Skip to main content

Privacy Policy

How Youtopic, LLC d/b/a Lorem collects, uses, protects, and shares data across Lorem's app, website, AI companions, memory, media, image generation, subscriptions, credits, packs, referrals, and support.

Last updated: June 17, 2026

1. Scope

This Privacy Policy explains how Youtopic, LLC d/b/a Lorem collects, uses, discloses, protects, and retains personal data when you use Lorem.

This Policy applies to Lorem's mobile app, website, APIs, WebSocket chat, authenticated web dashboard, AI companions, canonical and custom characters, conversations, memory, affinity and Bond features, visual galleries, media uploads, document uploads, audio transcription, image generation, subscriptions, credits, packs, referrals, rewarded ads, support, and related communications.

Some features depend on your device, platform, country, plan, app version, experiment, provider availability, or feature flag. The web version may offer fewer creation features than the mobile app.

2. Adults Only

Lorem is intended only for adults who are at least 18 years old and old enough to form a binding agreement in their jurisdiction. We use date of birth and related eligibility checks to help enforce this limit.

We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided data to Lorem, contact us at support@lorem.gg so we can review and take appropriate action.

3. Data We Collect

We collect data you provide, data created by your use of Lorem, data from authentication and payment providers, and technical data needed to operate, personalize, secure, bill, and improve the service.

Account, Authentication, and Profile

  • preferred name, email address, account identifiers, session state, email confirmation status, password reset events, security tokens, login provider identifiers, and OAuth profile data when you choose a third-party login provider;
  • date of birth, age eligibility status, onboarding completion, profile status, addressing preference, language, theme, text size, timezone, model preferences, notification choices, and other account settings;
  • support requests, billing questions, privacy requests, security reports, feedback, survey responses, and related communications.

Conversations, Characters, and Relationships

  • messages, prompts, responses, conversation sessions, session titles, search queries, message parts, attachments, streaming events, timestamps, edits, deletes, and related metadata;
  • selected canonical character, custom character content, avatar choices, role, archetype, personality, relationship style, recurring topics, humor, voice, boundaries, and customization details;
  • global, relationship, and episodic memories, including stable facts, preferences, conversation style, relationship moments, sharing scope, edits, forget requests, memory candidates, embeddings, summaries, and audit signals;
  • affinity, Bond level, flirt or relationship signals, gallery unlocks, character image interactions, feedback on character images, and related progression events.

Media, Documents, Audio, and Images

  • images, audio recordings, documents, transcriptions, extracted document text, file names, MIME type, file size, duration, checksum, upload status, signed URL metadata, and processing status;
  • image generation prompts, styles, aspect ratios, selected model, reference images, templates, generation status, processing metadata, generated images, thumbnails, gallery items, downloads, shares, deletions, and policy blocks;
  • technical metadata embedded in uploaded files when needed for upload, safety, processing, display, abuse prevention, or troubleshooting.

Subscriptions, Credits, Packs, Referrals, and Ads

  • free or Plus plan status, subscription entitlement state, product identifiers, store identifiers, purchase restoration events, expiration, renewal state, trial state, tax, refund, dispute, and webhook data;
  • weekly chat turn usage, memory limits, custom character limits, document upload eligibility, premium gates, image generation credit usage, message credit usage, and related counters;
  • referral codes, invite status, referral points, redemption choices, message packs, image packs, first-purchase trial status, and persistent pack balances;
  • rewarded ad eligibility, ad unit identifiers, client event identifiers, platform, app version, daily rewarded-ad limits, granted message credits, and anti-fraud signals.

Usage, Device, Logs, and Diagnostics

  • screens viewed, taps, lifecycle events, funnels, preferences, locale, approximate region, timezone, feature usage, and product events;
  • IP address, user agent, device or installation identifiers, operating system, browser, app version, release version, crash data, server logs, API latency, WebSocket events, and error reports;
  • model calls, memory jobs, structured decisions, safety classifications, moderation signals, traces, analytics, benchmark signals, fraud indicators, abuse indicators, and infrastructure logs.

4. Sensitive Data, Voice, Images, and Relationships

Lorem can involve personal conversations, emotions, routines, relationship context, romantic preferences, sensual themes, voice, images, documents, and life details. Depending on your jurisdiction and what you share, some of this information may be considered sensitive.

Lorem is designed for adult companionship, creative expression, affection, non-explicit romance, and light emotional support. Sexuality can be a normal part of adult life, but Lorem is not designed to replace human relationships, professional care, or real-world support networks.

