Privacy Policy

1. Information we collect

• Account information: the email address and display name you register with, and, if you choose to provide it, your gender and the character genders you're interested in.
• Password: we never store your password itself. We store a salted cryptographic hash of it (used only to verify a login attempt) and use it to derive an encryption key, described below.
• Conversations: the messages you exchange with characters, games, and groups on Oasy.
• Token & billing data: your token balance, the history of grants and charges tied to your account, your subscription plan, and — if you subscribe or buy tokens — identifiers Stripe (our payment processor) gives us to manage your subscription or purchase. We never see or store your full card number: Stripe collects payment details directly.
• Reports: if you or someone else reports a message or a character, the reported content and the report note are kept so our moderators can review it (see Section 3).
• Technical and anti-abuse data: your IP address is processed transiently to prevent abuse (e.g. rate limiting login and signup attempts). To detect duplicate accounts and protect the free tokens and trial, we also store with your account one-way hashes of your IP address, of a random device identifier kept in a cookie, and of a browser fingerprint. These cannot be reversed into the original values.
• Engagement features: to run daily-gift streaks, badges, stories, the daily question and "character wrote to you" messages we store your streak, the badges you earned, which stories you viewed and your daily-question answer. Reminder and character messages are sent as push notifications only if you enabled notifications, and you can switch them off in Settings. A character message is generated without reading your conversations; it is saved in your chat the next time you sign in, encrypted like the rest.
• Direct messages (DM): messages you exchange with characters in the social section (including replies to their stories) are stored so the character can answer a few minutes later. Unlike your story-mode chats, they are not encrypted with your password-derived key, in the same way as comments on posts. Each message you send costs tokens.
• Device type and app usage: whether you use Oasy from a phone or a computer, and whether you opened it from the Home-screen icon, are recorded as dates on your account, and we know whether you enabled push notifications on at least one device. We use this to improve the experience; it is not shared with third parties.
• Free-trial record: when you use a free trial we record one-way hashes (HMAC) of your email address (normalised) and of the card fingerprint provided by Stripe. If you later delete your account, we keep only these hashes, for 24 months from the trial, so that a free trial cannot be obtained again by deleting and recreating the account. We do not keep the email address or card details for this purpose.

2. Legal basis for processing (EU/EEA/UK users)

• Performance of a contract: account data, conversations, and token/billing data — we need these to run the service you signed up for.
• Legitimate interest: the anti-abuse processing described above (IP, device and browser hashes, and the free-trial record kept for 24 months after account deletion to prevent fraud and repeated free trials), and reviewing reported content to enforce our Terms.
• Consent: the marketing/analytics cookies described in Section 8 — set only after you accept them via the cookie banner, and only for visitors from a region where the law requires this.
• Legal obligation: where we're required to keep or disclose data (for example, tax records for payments).

3. Your conversations are encrypted

Your messages are encrypted with a key derived from your password before they're stored. We cannot read your conversations, and we have no way to recover them if you forget your password — this is a deliberate trade-off between convenience and privacy that you accept when you register.

4. The one exception: reports

If you report a message, or someone reports a message you sent (or a character you're talking to), the reported content is stored separately, in readable form, so a moderator can review it. This is the only circumstance in which staff can read the content of a specific message — never your conversations as a whole, and never without a report having been filed. You're shown a clear warning about this before you submit a report.

5. AI processing (Google Gemini, DeepSeek, fal.ai)

To generate a character's reply, the relevant parts of your conversation are sent to a third-party AI provider, which processes them to produce a response. Depending on the type of chat, this is Google's Gemini API or a DeepSeek language model served through Experiential. These providers act as data processors for this purpose under their own terms. We don't send your email, real name, or payment details to them — only what's needed to generate the reply (the conversation itself, and the character it involves).

Photos of characters are generated with Google's image models or with fal.ai. For this we send the description of the scene and the character's own reference photo, not your personal data.

6. Payments (Stripe)

Subscriptions and one-time token purchases are processed by Stripe. Stripe handles your card details directly; we only receive confirmation of payment and identifiers needed to manage your subscription (for example, to let you cancel it). See Stripe's own privacy policy for how it handles your payment data.

7. Where your data is stored, and international transfers

Oasy's database is hosted in the European Union (Frankfurt, Germany). Some processors we rely on — Google (Gemini API, Tag Manager, AdSense), DeepSeek/Experiential, fal.ai, Stripe, AppLovin, Reddit, TikTok, and X — are based outside the EU/EEA and may process data there (for example in the US) under their own safeguards (such as the EU-US Data Privacy Framework or standard contractual clauses, where applicable). See each processor's own privacy policy for details of their transfers.

8. Cookies & advertising trackers

Oasy uses one essential cookie to keep you signed in, plus a small first-party cookie to remember your cookie-consent choice. If you visit from the EU/EEA, the UK, or Switzerland, we also show a banner before setting any other cookie, and only set the ones below if you accept:

• Google Tag Manager, which in turn loads an AppLovin conversion pixel and a Reddit Ads pixel — these measure sign-ups and purchases that came from an ad campaign on those platforms.
• Google AdSense, which shows ads inside the app to free (non-subscriber) accounts.
• TikTok Pixel, which measures sign-ups and purchases that came from a TikTok ad campaign.
• X Pixel (X Corp.), which measures purchases that came from an ad campaign on X. With each purchase it receives the amount, the currency and a transaction identifier, not your name or email.

Outside those regions, these are set without a prior banner, as is common practice — you can still opt out at any time. See our Cookie Policy for the full list, what each one does, and how to change your choice.

9. How long we keep your data

We keep your account data for as long as your account exists. You can delete your account yourself at any time from Settings (or, before choosing a plan, from the plan selection and email confirmation pages); this also cancels any active subscription and removes your conversations and profile. You can also contact us at info@oasy.app. Exceptions: reported content is kept as long as needed to review and act on the report, and, if you used a free trial, the one-way hashes of your email and card fingerprint (see Section 1) are kept for 24 months from the trial and then deleted automatically.

Account deletion takes 72 hours. When you ask us to delete your account, we cancel any active subscription immediately, log you out everywhere, and send you a confirmation email. The account is permanently deleted 72 hours later, including your chats, your profile and any remaining tokens (which are not refunded). We send one reminder at 48 hours. If you log in again during those 72 hours, the deletion is cancelled and nothing is lost. After the deletion we send a last email confirming it, and we keep only the reason you gave, together with your display name and the age of the account, and, if you had used a free trial, the one-way hashes described above.

10. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict some of its processing. To exercise any of these rights, contact us at info@oasy.app. If you're in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority (in Italy, the Garante per la Protezione dei Dati Personali).

11. Age requirement

Oasy is intended for users who are at least 18 years old. We don't knowingly collect data from anyone younger, and creating an account requires confirming you meet this requirement (see Terms of Service).

12. Changes to this policy

We may update this policy as the service changes. If we make a material change, we'll make that clear within the app before it takes effect.

13. Contact

Questions about this policy? Reach us at info@oasy.app.