Poppy AIPoppy AI Privacy Policy
This page explains, in plain language, what Poppy AI records when you chat, why we keep it, how long it stays and how to get rid of it.
Last updated: 1 August 2026 · Operator: Poppy AI · poppyai.net
1. Who we are
Poppy AI is the trading name of the service published at poppyai.net. When this policy says "we", "us" or "Poppy AI", it means the company that operates that website and the companion chat product available through it.
2. Scope of this policy
This policy covers every visitor to poppyai.net and every registered member of Poppy AI, including people who only browse the public pages and never create an account.
3. Age requirement
Poppy AI is available exclusively to adults aged 18 or over. We do not knowingly collect data from minors, and any account found to belong to a minor is closed and purged.
4. Account information
When you register with Poppy AI we store an email address, a hashed password or a third-party sign-in identifier, your chosen display name and the date the account was created.
5. Chat content
Messages you exchange with a companion are stored so the conversation can continue where it left off. Chat content is linked to your account identifier and is not published, sold or licensed to anyone.
6. Companion memory
Poppy AI extracts short factual notes from your conversations, such as a city or a pet's name, so your companion stays consistent. You can view, edit or clear these notes from your account settings.
7. Payment data
Card numbers never reach our servers. Payments are handled by a PCI-compliant processor which returns only a token, the last four digits and the transaction status to Poppy AI.
8. Technical data
We record IP address, browser type, device class, screen size, referring page and timestamps. This data supports security, fraud prevention and basic performance monitoring.
9. Cookies and similar tools
Poppy AI uses strictly necessary cookies for sign-in and session security, plus optional analytics cookies. Optional cookies are only set after you accept them in the consent banner.
10. Analytics
Aggregated usage statistics tell us which pages load slowly and where new members drop off. Analytics reports are read at the level of totals and trends, never as a profile of one person.
11. Legal bases for processing
We process data to perform our contract with you, to meet legal obligations, on the basis of your consent where consent is requested, and on our legitimate interest in keeping Poppy AI secure and functional.
12. How long we keep data
Account and chat data are retained while your account is active and for 30 days after deletion, after which they are removed from live systems. Billing records are kept for the period tax law requires.
13. Service providers
We share limited data with hosting, payment, email delivery, moderation and analytics providers. Each is bound by contract to process data only on our written instructions.
14. International transfers
Some providers operate outside your country. Where that happens, transfers rely on standard contractual clauses or an equivalent recognised safeguard.
15. Security measures
Traffic is encrypted with TLS, passwords are hashed with a modern algorithm, access to production data is restricted to a small named group, and administrative actions are logged.
16. Data breach handling
If a breach is likely to affect your rights we notify the competent supervisory authority within 72 hours and inform affected members directly without undue delay.
17. Your access rights
You may request a copy of the personal data Poppy AI holds about you, in a portable machine-readable format, at any time.
18. Correction and deletion
You can correct inaccurate details from your settings page, delete individual conversations, or delete the account and everything attached to it.
19. Objection and restriction
Where we rely on legitimate interest you may object to that processing, and you may ask us to restrict processing while a dispute about accuracy or lawfulness is resolved.
20. Withdrawing consent
Consent given for optional cookies or marketing email can be withdrawn at any moment without affecting the lawfulness of processing carried out before withdrawal.
21. Marketing communications
We only send promotional email to members who opted in. Every message includes a one-click unsubscribe link that takes effect immediately.
22. Automated processing
Companion replies are generated automatically, but no automated decision is taken about you that produces a legal or similarly significant effect.
23. Content moderation
Automated filters and, where necessary, a trained human reviewer inspect content flagged as prohibited. Reviewers see only the material required to make a decision.
24. Third-party links
Pages on Poppy AI may link to external sites. Once you leave poppyai.net, the privacy practices of the destination apply and we have no control over them.
25. Public information
Nothing you write to a companion is shown to other members. Poppy AI has no public profiles, no shared feeds and no social directory.
26. Children's content policy
Any attempt to steer a conversation toward minors results in an immediate permanent ban and, where the law requires it, a report to the appropriate authority.
27. Changes to this policy
Material changes are announced on this page and by email to registered members at least 14 days before they take effect.
28. Complaints
If you are unhappy with how Poppy AI handled your data you may complain to your local data protection authority, and we would appreciate the chance to resolve it first.
29. Contacting us
Privacy requests can be sent to privacy@poppyai.net. We answer within 30 days and will confirm receipt sooner than that.