What we store

We store your messages, a small set of facts extracted from them, your settings and your purchase records. One command, /delete confirm, erases the personal half of that within 24 hours, and the purchase records stay because accounting rules require them. Everything below is the actual list, written from what the code does rather than from a policy template.

What we hold on you

Nine kinds of record, and nothing else.

Record	What is in it	Why
Account	Display name from Telegram, language, time zone offset, 18+ confirmation timestamp and terms version, settings, active character	To run the chat and prove the age gate was shown
Identity	Your Telegram user ID and the chat to deliver to	To recognise you on the next message
Messages	Every message in the conversation, with scene, speaker and timestamp	Context for her next reply
Memory facts	Short lines extracted from the chat, with an owner and an importance score	Long-term memory
Relationship state	Turn count, affection counter, start date, anniversary, your /rules	Pacing and continuity
Usage	Per-day message and duo scene counts	Enforcing the free daily allowance
Credits	Photo, voice and scene credits you bought	So you get what you paid for
Purchases	Product, amount, currency, Telegram's payment ID, date	Accounting, tax, refunds, chargebacks
Attribution	Which link and campaign brought you in	Knowing which pages work

Two things we deliberately never have. There is no email address, because we never ask for one, so there is nothing of that kind to leak. And there is no card number, because Telegram Stars runs the payment and the card never reaches us.

Image prompts are logged. That one is not for your benefit, it is so we can enforce the rules against minors, real people and non-consent framing, and act on abuse. It belongs on the list, so there it is.

What /delete confirm actually does

Type /delete and the bot asks you to confirm. Type /delete confirm and the erase runs as one transaction, so it either completes or does nothing.

Deleted	Kept
Every message you and she sent	Purchase records, for accounting
Every stored memory fact	Credits you already bought
Relationship state, affection, rules, anniversary	Plan time you already paid for
Queued messages she had not sent yet	The link between your Telegram account and an internal ID
Daily usage counters	Your 18+ confirmation timestamp and terms version
Attribution: the page and campaign you arrived from	Language and time zone
Any web session tokens
Your display name, custom character names, active scene and 18+ setting

Your 18+ mode switches back off and your character resets to the default. From your side it looks like a brand new account on the same Telegram login. From ours there is a reset timestamp on a row that has nothing personal left in it.

Two caveats, both awkward. Messages already delivered to your Telegram chat live on your phone and in Telegram's cloud, not only on our servers, so clear that history yourself from the chat menu if you want it gone there too. And backups roll off on their own schedule, which is why we say within 24 hours rather than instantly.

How long we keep the rest

There is no rolling purge of old conversations. A companion that quietly forgets last month is not a product anyone wants, so messages and memory facts stay until you delete them.

Purchase records are the exception in the other direction. They are financial records, we are required to hold them, and no delete command will remove them. That is true of every product that takes money, and anyone promising otherwise is describing something they cannot do.

Attribution is deleted with everything else. It is useful to us and worth nothing to you, so it goes.

Who can see your chats

No human on our side reads them, unless you write to support about a specific conversation and ask us to look. There is no review queue and no moderation team reading for entertainment.

Message text does reach a language model API, because that is how a reply gets generated. Any product in this category does the same thing, whatever its marketing says. We do not sell chat data and we do not train public models on it.

Telegram itself carries the messages. Bot chats are not end to end encrypted, because bots cannot use Telegram's Secret Chats. That is a platform fact rather than a choice we made, and it applies to every AI companion bot on Telegram.

The honest remainder: we store chat text, and stored chat text can always be stolen. Muah.ai was breached in 2024 with roughly 1.9 million email addresses exposed, and in 2025 the companion apps Chattee and GiMe leaked around 43 million messages. Our answer is structural rather than a promise. No email to leak, no password database, a one-command export and a one-command erase.

Getting your data out

/export sends a file into the chat containing your messages, your memory facts and your relationship state. No form, no support ticket, no waiting period.

What it does not include yet is the purchase ledger and the attribution row. Ask support and we will send those. We would rather write that sentence than describe the export as complete when it is not.

The free tier makes leaving cheap on purpose: 30 messages a day with full memory, no card on file, nothing to cancel. If you decide this is not for you, /delete confirm and blocking the bot is the whole exit.