1. Who handles your data

This policy covers greazy.ai and the app at app.greazy.ai. For anything in it, including a request about your own data, write to support@greazy.ai.

2. What we collect

Only what the product needs to work. There is no advertising network here and nothing here is sold. We do measure how the site and the app are used, with Google Analytics — see below.

Your account: A username, an email address, and a password — stored only as an irreversible hash, so we never hold the password itself. If you sign in with Google we receive your name and verified email address from Google and nothing else; we never see your Google password.
Your conversations: Messages between you and a companion, and the notes that companion keeps about you so it can remember. Memory is scoped to that one companion rather than to your account, so companions do not share what they know unless you turn that on.
Pictures and video you upload: Photos and clips you send to a companion or put through the creative tools, and the results they produce.
Faces, which are a special case: A photograph of a face is biometric data under the GDPR, Illinois BIPA and similar laws. Uploading one to a face, head or character swap is your instruction to process it for that job and your consent to us doing so. We do not build a face database, we do not run recognition against other people, and we do not use faces for anything except producing the output you asked for.
Technical records: IP address, browser and device information, and server logs of requests and errors — needed to keep accounts secure, to stop abuse, and to find out why something broke.
How the site is used: We use Google Analytics on greazy.ai and in the app to count visits and see which pages and features people use. It records the pages you open, roughly where in the world you are, and what browser and device you are on, and it sets its own cookies to recognise a returning browser. It never receives your messages, your uploads or anything a companion has generated.
Payments: Card payments are handled by our payment processor. Your card number never reaches Greazy and we cannot see it. We hold the record of what you bought and when.

3. Where your conversations are processed

The language and image models that produce a companion's replies and pictures run on infrastructure we operate. Your conversations are not sent to a third-party model provider.

If that ever changes, this page changes before it does, and the provider is named here.

4. What we never do with it

We do not train models on your conversations, your uploads or your generated output.
We do not sell your data, and we do not share it with advertisers. Google Analytics is measurement, not advertising: we do not run ads, and we have not enabled its advertising or audience-sharing features.
We do not publish anything you say or anything a companion sends you.
We do not read your conversations for interest. Access happens only where you ask for support, where the law requires it, or where we are investigating abuse of the kind listed in the terms.

5. Where it is kept

Files are stored with Amazon Web Services in the United States, encrypted at rest, and reachable only through short-lived links tied to your account. Accounts, conversations and memories are held in our own database on servers we run.

If you are in the UK, the EEA or elsewhere outside the United States, using Greazy involves transferring your data there.

6. Who else is involved

The short list of companies that necessarily touch some of your data, and what each one does:

Amazon Web Services — hosting and file storage.
Our payment processor — card payments and subscription billing, when card payments are switched on.
Google — analytics on the site and in the app, and sign-in if you choose to use it.

7. Deleting things, and how far it goes

You decide how far a deletion travels, and every one of these is a control in the app rather than a support request:

Clear what is on your screen — the companion still remembers.
Empty the gallery — the pictures go.
Make a companion forget everything and keep them.
Both at once.
Delete the companion completely: the thread, what they knew about you and anything shared between you goes with them, and they become a character you have never met.

To close your account and remove everything on it, write to support@greazy.ai. Deleted content goes from live systems immediately and ages out of encrypted backups within 30 days. We keep the minimum required for legal and payment records.

8. Your rights

Depending on where you live, you can ask for a copy of your data, ask for it to be corrected or deleted, object to how it is used, ask us to limit that use, or withdraw a consent you gave — including the consent to process a face.

Ask at support@greazy.ai and we answer within 30 days. We will not charge you for it and we will not make the service worse for asking. If you are in the UK or the EEA you can also complain to your data protection authority.

9. Cookies

Greazy sets what it needs to keep you signed in and to remember settings like your language and theme. Blocking those signs you out.

Google Analytics sets its own cookies to tell a returning browser from a new one. They are not used for advertising, and blocking them costs you nothing — the site and the app work exactly the same. Most browsers can block them, and browser-level "do not track" or an analytics blocker will stop the measurement entirely.

10. Children

Greazy is not directed at children and we do not knowingly collect anything from one. If we find an account belongs to a child, we close it and delete its content.

11. Security, and being straight about it

Traffic is encrypted in transit, files are encrypted at rest, passwords are hashed, and every read and write of your content is filtered on the owner. Access to production is limited to the people who run it.

No service can promise it will never be breached. If one happens and it affects you, we will tell you and the relevant regulator within the time the law allows.

12. Changes to this policy

When this policy changes, the date at the top changes with it. A change that materially affects you is announced in the product before it takes effect.

Privacy policy