Your people stay yours.

1. Who we are

Companion is operated by COMORA PTY LTD, a company registered in Australia. In this policy, “Companion”, “we” and “us” mean COMORA PTY LTD. We are the entity responsible for the personal information described here.

For any privacy question, correction, or complaint, email privacy@companion.social. We aim to acknowledge privacy requests within 5 business days and to resolve them within 30 days.

2. What this policy covers

This policy covers the Companion assistant in Telegram, the Companion control panel at https://app.companion.social, and this website. It does not cover Telegram itself, which is operated independently and has its own privacy policy and its own copy of your messages.

3. What we collect

What you tell Companion. The text and voice notes you send, and what we extract from them: the people in your life, their names and the details you mention, dates such as birthdays and anniversaries, promises you have made, plans, preferences, and the context that makes a message feel personal.

Account information. Your Telegram user ID and username, your chosen name and timezone, and your settings and reminder schedule.

Technical information. Logs needed to run and secure the service, such as timestamps, error traces, and the identifiers needed to route a message back to the right conversation.

Website analytics. This website uses Vercel Analytics to count page views. It is cookieless and does not build a cross-site profile of you. It is separate from anything you tell Companion in Telegram.

What we do not collect. Companion does not sync or read your phone contacts, your calendar, your email, your location, your other messaging apps, or your social accounts. It only knows what you type or say to it.

4. Information about other people

This is the part of Companion worth reading carefully. When you tell Companion about your sister, your friend, or your colleague, you are giving us information about a person who is not our user and who has not agreed to anything.

We handle that as follows.

• That information is stored against your account, is visible only to you, and is used only to help you stay in touch with that person.
• We do not build a profile of that person across users, sell it, share it with them, or contact them. Companion never messages another person, under any circumstance.
• We do not ask you for, and ask that you do not provide, sensitive information about other people, such as health, sexuality, religious or political views, or criminal history. If a voice note happens to include it, it is treated with the same protections as the rest of your memory and you can delete it.
• If a person contacts us and asks what Companion holds about them, we will not confirm or deny the existence of any individual user’s memory, because doing so would expose our user. We will explain how the product works and how to reach you directly.

5. How we use it

We use the information above only to:

• remember the people and details you asked us to remember;
• send you the reminders, birthday nudges, and follow-ups you have asked for;
• draft messages, call openers and notes for you to send yourself;
• operate, secure, debug and improve the service;
• meet our legal obligations.

We do not sell your information. We do not use it for advertising and we do not run advertising.

6. How AI processing works

Companion uses a third-party large language model provider to understand what you send and to draft what you ask for. This means the content of your messages and voice notes, and relevant parts of your stored memory, are transmitted to that provider to generate a response.

We use that provider under a business agreement that prohibits using your content to train their models. Voice notes are transcribed to text; we discard the raw audio file once transcription completes and do not retain it.

Our provider may hold a copy of a request for a short period, up to 30 days, for abuse monitoring, after which it is deleted. That is their retention, not ours, and it applies whether or not you delete anything on our side.

Companion’s output is generated text. It can be wrong. Nothing it drafts is sent anywhere until you send it yourself.

7. Who else touches your information

We share personal information only with the service providers we need to run Companion, and only so they can perform that function for us:

• Our large language model provider, to interpret your messages and generate drafts.
• Our database and application hosting providers, where your account and memory are stored and where the service runs.
• Vercel, which hosts this website and provides the cookieless page-view analytics described above.
• Telegram, which carries every message between you and Companion. Telegram is not our subcontractor; it is the channel you have chosen, and your messages exist in your Telegram account independently of us.

We may also disclose information if we are required to by law, or where it is necessary to prevent serious harm to a person.

8. Overseas disclosure

The providers listed above operate in the United States, and some operate in other countries where they run infrastructure. Storing and processing your information therefore involves disclosing it outside Australia. We take reasonable steps to ensure those providers handle it in a way consistent with the Australian Privacy Principles, including through contractual data protection terms.

9. How long we keep it

Your memory is kept for as long as your account exists, because that is the entire point of it. You can delete any individual memory, any individual person, or your whole account at any time.

• Raw voice audio: discarded once transcribed.
• A memory or person you delete: removed from the live service immediately.
• Your account, if you delete it: removed from the live service immediately, and purged from encrypted backups within 30 days.
• Operational logs: retained for a short period for security and debugging, then deleted.

We may retain a minimal record of the fact that an account was deleted, where we need it to meet a legal obligation or resolve a dispute.

10. Security

Information is encrypted in transit and at rest. Access to production systems is restricted to the people who need it to run the service. Companion does not expose a public API that returns your memory.

No system is perfectly secure. If we become aware of a data breach likely to result in serious harm, we will notify affected users and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

If you believe you have found a security vulnerability, email security@companion.social. We will not pursue good-faith security research.

11. Your rights and choices

You can, at any time:

• See what Companion remembers by asking it directly in Telegram, or in the control panel.
• Correct anything wrong by telling Companion the correct version.
• Export your information from the control panel.
• Delete a memory, a person, or your whole account. See data deletion for how.
• Turn off reminders without deleting anything.

If you are unhappy with how we have handled your information, email privacy@companion.social first so we can try to fix it. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

12. Age

Companion is for adults. You must be 18 or over to use it. We do not knowingly collect information from anyone under 18, and we will delete any account we discover belongs to a minor.

13. Changes to this policy

We will update this page when the product changes. The date at the top always reflects the current version. If a change materially affects how your information is handled, we will tell you in Telegram before it takes effect.