Sanam AI

Privacy Policy

Last updated: 2 October 2026

This Privacy Policy explains what personal data Sanam AI collects, why, how it is used and shared, how long it is kept, and the choices and rights you have. Sanam AI is an AI companion app: you chat with AI-generated characters. It is operated by Sanam AI ("we", "us", "our"), Mumbai, India. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for your personal data.

By creating an account or using Sanam AI, you confirm that you have read this policy and you consent to the processing described in it. If you do not agree, please do not use the app.

1. Who can use Sanam AI

You must be at least 16 years old to create an account. If you are under 18, you may use Sanam AI only with the permission of your parent or legal guardian, who must read this policy and consent to it on your behalf. By creating an account you confirm that you are 18 or older, or that you are at least 16 and have that permission.

We do not knowingly collect personal data from anyone under 16. If we learn that an account belongs to a person under 16, or to a person under 18 without a parent's or guardian's consent, we close it and delete its data. A parent or guardian can ask us to review, correct or delete a minor's data, or withdraw consent, by writing to support@sanamai.online.

2. Personal data we collect

Data you give us

  • Account details: your email address, and a password (stored only in hashed form) or your Google account identifier if you sign in with Google.
  • Profile details: first and last name, date of birth (to confirm your age), gender, and a profile photo if you choose to add one.
  • Your conversations: the messages you send to characters, the replies you receive, any gifts you send, and the pictures you request.
  • Things a character remembers about you: short notes drawn from your own messages (for example your name, interests or important dates) so that a character can stay consistent across conversations.
  • Reports and support messages: anything you send when you report a message or contact us.

Data collected automatically

  • Device and app information: device model, operating system version, app version, language, and a push notification token.
  • Usage information: dates and times of sign-in, features used, coin balance and coin transactions, and technical logs (including IP address) kept for security and troubleshooting.
  • Advertising identifier: if ads are shown to you, the advertising partner may use your device's advertising ID.

Data from others

  • Google Sign-In: your name, email address and Google account identifier, when you choose to sign in with Google.
  • Google Play: confirmation of your purchases and subscription status (product, order number, purchase time, renewal or cancellation). We never receive your card or bank details.

We do not ask for, and you should not share in chats, sensitive information such as government identity numbers, bank or card details, passwords, or health records.

3. Why we use your data

  • To create and secure your account and keep you signed in.
  • To provide the service: generating character replies and pictures, remembering context, and showing your chat history.
  • To process purchases, subscriptions and coins, and to keep the records the law requires.
  • To send service messages and notifications you have allowed, including messages a character starts on its own. You can turn notifications off in your device settings.
  • To keep the service safe: enforcing our Terms of Service, reviewing reported content, and preventing fraud and abuse.
  • To fix problems and improve the app, using aggregated or de-identified information where we can.
  • To show ads to users of the free plan and measure them.
  • To comply with the law and respond to lawful requests.

We rely on your consent, given when you create your account and use the app, and on the other grounds the DPDP Act permits, such as complying with law. We do not sell your personal data, and we do not use your private conversations to target advertising at you.

4. How AI processing works

Character replies and pictures are generated by artificial intelligence. To produce a reply, the text of your message, recent messages in that conversation and the notes a character remembers about you are sent to an AI model provider, which returns the generated text or image. Our current providers are OpenAI and Google. They act as our processors under contract and under their own published data-use terms for business customers.

AI output can be inaccurate or inappropriate. Please read our AI Disclaimer. Do not rely on a character for medical, legal, financial or emergency help.

5. Who we share data with

We share personal data only as needed to run the service:

  • AI model providers (OpenAI, Google) to generate replies and images.
  • Google Play for purchases and subscriptions, and Google Sign-In for authentication.
  • Firebase Cloud Messaging (Google) to deliver push notifications.
  • Google AdMob to show and measure ads on the free plan.
  • Hosting, storage, backup and email providers that store data and send service emails on our behalf. Backups are encrypted.
  • Authorities, when we are required to by law, a court order or a lawful government request, or to protect the safety of a person.
  • A successor, if the business is merged, acquired or reorganised, under the same protections.

Some of these providers process data on servers outside India. When that happens we use providers that commit to appropriate safeguards, and we follow any restriction the Government of India notifies under the DPDP Act.

6. How long we keep data

  • Account, profile and chats: for as long as your account is active.
  • When you delete a single chat: it is removed from your view immediately and erased with your account or earlier during routine clean-up.
  • When you delete your account: it is deactivated at once. You can restore it by signing in within 30 days. After 30 days your profile, chats, remembered notes, generated pictures and uploaded photo are permanently erased.
  • Purchase and transaction records: kept for the period tax, accounting and consumer law require, without your profile details.
  • Backups: encrypted backups are overwritten on a rolling schedule, within about 90 days.
  • Security logs and reports of abuse: kept as long as needed to protect users and meet legal duties.

7. Your rights

Under the DPDP Act you have the right to:

  • Access a summary of the personal data we process about you and how it is processed.
  • Correct, complete or update your personal data. You can edit your profile in Settings.
  • Erase your personal data. Use Settings, then Delete Account, or see our Account and Data Deletion page.
  • Withdraw consent at any time. Withdrawing consent means we can no longer provide the service, so your account will be closed.
  • Nominate another person to exercise your rights if you die or become incapacitated.
  • Grievance redressal: complain to our Grievance Officer and, if you are not satisfied, to the Data Protection Board of India.

To use any of these rights, write to support@sanamai.online from the email address on your account. We answer within the time the law allows and may need to confirm your identity first.

8. Security

We use encryption in transit, hashed passwords, access controls, encrypted backups and monitoring to protect your data. No system is completely secure. If a personal data breach affects you, we will notify you and the Data Protection Board of India as the law requires.

9. Notifications, ads and your choices

  • You can switch off push notifications in the app's Settings or your device settings.
  • You can reset or delete your advertising ID, or opt out of personalised ads, in your device's Google settings.
  • Subscribers do not see ads.

10. Changes to this policy

We may update this policy as the app or the law changes. We will post the new version here and change the date at the top. If a change is significant we will tell you in the app. Continuing to use Sanam AI after a change means you accept the updated policy.

11. Grievance Officer and contact

Grievance Officer: Grievance Officer, Sanam AI
Email: support@sanamai.online
Address: Sanam AI, Mumbai, India

We acknowledge complaints within 48 hours and aim to resolve them within 15 days. For general questions write to support@sanamai.online.