Privacy Policy — POUF

Effective date: June 21, 2026

POUF ("we," "our," or "the app") is an AI emotional support app designed around one principle: what you say disappears when you leave. This policy explains what little data we handle and why.

1. What POUF collects

During a session

Your messages and voice recordings — sent to OpenAI (see §4) to generate responses. They are not stored by us after the session ends.
A temporary session ID — created when you open the app and discarded when you close it. It is never tied to your identity.
Voice audio — if you use voice mode, your recording is transcribed by OpenAI Whisper and then discarded. The AI's spoken reply is cached briefly (under 5 minutes) to stream it to your device, then deleted.

What we do NOT collect

Name, email address, or any account information — there are no accounts.
Location data.
Contacts or device files.
Conversation history — nothing is retained after your session ends.
Advertising identifiers.

2. Subscriptions and payments

Voice mode requires a subscription processed entirely by Apple (for iOS) through the App Store. We do not see or store your payment details. Subscription status is managed by RevenueCat, which assigns you an anonymous subscriber ID to verify your entitlement. RevenueCat's privacy policy: https://www.revenuecat.com/privacy.

3. How we use information

The only purpose of any data processed during your session is to generate a response to what you said. We do not:

Sell data to third parties.
Use your conversations for advertising or profiling.
Share your conversations with anyone outside of the processors listed below.

4. Third-party processors

ProcessorPurposePolicyOpenAIAI responses (GPT-4o), voice transcription (Whisper), text-to-speech (Nova)openai.com/policies/privacy-policyRevenueCatSubscription managementrevenuecat.com/privacyAppleApp distribution, in-app purchase processingapple.com/legal/privacy

OpenAI's API does not use API-submitted data to train their models by default. See their usage policies for details.

5. Data retention

Session data (messages, audio): deleted at end of session.
Subscription status: retained by RevenueCat for as long as needed to honor your subscription.
Server logs: standard web server logs (IP address, request type) retained for up to 30 days for security and debugging purposes only.

6. Children's privacy

POUF is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect information from children. If you believe a child has used the app, please contact us so we can investigate.

7. Your rights

Depending on where you live, you may have rights to access, correct, or delete personal data we hold. Because we retain so little, in most cases there is nothing to retrieve — but contact us and we will assist.

For RevenueCat data, you can request deletion of your anonymous subscriber record by contacting us with your RevenueCat App User ID (visible in the app's settings, if applicable).

8. Changes to this policy

If we make material changes, we will update the effective date above. Continued use of POUF after changes constitutes acceptance.

9. Contact

Questions about this policy? Reach us at:

nvmusicclub@gmail.com

POUF is built to hold space for you — and then let it go. We take that seriously.