EmberiaOpen in Telegram

Privacy

Every field we keep, why we keep it, who else sees it, and how to get it all back or erased. Written from the actual database schema, not from a template.

Emberia stores your messages so the character can remember you, and stores almost nothing else. This page lists every field, because a privacy policy that describes categories instead of fields is not telling you anything.

What we store

Your account. A Telegram user ID, or a web session token if you use the browser. Your first name as Telegram reports it, your language, your time zone offset once you set it, and the timestamp of your age confirmation with the version of the terms you accepted. There is no email address, no password and no phone number, because there is nothing to log in to.

Your settings. Which character you are talking to, any name you gave her, whether 18+ mode is on, whether voice notes are on, whether she may write first, and your plan with its expiry date.

Your conversation. Every message, in both directions, with the character it belongs to and when it was sent. This is the part that makes memory work.

What she remembers. Facts extracted from your conversation and stored separately, each attached to one character. This is a short list of statements such as where you work or when something is happening, not a second copy of the chat.

Your relationship state. How long you have been talking, an affection number, an anniversary if there is one, whether your last argument was resolved, and any rules you set for a scene.

Counters and payments. How many messages you sent today, your credit balances, and a record of each purchase with the Telegram charge identifier. We never see a card number, because Telegram handles the payment and tells us only that it succeeded.

Where you came from. If you arrived from a link on this site, we store the page, the campaign and a random click identifier, once, on your first message. It is never overwritten and never updated.

Who else sees it

Four companies touch your data, each for one job.

WhoWhat they getWhy
AnthropicThe current conversation and the character descriptionThe model writes her replies
TelegramEverything you send through Telegram, as with any chatIt is the transport
PostHog (EU)Events with your internal ID, never message textProduct analytics
Image and voice providersOnly the prompt for the image or the text to be spokenGeneration, and only when you request it

Nobody else. There is no advertising network, no data broker and no affiliate who receives anything about you.

What we do not do

We do not sell chat content. We do not train models on it. We do not build advertising profiles. We do not read your conversations for fun, for quality assurance or for sampling.

We do not show ads, which is why the product costs money. The two business models are incompatible and we picked one.

Getting your data back or erased

/export returns everything we hold about you as a single file: your messages, the facts she remembers, and your relationship state. You do not have to ask us and you do not have to wait.

/delete confirm erases your messages, the extracted memories, your relationship state, your attribution record, your usage counters, your sessions and any queued messages. It is gone from our servers within 24 hours, including backups on their next rotation.

Two things survive deletion, and you should know which. Your payment records stay, because accounting rules require a business to keep them, and they contain a product name and an amount rather than anything you said. Your account row stays as an empty shell so the same Telegram ID does not collide if you come back, with the name, settings and history blanked.

Retention

Conversations stay until you delete them. We do not expire them on a schedule, because a companion that forgets you after ninety days is not the product.

Queued messages and job records are short lived, minutes to hours. Analytics events are retained by PostHog under their own policy and contain no message text.

Your rights

If you are in the European Union or the United Kingdom, you have the right to access your data, correct it, have it erased, and object to processing. /export and /delete confirm cover access and erasure immediately and without a form. For anything else, message the bot and say what you want.

The legal basis for storing your conversation is the contract between us: you cannot have a companion that remembers you without storing what you told her.

Age

Emberia is for adults. You confirm your age before the first message and we store when you did it. If we learn that an account belongs to someone under 18 we delete it.

Changes

If this policy changes in a way that affects what we store or who sees it, the bot tells you in the chat before the change takes effect. A policy updated silently is not a policy.

Frequently asked questions

Do you sell my chats?
No. Chat content is never sold, never rented and never shared with an advertiser. It leaves our servers only to reach the model that writes the reply.
Do you train models on my conversations?
No. We do not train any model on your messages and we do not contribute them to a public dataset.
Does a human read my messages?
Only if you report a problem and point us at a specific conversation. There is no routine review, no moderation queue of private chats and no sampling.
What happens if I delete everything?
Messages, memories, relationship state, attribution, usage counters and sessions are removed within 24 hours. Payment records stay, because accounting law requires them.
Where is the data stored?
In a PostgreSQL database in the European Union, and in Redis for short-lived job queues. Analytics runs on PostHog's EU instance.

Related

Updated: 2026-09-15