Legal

Privacy Policy

This explains what we collect, why, who we send it to, and how to get it back or get rid of it. We've written it to be read, not skimmed past.

Effective 15 July 2026 Last updated 15 July 2026 Applies to fermata.me · Composer · Love Bird · Encore

The short version

We collect what you tell us and what you do in our games. Your conversations are sent to AI companies to generate replies — we name every one of them below.

We never see or store your card number. Paddle handles payment.

We do not sell your personal information. We don't run ads today; if that ever changes we'll tell you first and you can opt out — and whatever happens, we will never use your conversations to target ads, or show targeted ads to anyone we know is a minor. We don't train AI on your conversations today either; sections 6 and 8 have the detail.

Our AI can write things about you into your own profile, based on what you say in conversation. You can turn that off, read everything it wrote, correct it, or delete it. Section 3 explains exactly how.

We do not create voiceprints and we do not clone your voice. Section 4.

You can delete your account and everything in it from inside the app.

01

Who we are

Fermata is an AI film studio. We make Storyliving — stories you play from the inside, including Love Bird. This policy covers fermata.me, Fermata Composer, Love Bird, and Encore.

The data controller is Fermata, Inc..

Privacy questions go to privacy@fermata.me. A person reads that inbox.

02

What we collect

Grouped by why it exists rather than by where it's stored.

CategoryWhat's in it
AccountEmail address, username, display name, pronouns, avatar image, a securely hashed password, and your member number.
ProfileBio, a short self-description, personality, likes, dislikes, relationship status, personal history, hometown, and age. Some of this you write. Some of it our AI writes about you — see section 3.
Linked accountsYour Google, Apple, or Steam ID when you sign in with them — including Apple's private relay address if you use Hide My Email. Phone number and any audition or pairing code you enter.
GameplaySave data, play history, and the state of your relationship with each character — including what characters remember about you.
ContentMessages you send to characters, and voice recordings when you speak to them.
UsageMessage counts, AI tokens consumed, session length, and what your activity costs us to run. We measure this per account.
PaymentYour purchase history and subscription status. Not your card number — see section 9.
03

The AI writes about you

This is unusual, so we're putting it near the top instead of burying it.

While you play, our AI can infer things about you from your conversations and write them into your own profile — your bio, personality, likes, dislikes, relationship status, history, age, and hometown. Say something about your hometown to a character, and the game may remember it as a fact about you.

We do it so characters know you and the story feels like yours. It is still profiling, and it is still your data.

The setting is currently on by default

The control is called Learn About Me, in your profile settings. It is switched on when you create an account. Turn it off at any time and the AI stops writing to your profile. Anything already written stays until you edit or delete it.

What you can do about it

  • See it — everything the AI wrote is visible in your profile. Nothing is hidden from you.
  • Correct it — edit any field. Your edit wins; the AI merges around it and won't overwrite you.
  • Delete it — clear any field, or delete your account entirely.
  • Stop it — switch Learn About Me off.

The AI only ever adds to your profile — it never deletes what you wrote yourself.

We rely on our legitimate interest in making the story feel personal to you. Because Learn About Me starts switched on, you have an absolute right to object — switching it off is how you do that, and it takes effect immediately.

04

Voice, and what we don't do with it

When you speak to a character, we record the audio and send it to a speech-to-text provider to turn it into words. We use AI voices to speak back to you. The distinction below matters legally, so we're being precise:

We do not create voiceprints. We do not use your voice to identify you. We do not clone your voice. We are not offering voice cloning.

We do not collect, capture, or store biometric identifiers as defined by the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, or comparable laws.

We do not keep your voice recordings. Audio is converted to text and discarded; the text is what the game uses. Your recording is never used to build a model of your voice. If we ever want to change that, we will ask you first, in writing, before capturing anything — and we will update this policy before we do it, not after.

One precision: if you record a voice note in the app, that recording may be kept on your own device so you can play it back. That copy lives on your hardware, under your control, and is not uploaded to us for storage.

05

Working with AI

  • The characters are not real people. They are fiction, performed by AI. They have no independent existence and are not based on real individuals.
  • Your conversations leave our systems. To generate a reply, what you write is sent to the AI providers named in section 8.
  • AI output can be wrong. It may be inaccurate, odd, or unintentionally offensive. Don't treat anything a character says as fact, advice, or a promise from us.
  • What you say shapes what happens next. Conversations influence how characters behave toward you later, and — if Learn About Me is on — what the game believes about you.
06

Training AI

Today, we do not use your conversations to train AI models — not ours, and not anyone else's. The AI providers named in this policy process your messages only to generate the service's replies, under commercial API terms that do not grant them the right to train their models on your content.

