post or act on your behalf.

8. How long we keep it

We keep your data for as long as your account exists. You can export everything from your account settings at any time. When you delete your account, your data is deleted with it, and expires from routine backup copies within 30 days. Technical logs are kept for at most 14 days.

9. Your rights

Under the GDPR you can ask us for access to your data, correction, deletion, restriction of processing, a portable copy, and you can object to processing based on legitimate interest. Most of this you can do directly in the app; for the rest, email [CONTACT EMAIL] and we will respond within a month. You can also lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.

10. Changes

If this policy changes in a way that matters, we will tell you in the app or by email before the change takes effect.