Privacy Policy

This Privacy Policy explains how Tomeapps ("we", "us") collects, uses and protects your information when you use the Girlfriend Simulator mobile application (the "App"). By using the App you agree to this Policy. If you do not agree, please do not use the App.

1. Who we are

The App is operated by Tomeapps, Romania (the "data controller" for the purposes of the EU General Data Protection Regulation — "GDPR"). Contact: cristian@tomeapps.com.

2. What data we collect

• Account data — an anonymous account is created automatically when you first open the App. If you register, we also store your email address. We store your declared age bracket (18+ confirmation), display name and interests you choose during onboarding.
• Chat content — the messages you send to AI characters and the replies generated for you.
• Usage & progress data — relationship progress, activity streaks, usage counters, device timezone offset, app settings.
• Purchase data — subscription status and entitlements (processed by the app stores and our billing provider; we never see your card details).
• Device data — push notification tokens, device type, crash and diagnostic information.

We do not collect your precise location, contacts, or photos. If you attach content to a chat, it is processed only as described below.

3. How we use your data

• To provide the service — generating AI character replies requires sending your chat messages to AI service providers (see section 4).
• Safety — messages are automatically screened by moderation systems to detect and handle harmful content (including self-harm signals, which trigger supportive responses and helpline information).
• Personalisation — the App remembers facts you share in conversation to make the experience coherent (e.g. your name, preferences). This memory exists only inside your account and is deleted with it.
• Billing — managing subscriptions and usage limits.
• Service integrity — debugging, crash reporting, preventing abuse.

We do not sell your personal data, and we do not use your chat content for advertising.

4. AI processing — important

The App's characters are powered by third-party large language model (AI) providers. Your chat messages are transmitted to these providers to generate replies and to run safety moderation. Our AI providers currently include OpenAI, L.L.C. (USA). We may change or add AI providers; the categories of processing remain the same and this page always lists the current state.

Per our agreements with AI providers under their business/API terms, your content sent through the API is not used to train their models.

5. Who we share data with (processors)

Where data is transferred outside the EEA (e.g. to the USA), transfers rely on the European Commission's Standard Contractual Clauses and/or the EU–US Data Privacy Framework, as applicable.

6. Legal bases (GDPR)

• Performance of a contract (Art. 6(1)(b)) — providing the App, generating replies, managing your account and subscription.
• Consent (Art. 6(1)(a)) — you explicitly consent to AI processing of your conversations during onboarding. You may withdraw consent at any time by deleting your account.
• Legitimate interests (Art. 6(1)(f)) — safety moderation, abuse prevention, service diagnostics.

7. Retention & deletion

• Your data is retained while your account exists.
• You can delete your account inside the App (Me → Delete account). Your account is immediately deactivated and permanently erased after a 30-day grace period, during which you can sign in and recover it. After the grace period, your account, conversations, progress and personal data are permanently deleted from our systems.
• You can also request deletion from the web, without the App, at girlfriendsimulator-ca20a.web.app/delete-account — sign in with your account's email and password, confirm your email address, and we verify and carry out the deletion (within 30 days at the latest). Guest accounts have no credentials to verify outside the device and can only be deleted in the App.
• Residual copies in encrypted backups are purged on the backup rotation schedule (max. 30 additional days).
• AI providers retain API content transiently per their API data-retention policies (e.g. limited abuse-monitoring windows), after which it is deleted on their side.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, object to processing of, and port your personal data, and the right to withdraw consent at any time. To exercise any right, contact us at cristian@tomeapps.com. You also have the right to lodge a complaint with your supervisory authority — in Romania, ANSPDCP (dataprotection.ro).

9. Security

Data is encrypted in transit (TLS) and at rest. Access to production data is restricted. Chat generation is orchestrated server-side; clients cannot read other users' data. No method of transmission or storage is 100% secure, but we apply industry-standard safeguards.

10. Age requirement

The App is strictly for users 18 years of age or older. We do not knowingly collect data from minors. If we learn that a minor has used the App, we will delete the associated data. If you believe a minor has used the App, contact us immediately.

11. Not a medical or crisis service

The App's characters are fictional AI. Conversations are entertainment and are not medical, psychological, legal or professional advice. If you are in crisis or thinking about self-harm, contact your local emergency number (112 in the EU) or a suicide-prevention helpline (in Romania: 0800 801 200).

12. Changes to this policy

We may update this Policy from time to time. Material changes will be announced in the App. The "Effective date" above always reflects the current version. Continued use of the App after changes take effect constitutes acceptance.

13. Contact

Questions, requests, complaints: cristian@tomeapps.com