← Back to MySweetAI

Privacy Policy

Last updated: March 12, 2026

MySweetAI ("we", "us", "our"), operated by Evanor LLP (Registration No. LL0002659, British Columbia, Canada), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia's Personal Information Protection Act (PIPA), and the EU General Data Protection Regulation (GDPR) where applicable.

1. Data Controller

The data controller for the Service is:
Evanor LLP
5307 Victoria Drive 905
Vancouver, BC V5P 3V6, Canada
Registration No. LL0002659
Email: privacy@mysweetai.com

2. Data We Collect

We collect the following categories of personal data:

  • Account data: Email address, display name, password (hashed), registration date
  • Profile data: Birth year, gender (optional), relationship status (optional), usage preferences (optional)
  • Usage data: Conversation history, AI interaction data, session timestamps
  • Technical data: IP address, browser type, device type, timezone
  • Payment data: Billing information (processed by our payment provider; we do not store full card numbers)

3. How We Use Your Data

  • To provide and improve the Service
  • To personalize your AI companion experience
  • To process payments and manage subscriptions
  • To send service-related communications
  • To comply with legal obligations
  • To prevent fraud and ensure platform security

4. Legal Basis for Processing

  • Contract performance: Processing necessary to provide the Service you subscribed to
  • Legitimate interests: Security, fraud prevention, service improvement
  • Consent: Marketing communications, optional profile data
  • Legal obligation: Compliance with applicable laws

5. Data Retention

We retain your account data for as long as your account is active, plus 30 days after deletion to handle disputes. Conversation data is retained for the duration of your subscription. Payment records are retained for 7 years as required by Canadian federal law.

6. Data Sharing

We do not sell your personal data. We may share data with:

  • Payment processors (to process transactions)
  • AI service providers (OpenRouter — for generating AI responses; conversation content may be processed)
  • Voice service providers (Deepgram, ElevenLabs — for voice features)
  • Infrastructure providers (hosting, database)
  • Law enforcement when legally required

7. International Data Transfers

Your data may be processed on servers located outside Canada or the European Economic Area. In such cases, we ensure appropriate safeguards are in place (including standard contractual clauses where applicable) to protect your personal information.

8. Your Rights

Under PIPEDA, PIPA, and/or GDPR (where applicable), you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data
  • Portability: Receive your data in a machine-readable format
  • Objection: Object to certain types of processing
  • Restriction: Request restriction of processing

To exercise these rights, contact: privacy@mysweetai.com. We will respond within 30 days.

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies.

10. Security

We implement industry-standard security measures including HTTPS encryption, hashed passwords, and access controls. However, no system is completely secure.

11. Supervisory Authorities

You have the right to lodge a complaint with:

  • Canada: Office of the Privacy Commissioner of Canada — www.priv.gc.ca
  • British Columbia: Office of the Information and Privacy Commissioner for BC — www.oipc.bc.ca
  • EU/EEA users: Your local data protection authority

12. Changes

We may update this Privacy Policy. We will notify you of significant changes via email or prominent notice on the Service.