Privacy Policy

Last updated: 2026-11-03

The short version. We keep what we need to run your chats and your plan. Your messages go to an AI provider so a friend can reply. We don't sell your data, we don't show ads, and you can wipe a chat, a friend or your whole account yourself.

1. Who we are

Drunk Friend is run by ITECH MEDIA OÜ, registry code 11874682, Pärnu mnt 31-67, 10119 Tallinn, Estonia. We are responsible for your personal data. Questions and requests: hello@drunkfriend.com.

2. What we collect

Account: your e-mail address, and your name (and picture) if you sign in with Google or Apple.
Friends and chats: the friends you build, every message you send and every reply, your 👍/👎, and the "wisdom" lines your friends write for you.
Memory: so a friend remembers you, an AI turns what _you_ told that friend about yourself into a short summary and a few facts (like your job or what you hate). It's kept with that friend.
Payments: your plan, its dates, how many messages you've used, and your refund requests. Your card details go to Stripe, not to us.
Notifications: if you turn them on, your device's push address and your time zone.
Website visits: the pages and steps you view and the choices you make while building a friend, linked to a random visitor ID in a cookie. The free preview messages go to the AI for a reply; we don't keep their text unless the safety filter blocks one (section 4).
Lines you like: when you 👍 or 👎, save (🧠) or copy (📋) one of your friend's lines, we keep that line's text (up to 500 characters) and your friend's name with a random visitor ID, to learn which lines people like most. Your own messages are never part of this.
Technical data: which AI model answered, timing and errors (not the text), records of the e-mails and notifications we sent you, and error reports without message contents.

We don't collect your contacts, photos, microphone, camera or precise location, and we don't use advertising trackers.

3. How we use it

To run Drunk Friend for you — your account, your friends' replies and memory, your plan and payments, receipts and account e-mails. (Legal basis: our contract with you.)
To keep it safe and working — the safety filter, preventing abuse, fixing errors, and seeing which AI models people like. (Legitimate interest.)
To understand how our website works — counting visits and comparing page versions, with our own tools only. (Legitimate interest.)
To send push notifications — only if you turn them on. (Your consent; turn them off any time.)
To keep accounting records — payments and refunds. (Legal obligation.)

Where we rely on legitimate interest, you can object (section 8). You may tell a friend about your health, love life or beliefs; that's up to you, and we use it only to reply to you and for that friend's memory.

4. AI and your chats

To write a reply, we send the AI provider the friend's personality, the friend's memory of you, the latest messages of that chat and your new message.
Safety filter: before that, every message you write is checked automatically for a few kinds of extreme content. Blocked messages are kept with the reason, so our team can review them.
Replies are written by the AI. No human writes them, and no decision with legal effect is made about you automatically.
We don't use your chats to train AI models. Our AI providers process your messages only to answer and, for a limited time, to prevent abuse; their terms don't allow them to train their models on them.
Clearing a chat also erases that friend's memory of you.

5. Who we share it with

We don't sell or rent your data, and we don't share it for advertising. We share it only with companies that help us run Drunk Friend, under contracts that limit them to that job:

Hosting and network: Render (servers and database, USA), Cloudflare (network and security).
AI and safety filter: Google (Gemini AI, and the safety filter), OpenRouter (backup AI route, only to providers that don't store or train on messages), Groq (last-resort backup AI; keeps no messages by default).
Sign-in: Clerk; Google or Apple if you sign in with them.
Payments: Stripe.
E-mail: Google Workspace (we send our e-mails through Gmail).
Push notifications: Apple, Google or Mozilla, depending on your device (the content is encrypted).
Error reports: Sentry.

We may also share data if the law requires it, to protect someone's safety, or with a company that takes over Drunk Friend (we'll tell you).

Several of these companies are in the USA. Transfers rely on the EU–US Data Privacy Framework or on the European Commission's Standard Contractual Clauses. Ask us for details.

6. Who on our team can see it

A small number of authorised team members can see account and payment details, the memory friends keep about people, and messages the safety filter blocked — for support, safety and quality. We don't read your chats.

7. How long we keep it

We keep data only as long as we need it for the reasons above:

Chats, friends, memory and settings: until you delete them or your account.
Wisdom lines: 30 days, unless you star them.
Lines you like: 12 months.
Accounts that were never paid for: deleted after 14 days.
Payment and refund records: 7 years, as accounting law requires.
Website and technical records: as long as they're useful for running and improving Drunk Friend, after which we delete them or keep them only without anything that identifies you.

Deleting your account (Account → Delete account) deletes your friends, chats, memory, wisdom lines, the lines you liked, notifications, settings, sign-in and blocked messages, and unlinks technical records from you. Your payment records stay for the accounting period, with your e-mail, so a refund or dispute can still be matched; Stripe keeps its own payment records for the same reason.

8. Your rights

You can ask to see, copy, correct or delete your data, to restrict it or object to how we use it, and to get it in a portable format. You can turn off notifications any time. Much of this you can do yourself in the app (clear a chat, delete a friend, delete your account); for the rest, e-mail hello@drunkfriend.com from your account's address. We reply within a month.

You can also complain to the Estonian Data Protection Inspectorate (aki.ee) or the data protection authority where you live.

9. Cookies

We use only what Drunk Friend needs to work, plus our own visit counting. No advertising or third-party analytics cookies.

What	Why
Sign-in cookies (Clerk)	Keep you signed in
Visitor ID (`df_vid`, 1 year)	Limits the free preview and counts visits to our website
Page version and visit IDs	Keep the same page version during a visit and group a visit's page views
Your progress and preferences (browser)	Remember the friend you're building, the used-up preview, layout and payment status
Stripe cookies (payment step only)	Prevent payment fraud

10. Children

Drunk Friend is for adults only (18+). We don't knowingly collect data from anyone younger; if we find out, we delete the account. Tell us at hello@drunkfriend.com if you think a minor is using it.

11. Security

Data travels encrypted. Card details stay with Stripe. Only named team members can use our admin tools. Plan limits and permissions are checked on our servers. No system is perfect; if a breach puts you at risk, we'll tell you and the authorities as the law requires.