We do not seek to identify users biometrically by face or voice. Uploaded images and audio may still contain faces, voices, places, third parties, documents, or other personal data.

Avoid sharing third-party personal data, unnecessary documents, confidential information, detailed medical data, children's data, account secrets, addresses, or anything you do not want processed by AI systems.

Lorem is not therapy, medical care, legal advice, financial advice, or an emergency service. If you may harm yourself or someone else, or you are in immediate danger, contact emergency services or trusted people right away.

5. How We Use Data

  • to create, authenticate, secure, recover, and maintain your account;
  • to verify age eligibility and personalize name, language, addressing preference, timezone, theme, text size, model preferences, and account settings;
  • to operate conversations, WebSocket streaming, Home, search, character pages, session history, profile, galleries, custom characters, media uploads, document uploads, audio transcription, image generation, referrals, rewarded ads, and support;
  • to generate AI replies, summaries, titles, memories, transcriptions, document context, character images, and user-requested generated images;
  • to load personality cards, adjust character tone, apply affinity and Bond, calibrate adult intimacy, enforce character boundaries, unlock galleries, and maintain continuity across sessions;
  • to extract, score, deduplicate, embed, consolidate, edit, share, and forget memories according to your settings, plan limits, safety rules, and deletion requests;
  • to enforce free-plan limits, Lorem Plus entitlements, document gates, weekly limits, memory limits, custom character limits, credit balances, image generation credits, message packs, image packs, referral redemptions, and purchase restoration;
  • to moderate content, apply guardrails, block unsafe character or image creation, detect abuse, prevent fraud, protect infrastructure, enforce the Terms, and comply with law;
  • to measure usage, debug issues, monitor performance, improve user experience, test reliability, trace asynchronous jobs, respond to support requests, and defend legal claims.

6. AI, Memory, and Guardrails

AI features may process your messages, recent history, profile, preferences, personality cards, retrieved memories, attachments, transcriptions, documents, reference images, moderation results, plan status, credit state, and execution metadata to produce responses, summaries, memories, titles, classifications, or images.

Lorem characters and custom characters are fictional virtual companions. They are not real people and should not be treated as substitutes for real relationships, licensed professionals, or emergency support.

Memory is designed in global, relationship, and episodic layers. The backend may extract candidates, apply safety policy and thresholds, create embeddings, consolidate similar memories, update session summaries, suggest titles, and keep candidate decisions auditable. Sensitive memories should not be consolidated by default, and memories you edit or forget should override later automatic extraction.

Guardrails may refuse, redirect, block, or limit content involving minors, explicit sexual content, pornography or sexual gratification, sexual violence, coercion, non-consensual intimate content, harassment, hate, self-harm, violence, fraud, spam, academic dishonesty, unsafe professional advice, privacy violations, unsafe image generation, real-world meetup logistics, addresses, account secrets, or attempts to bypass safety systems. If you believe our guardrails failed, report the conversation in the app when available or contact support@lorem.gg.

Image generation may use third-party AI services. Their policies and Lorem policies may block prompts, reference images, generated outputs, or requests that involve non-consensual intimate imagery, sexualized minors, deceptive real-person likeness or voice use, privacy violations, intellectual property violations, illegal activity, hateful content, violent content, or unsafe attempts to bypass guardrails.

AI outputs can be inaccurate, incomplete, biased, inappropriate, or outdated. Verify important information, especially health, safety, travel, education, legal, financial, or other high-impact decisions.

7. Model Training and Product Improvement

Lorem does not use identifiable personal content from your conversations, uploads, documents, audio, images, memories, or generated outputs to train Lorem's own AI models or third-party provider models by default.

We may process data to operate, secure, debug, moderate, support, enforce, and improve Lorem. Where possible, product analytics, quality analysis, reliability work, safety analysis, and research use aggregated, de-identified, or limited operational data rather than identifiable conversation content.

Third-party AI providers process prompts, files, outputs, safety signals, and metadata according to their own contracts, data processing terms, retention practices, and policies. Some providers may retain data for abuse monitoring, security, legal compliance, or service operation. We choose provider configurations intended for production business use where available.

If Lorem later introduces optional model-training, fine-tuning, or broader data-sharing features using identifiable personal content, we will provide the required notices and controls before using that content for those purposes.

9. Sharing With Third Parties

We do not sell personal data. We share data only when needed to operate, protect, bill, improve, support, or comply with obligations related to Lorem.

