In short
- Your shared space is visible only to you and your partner.
- We never sell your personal data.
- Live voice in your shared room is used only for the conversation. We don't record it.
- You can download a copy of your data or delete your account at any time. Deletion is permanent: we anonymise your profile at once and erase the rest of your data about 30 days later.
A plain-language summary. The full text below is what applies.
On this page
1. Introduction
AltScape (“we”, “our”, “us”) is a private space for two, operated by PairOx Pty Ltd. What you and your partner create together is visible only to the two of you, and there are no friend lists or public spaces. Your basic profile is the exception: it is public by default, and anyone can find and view your photo whatever you choose (section 7 explains who can see what). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, mobile applications, and related services (collectively, the “Services”).
This policy applies to everyone who uses the Services, wherever you live. Section 11 adds what the law requires in the European Economic Area and Switzerland, the United Kingdom, the United States, Australia, India, Chile and other countries.
2. Who is responsible for your data
AltScape.ai is operated by PairOx Pty Ltd (ABN 82 154 477 728), Sydney NSW, Australia. PairOx Pty Ltd is the business responsible for your personal data (the data controller) and, under the DPDP Act, the Data Fiduciary.
Contact: privacy@altscape.ai
Address: PairOx Pty Ltd, Sydney NSW, Australia
3. What personal data we collect
We collect the following categories of personal data:
- Identity and contact: Email address, display name, username, avatar image and date of birth.
- Account and authentication: OAuth provider identifiers (Google, Apple), session tokens, and authentication metadata.
- Profile and preferences: Bio, location label (optional), theme preferences, notification settings, and AI companion configuration.
- Usage data: Features you use, time spent in your shared space, daily check-in activity, and the content you create together (messages, shared memories, and capsules).
- Device and technical: Operating system, app version, browser type, IP address, push notification tokens, and crash logs. In the mobile app, we also use your approximate (city-level) location — never precise GPS — solely to show local weather in your shared rooms. We also use your IP address to estimate where you are, only as far as we need to follow local laws. For example, new laws in New York and Colorado restrict AI companions, so from the end of 2026 the AI companion and the daily check-in aren't offered there; when you use them, we check your IP address against a list, kept in our own database, of the internet addresses that DB-IP places in those states. We don't keep your IP address for this, and our counts of these checks don't identify anyone. If a check places you in New York or Colorado, we note which state, when, and when a check last placed you elsewhere, so that we don't send you check-in reminders while the check-in isn't offered there; we delete that note 90 days after a check last placed you in either state, or when your account is erased. We also use your IP address for one safety purpose: when you use the AI companion or the daily check-in, we estimate your country from it using DB-IP's country list, so that if a message shows signs of a crisis we can show you crisis support lines for that country; we keep neither your IP address nor your country for this, except that we count how often we show crisis support by country, without identifying anyone. IP Geolocation by DB-IP (opens in a new tab)
- Voice and media: Live voice in your shared rooms, and a screen you choose to share in an Explore Together room in the app: both are streamed live and never recorded by us. Also the images and media you and your partner choose to add to your shared space or memories.
- Partner pairing: The partner you are paired with and your pairing status. AltScape has no friend lists, followers, or groups.
- Payment & subscription: If you subscribe to Couple Premium, your payment is processed by our payment providers (Stripe on the web, Apple on the App Store, Google on Google Play). We receive your subscription status and limited billing details — we never receive or store your full card number.
We do NOT collect: Precise GPS location, contacts from your device, or browsing history outside our Services.
We collect this information from you, from your device when you use the Services, from Apple or Google if you sign in with them, from Stripe, Apple and Google when you subscribe, and from our automated safety checks, which infer safety signals from what you write (section 6). We also get the mood and energy summaries of your daily check-ins from the AI, which works them out from your answers (section 9). We hold it in our database and file storage, which Supabase hosts for us in Singapore.
Check-in moods and the feelings you share with the AI companion are health-related data. Our consumer health data privacy policy explains how we handle them.
4. Legal basis for processing
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:
- Contract (Art. 6(1)(b)): your account, pairing with your partner, your shared space, messages, memories, worlds, avatars and Couple Premium.
- Consent (Art. 6(1)(a)): the AI companion and AI features, AI Memory Storage, analytics, push notifications, location for weather and 3D avatars. You can withdraw it at any time in Permissions.
