← Back to Amora

Privacy Policy

This policy explains what Amora (talkamora.com) collects, why, and what control you have. Short version: we collect what's needed to give you a companion who can talk and remember — nothing is sold, and you can have it all deleted.

1. What we collect

Data	Why
Email + password (stored as a salted hash — we never see your password)	Your account and login
Your voice during calls (streamed, converted to text in real time)	So she can hear and respond; audio is processed live, not kept as recordings by us
Conversation transcripts and extracted "memories" (facts you share, call & chat summaries, and dates you mention such as birthdays or exams)	So she remembers you between conversations — the core of the product
Text chat messages you exchange with her	Stored so your conversation continues across sessions and devices, and to build her memory of you
Notification (push) subscription for your device — only if you enable notifications	So she can send you messages (good-morning texts, reminders) on your phone
Talk-time and chat usage (minutes and message counts)	Plan limits and billing
Payment confirmations from Razorpay (order/payment IDs, amount)	Activating your subscription. We never receive or store card/UPI numbers
Google Calendar/Gmail access tokens — only if you connect Google	To check your calendar/email, send messages you approve, and remind you before upcoming events, when you ask her to

2. How your data is processed

To provide the service, we rely on a small set of trusted third-party providers, each receiving only the data its role requires:

• Real-time audio infrastructure — carries your call audio
• A speech-to-text provider — converts your speech to text so she can understand you
• An AI language-model provider — generates her replies from the conversation
• A voice-synthesis provider — turns her replies into spoken voice
• An email-delivery provider — sends verification (OTP) and account emails
• Razorpay — payment processing (named so you can recognise it at checkout)
• Google — calendar/email actions and event reminders, only for accounts you connect (see section 3)

Each provider processes data only as our service provider, under its own security and privacy commitments, and only for the purpose above. We do not sell your personal data or your conversations to anyone, and we do not use your conversations to advertise to you.

Chat, notifications & reminders

• Text chats with her are stored on our servers so the conversation persists and feeds her memory of you, exactly like voice calls.
• If you enable notifications, we store a push subscription for your device and use it only to deliver her messages (good-morning texts, missed-you notes, and — if you've connected Google — reminders shortly before your calendar events). You can turn notifications off any time in your browser/device settings, and we delete the subscription.
• Her proactive messages and reminders are generated from your own memory profile and, where connected, your upcoming Google Calendar events. This data is never used for advertising.

3. Google user data — specifics

• Connecting Google is optional and off by default.
• If connected, we store an encrypted access/refresh token and use it only to perform the actions you request in conversation: reading your upcoming events, creating events you've confirmed, listing unread email metadata, and sending emails you've explicitly approved out loud.
• We do not store copies of your emails or calendar, and Google data is never used for advertising or shared with third parties beyond the action you requested.
• Revoke access anytime at myaccount.google.com/permissions, or by contacting us to delete the stored token.

4. Retention and deletion

• Account data, memories, and usage records are kept while your account is active.
• Delete everything: email us from your account address and we delete your account, memories, chat history, transcripts-derived data, push subscription, and Google tokens within 30 days (billing records are retained as required by tax law).

5. Security

• All traffic is encrypted in transit (HTTPS/WSS). Passwords are salted and hashed (scrypt). Sessions use signed, HTTP-only cookies.
• No system is perfectly secure — please use a unique password.

6. Cookies & analytics

We use one essential cookie: your login session. We also use Google Analytics to understand overall site usage — how many visitors we get, which pages they view, and roughly where they come from. This is aggregate measurement, not advertising: we don't run ad tracking, and analytics data is never linked to your conversations. You can block analytics with any standard browser setting or extension without affecting the service.

7. Age

Amora is for adults 18+. We do not knowingly collect data from minors; suspected minor accounts are deleted.

8. Changes

We'll post any material changes to this policy on this page with an updated date.

9. Contact

Privacy questions or deletion requests: info@talkamora.com