  • infrastructure, authentication, database, storage, and search or vector service providers;
  • AI, transcription, embeddings, image generation, orchestration, and safety service providers;
  • observability, tracing, analytics, session replay, error monitoring, benchmark, and product analytics services;
  • subscription, purchase, entitlement, referral, rewarded-ad, and billing processors;
  • third-party login providers, operating systems, app stores, email providers, support providers, CDN, security, logs, audit, and abuse-prevention services;
  • authorities, courts, regulators, professional advisers, purchasers, or corporate successors where required by law or needed for reorganization, merger, acquisition, financing, sale of assets, dispute resolution, or legal defense.

10. Retention and Deletion

We retain data for as long as reasonably needed for the purposes described in this Policy, including to provide Lorem, maintain continuity and memory, comply with law, resolve disputes, prevent fraud, protect users, and enforce our Terms.

  • account data is kept while your account exists or while needed for security, billing, support, fraud prevention, legal obligations, or legal defense;
  • conversations, messages, attachments, documents, audio, transcriptions, generated images, media assets, custom characters, galleries, affinity, Bond, memories, and related records may remain until you delete them, request account-data deletion, delete your account where available, or the applicable retention period ends;
  • account-data deletion can delete or soft-delete sessions, messages, memories, memory observations, character access records, memory candidates, affinity records, session summaries, document extractions, image generations, media assets, and related active records, subject to technical limits and legal retention;
  • forgotten memories, deleted conversations, deleted media, deleted generations, and account-data deletion requests should be reflected in active systems, while limited data may remain for security, fraud prevention, legal obligations, legal defense, support, analytics, or backups;
  • purchase, subscription, receipt, entitlement, referral, rewarded-ad, tax, chargeback, refund, and dispute records may be retained for legally required periods and platform requirements;
  • security, audit, moderation, abuse, error, tracing, benchmark, and analytics logs are retained as needed to protect, debug, and improve the service;
  • backups may persist for a limited period after operational deletion and are removed or overwritten through normal backup cycles;
  • we may anonymize or aggregate data for statistics, product metrics, safety analysis, and research where it no longer reasonably identifies you.

11. Security

We use technical and organizational controls appropriate to the risk, including encryption in transit, privileged backend operations, no app-side secrets, database access controls, private storage, short-lived signed URLs, rate limiting, ownership checks, audit logs, environment separation, least-privilege access, and provider security controls.

No system is completely secure. Protect your credentials, keep devices updated, use strong passwords, watch for suspicious links, and contact support@lorem.gg if you suspect unauthorized access.

12. Your Rights and Choices

Depending on applicable law, you may request confirmation of processing, access, correction, anonymization, blocking, deletion, portability, information about sharing, withdrawal of consent, objection, restriction, and review of automated decisions where available.

Where required by privacy law, additional choices may include the right to know categories of data, sources, purposes, retention, and recipients; the right to opt out of sale, sharing, or certain targeted advertising; the right to limit certain uses of sensitive data; the right to non-discrimination for exercising rights; and the right to complain to or petition a competent privacy authority.

We do not sell personal data. If a future feature involves sale, sharing for cross-context behavioral advertising, or a use of sensitive data that requires a separate opt-out or limitation mechanism, we will provide the required notice and controls.

You can also manage camera, gallery, microphone, document, notification, cookie, analytics, session replay, memory, language, theme, text size, login-provider, subscription, and app-store settings in the app, device, browser, or external provider.

Where available, you can manage or forget memories, delete conversations, and request account-data deletion in the app. You can also contact support to request account-data deletion.

To exercise privacy rights or ask a privacy question, contact support@lorem.gg. We may ask for information to verify your identity and protect your account.

13. Cookies, SDKs, App Permissions, and Ads

  • on the website, we may use cookies or similar technologies for sessions, security, preferences, analytics, and performance measurement;
  • in the app, we may request camera, photo library, microphone, notification, and file access only when needed for features you choose to use;
  • analytics, session replay, crash reporting, subscription, authentication, rewarded-ad, and anti-fraud SDKs may collect technical and usage events depending on configuration and applicable consent;
  • rewarded ads may involve ad networks receiving device, event, ad unit, platform, and anti-fraud data needed to serve ads, measure completion, and grant credits;
  • app stores may require their own data collection, usage, and sharing disclosures. Those disclosures should match this Policy and the published app version.

14. Changes to This Policy

We may update this Policy to reflect changes in product, technology, providers, pricing, legal requirements, or operations. The updated version will show a new date. If a change is material, we will use reasonable means to notify you.

15. Contact

For privacy requests, support, subscriptions, billing, safety reports, security concerns, or questions about this Policy, contact support@lorem.gg.