- Explicit consent (Art. 9(2)(a)): the moods and feelings you share in daily check-ins and with the AI companion.
- Legitimate interests (Art. 6(1)(f)): OpenAI's automated safety checks of what you write, handling reports, preventing fraud, keeping AltScape secure, and finding and fixing errors and crashes with Sentry. Our interests are keeping you, your partner and others safe, and keeping the Services working. We also check your IP address to follow the laws of the places where people use AltScape (section 3).
- Vital interests (Art. 6(1)(d)): when our safety checks find signs that someone may be at risk of self-harm in a message or a world description, we show where to get help and keep a short record, to protect life.
- Legal obligation (Art. 6(1)(c)): keeping records and sharing data where the law requires it, for example reporting child sexual abuse material or answering a valid court order.
We ask for each consent separately, and each one stays off until you turn it on. You can withdraw a consent at any time in Permissions, as easily as you gave it. That stops the use from then on; it doesn't undo what we did lawfully before.
Your right to object
Where we rely on legitimate interests, you can object at any time, on grounds relating to your situation, by emailing privacy@altscape.ai. We will then stop, unless we have compelling legitimate grounds that override your interests, rights and freedoms, or need the data to establish, exercise or defend legal claims.
5. How we use your data
- To provide, maintain, and improve the Services.
- To provide your shared space and its features for you and your partner — including your shared rooms, messages, memories, daily check-in, and AI companion.
- To send notifications you have explicitly opted into.
- To ensure platform safety and enforce our Community Guidelines.
- To analyse usage patterns and improve performance (anonymised where possible).
- To comply with legal obligations and respond to lawful requests.
6. Automated decisions
Computer programs, including AI models, make or help make some decisions about you. These are the kinds of decisions, the personal information they use and how a person can review them. We don't use automated decisions for advertising.
- Age checks: the date of birth you give at sign-up decides automatically what you can use. Under 13, you can't have an account, and we close and delete it. Under 16, you can't use the AI companion or our other AI features (such as the daily check-in, generated avatars and worlds built from your description), or turn on AI Memory Storage or 3D avatars. Under 18, you can pair only with another person under 18, and the AI companion follows stricter safety rules.
- Content checks: a moderation model that OpenAI runs for us checks the text of your messages and of other things you write or share. If it finds something that may seriously harm others, such as harassment, hate, threats of violence or sexual content involving a minor, that content is refused or hidden automatically, and hidden content stays hidden until one of our moderators reviews it. Other possible problems go to our moderators, who decide what happens. Our moderators see your content only when it is reported to us or flagged by these checks.
- Safety signals: the same checks look for signs that you may be at risk of self-harm in what you write, which is health information. If they find them, the app shows you where to get help, and a clear sign in a private message is never hidden and never goes to our moderators. We keep a record that the check fired, whether or not you turn on Analytics. For a message to your partner or a world you describe, it is the kind of risk and a score (not your words), deleted after 90 days. For a daily check-in, it is a risk level, a score and a standard note (not your words), with the support suggestions we prepare for you; in an AI companion chat, a flag saved with your message. Both are kept until your account is erased.
- AI companion replies: while each reply is being written, a quick check looks for harmful phrases and personal details; if it finds any, the reply stops, is cleared from your screen and is replaced with a standard message. Once the reply is complete, it is reviewed by a moderation model that OpenAI runs for us and by checks that it fits the companion's personality and isn't too long; a reply that fails is removed and replaced in the same way, so you may see it briefly first. Daily check-in replies get the safety checks before you see them. If our checks remove the companion's replies several times within an hour, the conversation is flagged for our team to review.
- Location check: when you use the AI companion or the daily check-in, a program checks whether your IP address places you in New York or Colorado and, from the end of 2026, if it does, turns those features off there (section 3). A person can explain this decision but can't change it, because it follows where your IP address appears to be each time; if you're not in either state, try again later or on another network.
The programs make some of these decisions on their own: the age checks, the location check, refusing or hiding content, removing and replacing a reply and showing you where to get help. In the others, a program flags something and a person decides: the content and conversations sent to our moderators and our team.
You can ask for a person to review any of these decisions, explain it to you and hear your view. Appeal a moderation decision in Safety → Appeals on the web or in Profile → Help & support → My appeals in the app, or email privacy@altscape.ai.
An age check is different: a person can explain it, but can't change its result. It follows the date of birth you gave at sign-up, which can't be changed later, and we delete the account of anyone under 13 within a day.
