Privacy Policy
This policy explains how buzzme space (“we”, “us”), the developer that publishes the BUZZER app on Google Play, handles personal information when you use BUZZER. We decide why and how this information is processed, so we are its controller. For any question or request, email [email protected].
Important product limits
BUZZER provides fictional AI companions for conversation. They are not people, therapists, clinicians, medical devices or emergency services, and they are not a substitute for professional care. BUZZER is only for adults aged 18 and over.
Information we process
Account. An account is required so that your token balance, free weekly allowance and purchases belong to you rather than to one phone. If you register with email, we process your email address and send it a link to confirm that it is yours; your password is handled by Google Firebase Authentication and is never visible to us. To stop one inbox from opening many accounts, we also keep a one-way keyed hash of the inbox your address reaches, which cannot be turned back into the address. If you use Google Sign-In, we receive the email address, Google account identifier and display name that Google provides.
Conversations. The messages you send, together with up to the last 20 messages of that conversation so the reply has context. During a live voice call, microphone audio is streamed to generate the companion’s spoken reply; the microphone is used only while a call is running. The call transcript is used on your device to recognise crisis language and is not stored by us. Practice sessions, where a companion plays the other person in a conversation you want to rehearse, are processed the same way and are not saved on your device.
Memory. While memory is on (it is on unless you turn it off in Safety and privacy), each companion keeps up to 12 short notes about what you have told it, such as the name you like to be called or something you are working on. The notes are stored encrypted on your device, where you can read, edit or delete them on the companion’s page. They are sent with your messages and calls so replies can use them, and after a conversation the conversation and the notes are sent to work out the updated notes. We do not store them, and notes that look like contact details, links, passwords or codes are discarded.
Voice typing and read aloud. If you use voice typing, your phone’s own speech-recognition service (for example Google’s) turns your speech into text under its provider’s terms; BUZZER receives only the text you then choose to send. Read aloud uses your phone’s own text-to-speech; nothing extra is sent to us.
Content reports. If you report a reply or a call, we receive the reported text (for a call, the most recent line of its transcript), the reason you chose, any note you add, the companion’s identifier, the app version, the time, and a pseudonymous identifier derived from your account.
Settings and identifiers. The country and language you choose; a random installation identifier created on your device for quotas and abuse prevention (it is not derived from any hardware identifier); and a Firebase App Check attestation showing that a request came from a genuine copy of the app. We give OpenAI a one-way hash of the installation identifier so it can detect abuse; it cannot be turned back into your identity.
Wallet and purchases. Your token balance, free-allowance usage, and a ledger of top-ups and usage (amounts and times). Payments are processed by Google Play: we never receive your card number or billing address. We receive the Play purchase token and product identifier and send them to Google to verify the purchase before crediting tokens.
Operational records. Request time, route, status, latency, token counts and hashed identifiers, used to keep the service secure and reliable. Our logs are configured not to contain conversation text, audio, passwords or authentication tokens.
On your device only. Chat history, companions you create, the companions and replies you mark as favourites, memory notes, your consent record, settings (including app lock) and booked calls are stored encrypted on your device and are not uploaded to us. Android backup is turned off for the app. App lock uses your phone’s own fingerprint, face or screen-lock check; we never receive biometric data.
We do not ask for your legal name, date of birth, phone number, contacts, precise location or advertising identifier. If you choose to type sensitive information into a conversation, it is processed as described here to produce a reply.
How we use information
| Purpose | Information | Legal basis |
|---|---|---|
| Provide AI replies and live voice | Conversation text, audio, memory notes, country, language | Performing our contract with you |
| Run your account, balance and purchases | Account details, wallet records, purchase token | Performing our contract with you |
| Enforce quotas, prevent abuse and fraud, keep the service secure | Hashed installation identifier, email verification status, hashed email inbox, App Check attestation, operational records | Our legitimate interests |
| Review reported content and improve safety filters | Content reports | Our legitimate interests |
| Meet legal obligations | As required | Legal obligation |
We do not sell personal information. We do not share it for cross-context behavioural advertising, BUZZER shows no ads, and we do not use your conversations to train AI models.
Service providers
- Railway hosts the BUZZER API gateway and its short-lived quota counters.
- OpenAI generates text replies, live voice and safety moderation, and creates the fictional companions’ portraits. Under OpenAI’s API terms it does not use this data to train its models, and it may keep it for up to 30 days to monitor for abuse before deleting it. We have turned off storage of conversation state with OpenAI.
- Google Firebase provides sign-in (Authentication), app verification (App Check with Play Integrity), and Cloud Firestore storage for wallet, purchase, report and hashed inbox records and the portrait cache. Firebase also emails the link that confirms your address.
- Google Play distributes the app and processes purchases under Google’s own privacy policy.
These providers process information on our instructions and under their data-processing terms. Processing may take place outside your country, including in the United States; where the law requires it, transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses.
Companion portraits are generated from the fictional companion’s described appearance only. No photo of you and no information about you is used.
How long we keep information
| Information | Kept for |
|---|---|
| Data on your device | Until you delete it, use Erase all local data, or uninstall the app |
| Conversation text, audio and memory notes at our gateway | Not stored; processed in memory only while the request or call runs |
| Conversation data at OpenAI | Up to 30 days, for abuse monitoring |
| Account and wallet records | While your account exists; deleted when you delete your account |
| Purchase verification records (purchase token, product, token amount, date) | Kept so the same purchase cannot be credited twice; your account identifier is removed from them when you delete your account |
| Content reports | Up to 180 days |
| Quota counters | Expire automatically within about 48 hours |
| Operational logs | Up to 30 days, at our hosting provider |
| Support emails | Up to 12 months after your request is resolved |
Your choices and rights
In the app, tap the shield icon (Safety and privacy) to export a copy of the data stored on your device, erase all local data, or open Your account to change your password, sign out, or delete your account. Deleting your account removes your sign-in identity and your wallet, and forfeits unused tokens. In the same place you can turn memory off or on and turn on app lock; each companion’s page lists its notes, which you can edit or delete. You can also withdraw microphone access in Android settings; text chat keeps working.
You can ask us to access, correct, delete or export your personal information, or to restrict or stop processing it, by emailing [email protected]. We respond within the time the applicable law requires. You can also complain to your local data-protection authority. To delete your account without the app, follow the steps on our account deletion page.
Security
All network traffic uses HTTPS and cleartext traffic is disabled. Data on your device is encrypted with Android Keystore-backed keys. Every request to our gateway must pass Firebase App Check, quota keys are pseudonymous, and no server secret is shipped inside the app. No system is perfectly secure; if a breach affects you, we will notify you and the authorities where the law requires.
Children
BUZZER is only for people aged 18 or over, and everyone must confirm their age before using it. We do not knowingly collect information from anyone under 18. If you believe a minor is using BUZZER, email [email protected] and we will delete the account.
Changes and contact
When this policy changes we will update the date at the top, and we will tell you in the app about material changes where the law requires it. Contact: buzzme space, [email protected].