Last updated: October 2, 2026
This policy explains how AiTo (AI·Thoughts) handles your information when you use www.aito.social and related AiTo apps, including the web app, PWA, mobile apps, and Windows app.
AI·Thoughts (“AiTo,” “we,” “us”) is a public community where adults share how AI makes them feel — in words, voice, or video. AiTo is run by an independent developer based in Connecticut, USA, who is responsible for your information (the “data controller”). For privacy or data requests, email keepers@ai-thoughts.app or use our contact form.
We do not sell your personal information, and we do not share it for advertising. AiTo shows no ads.
Privacy is not only this page — it is built into how AiTo works:
Sign-in uses a one-time code emailed to you. We do not store passwords.
Depending on what you choose to publish, we may collect:
If you choose to create voice or video content, AiTo may request access to your device's microphone and/or camera. Access is used only for the recording functionality you choose to use. AiTo does not request access to your camera or microphone simply for browsing the service.
We may process:
AiTo does not use precise GPS location for the service.
AiTo uses Vercel Analytics to understand general website usage, performance, and reliability. Analytics information may include page views, browser or device characteristics, and other information used to measure and improve the service. It is used for product improvement, troubleshooting, and understanding general usage patterns.
If you choose “Translate,” a PII-scrubbed copy of that text is sent to our translation provider. Emails, phone numbers, and IP-looking strings are stripped before the text is sent.
We use information to:
Published takes, your handle, display name, likes, and replies are public and may be viewed by anyone. Your email address, push-notification information, digest settings, session information, and reports you file are not displayed publicly.
Private messages are visible only to you and the person you're talking to. A keeper can read a conversation only when one of its two members reports it, and then only the messages sent up to that report — every time a keeper opens one, it's recorded in our security log. Blocking someone stops them messaging you and removes the conversation from both of your inboxes.
When you choose to upload or record voice, video, or avatar content, the resulting media is stored in cloud object storage used by AiTo. Voice, video, and photo takes are kept in private storage: they play only through short-lived links that AiTo gives to people allowed to see the take, and those links expire within about an hour. Avatars are public, because anyone can see them next to your handle.
To keep the community safe, the text and photos in a take, the speech in voice and video takes, and the text of replies and private messages may be sent to OpenAI for automated screening against our guidelines. The speech is transcribed to do this, and the transcript is shown as captions on the take. A take flagged by screening is hidden until a keeper reviews it; a reply or private message flagged by screening isn't sent.
When you delete a take or your account, we delete the related media files from our storage when those files are hosted by us and are within our control to delete. The same applies when a keeper removes a take or suspends an account. We may compute a SHA-256 fingerprint of media or text to help detect tampering, duplicates, or abuse.
We use an essential session cookie so you can remain signed in. We may also use browser local storage for functionality such as profile preferences and draft state.
You can clear cookies and local storage through your browser or device settings. Clearing these may sign you out or remove locally stored preferences and drafts.
These companies process information for us, only to provide their service to AiTo:
Each is bound by its own terms and privacy policy. We may also disclose information when the law requires it, for example to report child sexual exploitation to NCMEC.
AiTo uses cloud infrastructure operated by our service providers. Our primary application and database infrastructure is hosted in the United States. Uploaded voice, video, and avatar media are stored using cloud object storage.
Some service providers may process or store information in other countries where they operate. As a result, information may be transferred to and processed in countries other than the country where you live.
Wherever you live, you can:
EU, UK, and similar laws (GDPR). We use your information to provide the service you signed up for (contract); to keep it safe, secure, and working (legitimate interests); for push notifications, digests, and camera or microphone use only with your consent, which you can withdraw at any time; and to meet legal duties such as child-safety reporting. You can also object to processing based on legitimate interests, and complain to your data-protection authority.
California (CCPA/CPRA). You have the right to know what we collect, to delete it, to correct it, and not to be treated differently for using these rights. We do not sell or share personal information, and we do not use sensitive information beyond running the service.
AiTo is for people 18 and older, and you confirm your age each time you sign in. We do not knowingly collect information from anyone under 18. If we learn an account belongs to someone under 18, we delete it. Parents or guardians can email keepers@ai-thoughts.app to ask us to remove a child's account or content.
Content that sexually exploits or endangers children is hidden as soon as it is reported. We preserve it and report it to the National Center for Missing & Exploited Children (NCMEC) and law enforcement, as required by law.
AiTo may process and store information in the United States and other countries where our service providers operate. If you use AiTo from outside those locations, your information may be transferred to and processed in those countries.
We use reasonable technical and organizational measures designed to protect information, including HTTPS encryption in transit, protection of sensitive identifiers, hashed authentication codes, and restricted access to operational data.
No method of transmission or storage is completely secure. Please protect access to your email account and never share your AiTo sign-in codes with anyone.
We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this policy. Material changes may also be communicated through the app or by email when appropriate. Your continued use of AiTo after an updated policy becomes effective means that you acknowledge the updated policy.
AiTo is run by an independent developer based in Connecticut, USA. For privacy and data requests, email keepers@ai-thoughts.app or use our contact form.
Privacy Policy: https://www.aito.social/privacy
Contact: https://www.aito.social/contact