8. Data retention
We keep your personal data while you have an account. Deleting your account is permanent and can't be cancelled: when you confirm, you're signed out everywhere, your profile is anonymised and your pairing ends. We erase the rest of your personal data about 30 days later, unless the law requires us to keep it longer (for example, to preserve evidence for a child-safety investigation). We delete our records of how you use the Services (usage events) after 90 days. If you allowed analytics, our analytics provider, PostHog, keeps its copy of those events for the period set in our account with it. Apple, Google and Stripe keep their own records of your purchases. We don't keep rolling backups: a one-off copy of our database made before a system update can hold your data until we delete that copy. Files you uploaded, such as photos, can no longer be viewed or downloaded once we erase your data, but stored copies of them can stay with our storage provider until we remove them.
9. Your conversations with the AI companion
When you chat with the AI companion, we store each message you send and each reply on our servers (our database is hosted by Supabase), with the time, the mood from your latest daily check-in and the results of our automated safety and quality checks. On the web, your conversation is also saved in your browser so it's there when you come back; Clear chat removes only that copy.
If you turn on AI Memory Storage (in the app: Profile → Privacy & Consent), the companion saves short notes about what you've told it, called memories, and uses them to pick up where you left off. Each daily check-in in the app also saves a short summary of your mood and your energy level, which the AI works out from your answers; with AI Memory Storage on, it also saves the check-in conversation itself and the key points the AI picks out of it, as memories. Turning AI Memory Storage off stops new memories being saved, apart from that summary, and stops the companion and check-ins using the ones already saved; those stay until your account is erased or you ask us to delete them. When you send your partner or a friend a hug, or they send you one, we also save a memory of it for each of you who has AI Memory Storage on: a short note that names the other person and, if there is one, the world the hug was given in. This applies wherever the hug is sent, in the app or on the web, for example in an Explore Together room or at a campfire. You can also delete any of your memories yourself, including the memory of a hug (on the web: Settings → AI companion → Companion settings → Memories and check-ins; in the app: Profile → Settings → Manage AI memories); deleting yours doesn't delete your partner's.
To write each reply, we send Anthropic (Claude) your recent messages, the memories that relate to them and the mood from your latest check-in. Anthropic also scores the quality of each reply and, if AI Memory Storage is on, picks out what to remember. OpenAI checks messages and replies for safety, and turns your messages and memories into search data so the companion can find related memories. Both process this content on our behalf only to run the companion. We never sell your conversations or use them for advertising.
If our checks see signs that you may be at risk of self-harm, we show you where to find help and save that result with your message. If Anthropic's scoring rates a reply as poor, or our checks remove the companion's replies several times within an hour, we flag that exchange for review by our team.
We keep your companion conversations and memories until your account is erased, even if you turn the companion off. When you delete your account, they're erased with the rest of your data about 30 days later, unless the law requires us to keep them longer. To have them deleted sooner, email privacy@altscape.ai. You can also delete your memories yourself at any time (on the web: Memories and check-ins; in the app: Profile → Settings → Manage AI memories). Download my data in Settings includes your conversations (each message you sent and each reply, or the standard message that replaced it) and your memories. It leaves out the search data made from your memories, and the original text of any reply our checks removed and replaced.
10. Your rights
Wherever you live, you can:
- get a copy of your personal data, in a format you can take to another service;
- have personal data that is wrong or incomplete corrected;
- have your personal data deleted;
- have a use of your personal data stopped or limited, or object to it;
- withdraw a consent you gave;
- have a person review a decision our programs made about you (section 6).
To exercise these rights, email privacy@altscape.ai or use the controls in Settings (in the app: Profile → Settings).
We answer within 30 days; if the law lets us take longer for a complex request, we'll tell you why within those 30 days. If the law where you live sets a shorter deadline, we meet it (section 11). To protect your data, we may ask you to confirm it's you, for example by writing from the email address on your account. Someone you authorise can ask for you if they send us your signed permission. Using your rights is free, and we won't treat you differently for using them. If the law lets us refuse part of a request, for example data we must keep for a legal duty, we'll tell you why.
To complain about how we handle your personal data, email privacy@altscape.ai. We acknowledge complaints within 24 hours, look into them and tell you the outcome within 7 days. If you're not satisfied, you can go to the data protection authority for your country or region (section 11).
