Privacy Policy

Carnivorex Inc. ("Aria Muse," "we," "us," or "our") provides a mobile and web application through which adult users create and interact with fictional, AI-generated companion characters for relationship-style conversation, and roleplay and entertainment purposes (the "Service"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices and rights available to you. It applies to individuals located in the United States and Canada who use the Service.

By creating an account or otherwise using the Service, you acknowledge that your personal information will be handled as described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Who We Are and Age Restriction

The Service is intended solely for adults aged 18 years or older. We do not knowingly permit anyone under 18 to create an account, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it and terminate the associated account as soon as reasonably practicable. If you believe a minor has provided us with personal information, please contact us using the details in Section 19.

2. Information We Collect

2.1 Information You Provide to Us

• Account information: name or display name, email address, date of birth or age attestation, password (hashed), and, if applicable, sign-in identifiers from Apple or Google.
• Profile and preference information: gender identity, stated preferences (e.g., what you are looking for in a companion), and other information you choose to add to your profile.
• Companion customization inputs: names, descriptions, personality traits, appearance choices, and other selections you make when creating or editing a companion character.
• Conversation content: the messages, prompts, voice inputs (if you use voice features), and any images you send to or generate through the Service, including your chats with AI companions.
• Payment information: when you purchase a subscription or virtual credits, payment is processed by the applicable app store (Apple App Store / Google Play) or our third-party payment processor. We do not store full payment card numbers ourselves.
• Communications: information you provide when you contact customer support, respond to surveys, or otherwise communicate with us.

2.2 Information Collected Automatically

• Device and usage data: device type, operating system, unique device identifiers, IP address, approximate location derived from IP address, app version, crash logs, and diagnostic data.
• Usage analytics: features used, session length and frequency, messages sent, in-app purchases, and interactions with the discovery feed and paywalls.
• Cookies and SDK identifiers: as described in Section 7.

2.3 Information from Third Parties

• App stores and payment processors provide us limited transaction confirmation and subscription-status information (not full payment details).
• If you sign in using a third-party account (e.g., Apple or Google), that provider shares the profile information you authorize.
• Age-verification providers, if used, return a verification result (e.g., "verified 18+") rather than transmitting the underlying identity document to us for storage.

3. How We Use Your Information

• To create and operate your account and deliver the Service, including generating and maintaining your AI companion's responses and "memory" of your conversation.
• To process payments, manage subscriptions and virtual credits, and send billing-related communications, including renewal and cancellation confirmations.
• To operate required safety features, including automated detection of language that may indicate self-harm or suicidal ideation and the provision of crisis-resource referrals (see Section 6).
• To maintain the AI-disclosure and use-reminder notifications required under applicable law (see Section 6).
• To personalize your experience, including companion recommendations and in-app messaging suggestions.
• To detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Use.
• To comply with legal obligations, respond to lawful requests, and enforce our agreements.
• To analyze aggregated or de-identified usage trends to improve the Service.
• With your consent or as otherwise permitted by law, to send you product updates or marketing communications, which you may opt out of at any time.

4. How We Share Your Information

We do not sell your personal information for money. We share personal information only as follows:

• Service providers: cloud hosting and database providers, customer support tooling, analytics providers, age-verification vendors, and payment processors, each bound by contract to use the information only to provide services to us.
• AI infrastructure providers: as described in Section 5, your conversation content is transmitted to third-party AI model-hosting providers solely to generate companion responses.
• App stores: Apple and Google process your purchase and provide us subscription status information under their own privacy policies.
• Legal and safety reasons: to comply with a legal obligation, protect the rights, property, or safety of you, us, or others, including sharing information with crisis service providers or law enforcement where required to prevent imminent harm.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.
• With your direction or consent, for any other purpose we disclose to you at the time of collection.

We may use information about your visits to our public website and marketing pages to promote the Service. We will never use, sell, rent, or disclose the content of your companion conversations, your companion descriptions or prompts, or any images generated for you, for marketing, advertising, or audience-targeting purposes, and we do not share that content with advertising partners or data brokers.