Use your rights in the app
Download a copy of your data or delete your account in Settings, and review what you've agreed to in Permissions.
11. Your country or region
These sections add what the law requires where you live.
In the European Economic Area and Switzerland
Under the GDPR (and Switzerland's Federal Act on Data Protection), you have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right not to be subject to a decision based solely on automated processing that has legal or similarly significant effects on you; section 6 explains how to have a person review one. Section 4 gives our legal bases and section 7 the safeguards for transfers outside the EEA.
You can lodge a complaint with a supervisory authority, in particular in the EU country where you live or work or where you think the law was broken. In Switzerland, that is the Federal Data Protection and Information Commissioner (FDPIC).
In the United Kingdom
Under the UK GDPR and the Data Protection Act 2018, you have the same rights as in the EEA. You can complain to us first (section 10). You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
In the United States, including California
In the last 12 months we collected these categories of personal information, as California law names them: identifiers (such as your name, email address, account ID, IP address and device identifiers); the personal information listed in Cal. Civ. Code § 1798.80(e) (your name and email address); characteristics of protected classifications (your age, from your date of birth); commercial information (your subscription); internet or other electronic network activity information (how you use the Services, if you allow analytics, and crash reports); geolocation data (your approximate location, only if you allow it, and never stored, and whether your IP address places you in New York or Colorado, as section 3 explains); audio, electronic, visual or similar information (live voice and screen sharing, which we don't record, and the photos you add); inferences (the safety signals in section 6 and the mood and energy summaries the AI writes from your daily check-ins in section 9); and sensitive personal information: your account login, the contents of your messages and health information (moods and safety signals).
We collect it from the sources in section 3, use it for the purposes in sections 5 and 6, disclose it for business purposes to the service providers in section 7, and keep it for the periods in sections 8 and 9.
We do not sell or share your personal information (sharing means for cross-context behavioural advertising), and we haven't done so in the last 12 months, including for anyone under 16. We don't disclose personal information to third parties for their own direct marketing. We use sensitive personal information only to provide the Services and keep them safe and secure, as the law allows, so there is nothing to limit.
Depending on your state, you can ask to know what personal information we collect, use and disclose and to get a copy of it, to correct it, to delete it and to opt out of its sale or sharing (we do neither), and we won't discriminate against you for asking. Make a request as in section 10: we verify it by matching it to your account, and an authorised agent can ask for you with your signed permission. For health-related data, see also our consumer health data privacy policy (linked in section 3).
If we decline your request, you can appeal by replying to our decision or by emailing privacy@altscape.ai with Appeal in the subject. We answer within 45 days and explain our decision. If we deny your appeal, you can contact your state's Attorney General.
In Australia
We handle your personal information in line with the Australian Privacy Principles in the Privacy Act 1988. This policy sets out the kinds of personal information we collect and hold and how we do it (section 3), why we collect, hold, use and disclose it (sections 4 and 5), the decisions computer programs make or help make about you (section 6), and the overseas recipients we're likely to disclose it to and their countries, mainly Singapore and the United States (section 7).
To access or correct your personal information, see section 10. If you think we've breached the Australian Privacy Principles, complain to us first (section 10). If you're not satisfied with our response, or we haven't responded within 30 days, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.
In India
Under the DPDP Act, we process your personal data based on the following grounds:
- Consent (Section 6): For most processing activities — you provide explicit consent during onboarding and can withdraw it at any time in Permissions (on the web: Settings → Privacy and data → Permissions; in the app: Profile → Privacy & Consent).
- Legitimate uses (Section 7): For essential operations such as fraud prevention, security, and compliance with legal obligations.
- Employment and safety: Where necessary to protect your safety or the safety of others in emergency situations.
As a Data Principal, you have the following rights:
- Right to access (Section 11): Request a copy of your personal data.
- Right to correction and erasure (Section 12): Correct inaccuracies or request deletion of your data.
- Right to grievance redressal (Section 13): Lodge a complaint with our Data Protection Officer or the Data Protection Board of India.
- Right to nominate (Section 14): Nominate another individual to exercise your rights in case of death or incapacity.
- Right to withdraw consent (Section 6): Withdraw consent for any processing activity at any time.
Grievance officer
Under the DPDP Act, 2023, PairOx Pty Ltd has appointed a Data Protection Officer / Grievance Officer to address your concerns:
- Name: AltScape Data Protection Officer
- Designation: Data Protection Officer (DPO)
- Email: grievance@altscape.ai
- Response times: We acknowledge grievances within 24 hours and resolve them within 7 days, and answer requests to access, correct or delete your data within 30 days (GDPR Art. 12(3)).
If you are not satisfied with our response, you may approach the Data Protection Board of India under the DPDP Act, 2023.
In Chile
Under Chile's personal data protection law (Law 19.628, as amended by Law 21.719), you have the rights of access, rectification, erasure, objection, portability and blocking of your personal data, and the right to object to, and not be subject to, decisions based solely on automated processing that significantly affect you (section 6 explains how to have a person review one). We rely on the legal bases in section 4, and we process health-related data, such as your moods, only with your express consent or where it is essential to protect someone's life or physical safety. We acknowledge each request when we receive it. We answer requests within 30 calendar days and may extend that once by up to 30 more. If you ask us to correct or delete your data or object to its use, you can also ask us, giving your reasons, to block that data temporarily. We answer a blocking request within 2 working days and don't use the data while we decide; if we agree, we keep the data but stop using it until we've decided on your correction, deletion or objection. If we reject your request or don't answer in time, you can complain to the Personal Data Protection Agency (Agencia de Protección de Datos Personales).
In other countries
Wherever you live, you can use the rights in section 10 and any others your local law gives you. You can also complain to your local data protection authority, for example New Zealand's Privacy Commissioner, the Office of the Privacy Commissioner of Canada, Brazil's National Data Protection Authority (ANPD), Japan's Personal Information Protection Commission or South Korea's Personal Information Protection Commission.
13. Children's privacy
AltScape is not intended for users under 13 years of age (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
14. Security measures
We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest (AES-256), Row-Level Security (RLS) in our database, regular vulnerability audits, and access controls. Despite these measures, no system is completely secure. Please use a strong, unique password and enable two-factor authentication where available.
15. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice at least 30 days before they take effect. The “Last updated” date at the top of this page indicates when the policy was last revised.
16. Requests to remove intimate images
If you ask us to remove an intimate image (no account needed), PairOx Pty Ltd uses your name, email address, country, signature and what you tell us to handle your request, to meet our legal duties (the US TAKE IT DOWN Act, the EU Digital Services Act, the UK Online Safety Act and India's IT Rules) and to keep AltScape safe. Our moderators, our database host Supabase and our email provider Resend handle it for us. If the content may show a child, we report it with the uploader's account details to the US National Center for Missing & Exploited Children (NCMEC) and, where the law requires, the police. To stop the form being flooded, we also count the requests sent from each IP address and the receipts sent to each email address (stored only as a scrambled code), and delete these counts within 2 days. We keep a request's details while we handle it and for 12 months after our latest decision on it, so that we can deal with a complaint about that decision, and then delete them. We keep them longer only while a dispute, a legal claim or an inquiry by an authority about the request needs them, or while the law requires it (for example after a report we must make to the authorities). A record of when we received and decided the request (its reference number and our decision), without your name or contact details, stays. You have the rights described in this policy, including complaining to your data protection authority.
17. Requests to cancel or withdraw from a contract
If you ask us to cancel or withdraw from a contract (no account needed), PairOx Pty Ltd uses your name, email address and the details of your request to handle it, to confirm it to you by email and to keep a record of it. If you choose the subscription bought on altscape.ai and give the email address of the account that pays for it, we link your request to that subscription so that we can end it with our payment provider Stripe. We do this to meet a legal obligation under consumer law (GDPR Art. 6(1)(c)), and we keep the record in our legitimate interests, to be able to prove what you asked for and when (GDPR Art. 6(1)(f)). Our staff, our database host Supabase and our email provider Resend handle it for us. To stop the form being flooded, we also count the requests sent from each IP address and the receipts sent to each email address (stored only as a scrambled code), and delete these counts within 2 days. We keep the record even after you delete your account, as proof of your request and to deal with any dispute about it, and delete it when we no longer need it. Download my data in Settings includes the requests sent with your account's email address; for a copy of any other request, email privacy@altscape.ai.
18. Contact us
Data Protection Officer
Email: privacy@altscape.ai
Address: PairOx Pty Ltd, Sydney NSW, Australia
If you're not satisfied with our response, you can complain to the data protection authority for your country or region (section 11).
Intimate images of you shared without consent? Ask us to remove them, with or without an account.