5. AI Processing of Your Conversations

Your messages to your AI companion are processed using third-party large language model ("LLM") infrastructure that we configure and control. Specifically:

• Messages you send, together with a limited amount of recent conversation history and a summary of your companion relationship, are transmitted to our AI inference provider(s) solely to generate a response.
• We contractually require our AI infrastructure providers not to use your conversation content to train their own general-purpose models, except where you have separately and affirmatively opted in.
• Conversation logs are retained as described in Section 8 to allow the companion to "remember" your relationship and to allow you to review your own chat history; you may delete your conversation history at any time in Settings, subject to a limited retention window for safety, security, and legal-compliance purposes described below.
• A limited, automated safety layer scans messages for patterns associated with self-harm, suicidal ideation, or content involving minors, in order to trigger the protective features described in Section 6. In a genuine safety escalation (for example, an apparent imminent risk of harm), a limited number of trained personnel may review the relevant conversation excerpt solely to respond appropriately.

Sensitive information. We instruct and strongly encourage you not to share special categories of personal information through the Service — including information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health information, or information concerning your sex life or sexual orientation. We do not require or solicit this information, and the Service is designed to function without it.

We recognize that the nature of romantic and roleplay conversation with an AI companion may lead you to share such information incidentally. If you choose to do so, that information is processed as part of your conversation content — including by the third-party AI infrastructure providers described above — solely to generate companion responses and deliver core functionality. We do not use it to build advertising profiles, we do not sell or share it for targeted advertising, and we apply the same data-minimization and contractual protections to it as to all other conversation content. You may delete this content at any time in Settings or by contacting us as described in Section 18.

For users in jurisdictions that require explicit consent for the processing of sensitive personal information (including Quebec, and certain U.S. states such as California, Colorado, and Connecticut), by continuing to provide such information in your conversations after being presented with this notice, you give your explicit consent to the limited processing described in this Section. You may withdraw that consent at any time by ceasing to share such information and requesting deletion.

6. Automated Safety Features and Monitoring Disclosure

Because Aria Muse offers a "companion chatbot" as defined under laws such as California SB 243 and New York General Business Law Article 47, we operate the following safety practices, which necessarily involve limited automated processing of your messages:

• AI-identity disclosure: the Service clearly and repeatedly discloses, at the start of a session and at least every three hours of continued use, that you are interacting with a computer program and not a human being.
• Self-harm and crisis-language detection: an automated process reviews message content for indicators of suicidal ideation or self-harm. If detected, the Service interrupts the normal companion reply with a notification referring you to crisis service providers (such as a suicide or crisis hotline).
• These features are safety protocols, not medical or mental-health services, and do not constitute a clinical diagnosis or professional evaluation.
• We publish a description of these protocols as required by law and, where required, report aggregate statistics about crisis referrals to the applicable state regulator without disclosing your identity to the regulator.

7. Cookies and Similar Technologies

We and our service providers use cookies, mobile SDK identifiers, and similar technologies to operate the Service, remember your preferences, measure usage, and (where applicable and with any consent required by law) support analytics and advertising. You can control cookies through your browser or device settings; declining certain cookies may limit some features. Where required by law (including Quebec Law 25 and applicable U.S. state law), we will obtain your consent before deploying non-essential tracking technologies and will honor recognized opt-out signals such as the Global Privacy Control where legally required.

8. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service, comply with legal obligations (including safety-protocol recordkeeping required by law), resolve disputes, and enforce our agreements. You may request earlier deletion as described in Sections 11 and 12. Specifically:

• Conversation history, companion profiles you created, and images generated for you: retained while your account is active and deleted from our live systems promptly upon account deletion, and in any event purged from routine backups within sixty (60) days of account deletion or of your deletion request.
• Account and profile information: retained while your account is active and deleted within sixty (60) days of account deletion, except where a longer period is required by law.
• Billing and transaction records, including credit-purchase and subscription history: retained for the period required by applicable tax, accounting, and anti-fraud law, and in any case for up to seven (7) years.
• Safety and moderation records: retained in de-identified or category-only form (for example, the type of content blocked, without your message text) for the period required for legal compliance and abuse prevention.
• Content transmitted to third-party AI infrastructure providers for the purpose of generating a response or an image is processed transiently and is not retained by those providers beyond the period necessary to return the result, other than short-lived operational logging required for service integrity.
• Aggregated or de-identified usage data that can no longer reasonably be linked to you may be retained indefinitely.

9. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and vendor security review. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International Data Transfers

Carnivorex Inc. is based in Ontario, Canada. Personal information we collect, including from users located in the United States, is primarily stored and processed in Canada, and may also be transferred to, stored, and processed in the United States or other countries where our service providers (including AI infrastructure and cloud hosting providers) operate. Where required by Quebec Law 25, we conduct a privacy impact assessment before transferring personal information outside Quebec and use contractual and other safeguards to ensure a level of protection comparable to that required under Quebec law. U.S. users should be aware that their information may be processed in Canada, which maintains its own comprehensive federal and provincial privacy law framework.

11. Your Privacy Rights — United States

11.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to: know the categories and specific pieces of personal information we collect, use, and disclose about you; delete personal information we hold about you, subject to certain exceptions; correct inaccurate personal information; opt out of the "sale" or "sharing" of personal information (including for cross-context behavioral advertising) — we do not sell personal information for money, and you may exercise any applicable opt-out through the mechanism described below; limit the use and disclosure of sensitive personal information; and not receive discriminatory treatment for exercising these rights. You may designate an authorized agent to submit requests on your behalf. To exercise these rights, contact us as described in Section 19; we will verify your identity before responding.

11.2 Other U.S. States

If you reside in a state with a comprehensive consumer privacy law (including, as of this Policy's effective date, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with similar statutes), you may have similar rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising, the sale of personal information, and profiling in furtherance of decisions that produce legal or similarly significant effects. You may exercise these rights using the contact information in Section 19, and you may appeal a denied request as described in our response to you.

12. Your Privacy Rights — Canada

12.1 PIPEDA (All Provinces Other Than Quebec, British Columbia, and Alberta)

Under the federal Personal Information Protection and Electronic Documents Act ("PIPEDA"), you have the right to access the personal information we hold about you, request correction of inaccurate information, and withdraw consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may limit or prevent your use of the Service. You may also file a complaint with the Office of the Privacy Commissioner of Canada.

12.2 Quebec (Law 25)

If you are located in Quebec, in addition to the rights above, applicable law gives you the right to: obtain confirmation of whether we hold personal information about you and to access it; request correction of that information; request that we cease disseminating your personal information or de-index a hyperlink giving access to it in certain circumstances; withdraw your consent to the processing of your personal information; receive, in a structured and commonly used technological format, personal information you have actively provided to us, and have it transmitted to another organization at your request, where technically feasible; and be informed of the existence of any decision based exclusively on automated processing of your personal information that has a significant effect on you, of the personal information used to render the decision, and of your right to have that information corrected. We have designated a privacy officer responsible for the protection of personal information, whose contact information is provided in Section 19. You may also submit a complaint to the Commission d'accès à l'information du Québec.

13. Automated Processing and Personalization

The Service uses automated processes to generate your companion's conversational responses, to recommend companions in the discovery feed, and to determine free-tier usage limits and message suggestions. These processes shape the content you see but do not make legal or similarly significant decisions about you (for example, they do not determine eligibility for credit, employment, housing, insurance, or similar outcomes). Where required by law, we will provide additional information about the logic involved upon request.

14. Children's Privacy

The Service is not directed to, and is not intended for use by, anyone under 18 years of age. We do not knowingly collect personal information from children. See Section 1 for how we handle information if we learn a minor has used the Service.

15. Data Breach Notification

If we experience a security incident that creates a real risk of significant harm to you, we will notify you and, where required, the applicable regulator (such as the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, or U.S. state authorities) in accordance with applicable law, and we will maintain an incident log as required under Quebec Law 25 and comparable statutes.

16. Third-Party Links and Services

The Service may contain links to third-party websites or services, including app stores and payment processors, which are governed by their own privacy policies. We are not responsible for the privacy practices of third parties.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other reasonable means before the changes take effect. Your continued use of the Service after the effective date of an updated policy constitutes acceptance of the changes, to the extent permitted by applicable law.

18. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

• Carnivorex Inc.
• Attn: Privacy Officer
• Email: hello@ariamuse.app
• Mailing Address: 50A Woodlawn Ave, Mississauga, ON L5G 3K6, Canada

Quebec residents may also contact our designated privacy officer at the email above, or the Commission d'accès à l'information du Québec. Canadian residents outside Quebec may also contact the Office of the Privacy Commissioner of Canada.