We may want to change that. The most likely reason: using gameplay transcripts to build better game masters — AI that runs our stories more skilfully. If we ever use your content to train or fine-tune a model, we commit to all of the following, every time:

  • We tell you before it starts. We update this policy and notify you first — never silently, and never reaching back to repurpose content you gave us under a no-training promise.
  • We de-identify first. We disassociate the content from your account and remove direct identifiers before any of it is used for training.
  • You can opt out, and your choice is honoured from then on.
  • It stays with us. Any such training is to improve our own games. We do not sell your conversations, and we do not hand them to third parties to train their models.

Your voice is treated more strictly still: we will never use your voice recordings to train or clone anything without asking you first, in writing, before we capture it (see section 4).

07

Why we're allowed to use it

For people in the UK and EU, the GDPR requires us to name a legal basis for each use:

BasisWhat we use it for
ContractRunning your account, saving your game, delivering what you bought.
ConsentOptional features you switch on — including Learn About Me and any marketing email. Withdraw it any time.
Legitimate interestsKeeping the service up, preventing abuse and fraud, understanding cost and load. We've weighed these against your rights.
Legal obligationTax, accounting, and responding to lawful requests.
08

Who else sees it

We use other companies to make the product work. We are naming all of them, because "we may share data with service providers" tells you nothing.

CompanyWhat it does · what it gets
AnthropicGenerates character conversation. Receives your messages and story context.
OpenAISpeech-to-text. Receives your voice recordings.
Inworld AIVoice synthesis and speech-to-text. Receives voice recordings and text.
ElevenLabsVoice synthesis. Receives text to be spoken.
fal.ai · MeshyImage, video, and 3D generation. Receive generation prompts.
Amazon Web Services · VercelHosting, databases, and compute. United States.
PaddlePayments. Merchant of record — see section 9.
Google · Apple · SteamSign-in. We receive an account identifier; they don't receive your gameplay.

We may also disclose data if the law requires it, to protect someone's safety, or to a buyer if the company is ever sold — in which case this policy follows the data.

We do not sell your personal information.

Advertising

Today we do not run ads and do not share your data for advertising. If that ever changes, we'll update this policy and tell you before it starts, and you'll be able to opt out — see Your rights for the Do Not Sell or Share control.

Two lines we will never cross, whatever our business model becomes: we will never use the content of your conversations to target advertising, and we will never show targeted or behavioural ads to anyone we know is a minor. Any advertising we ever run would be contextual or our own cross-promotion — not built from profiling you.

09

Payments

Fermata never sees or stores your card number.

Our order process is conducted by our online reseller Paddle.com. Paddle is the Merchant of Record for all our orders. Paddle handles all customer service enquiries and processes returns. Card details go to Paddle and stay with Paddle.

We receive what we need to give you what you bought: that a purchase happened, what it was, and your subscription status. Paddle's own privacy policy governs what Paddle does with your payment details.

Purchases on the App Store or Steam are handled by Apple or Valve under their terms and their privacy policies.

10

Your rights

Wherever you live, you can ask us to:

  • Show you what we hold about you, including what the AI wrote.
  • Correct anything that's wrong.
  • Delete your data — see section 11.
  • Export it in a portable format.
  • Object to or restrict how we use it, including profiling.
  • Withdraw consent at any time, without affecting what came before.

Email privacy@fermata.me. We'll respond within 30 days. We won't charge you, and we won't treat you differently for asking.

If you're in the EU or UK you may complain to your data protection authority. If you're in California, the CCPA gives you these rights. Today we do not sell or share your personal information as those terms are defined there.

You can still register your choice in advance, and we honour it:

  • Do Not Sell or Share My Personal Information — use this control to record an opt-out. It's honoured now and stays honoured if our practices ever change.
  • Global Privacy Control (GPC). If your browser or an extension sends a GPC signal, we treat it as a valid request to opt out of any sale or sharing — you don't have to do anything else.

Because we don't sell or share today, these controls have nothing to suppress yet — they exist so your choice is already on file the moment there's anything to apply it to.

Do Not Sell or Share My Personal Information

Checking your browser for a Global Privacy Control signal…

Clearing your browser storage clears a manual choice; a GPC signal, if you have one, applies regardless. Learn about GPC at globalprivacycontrol.org.

11

Deleting your account

You can delete your account from inside the app, in your profile settings. You don't have to email us, and you don't have to ask permission.

Deleting removes your account, profile, save data, relationship state, character memories, conversations, and voice recordings. Some records survive briefly:

  • Payment records — Paddle and we must keep transaction records for tax and accounting.
  • Backups — deleted data ages out of encrypted backups within 90 days.
  • Aggregate figures — counts that no longer identify you.

If you signed in with Apple's Hide My Email, deleting your account also ends our use of that relay address.

12

How long we keep it

DataKept for
Account & profileAs long as your account exists.
Gameplay & memoriesAs long as your account exists. Your story is the product.
ConversationsAs long as your account exists.
Voice recordingsNot retained. Converted to text, then discarded.
Usage & cost meteringAs long as your account exists.
Payment recordsAs long as tax law requires — typically seven years.
13

Children

You must be at least 13 to use Fermata. In the European Economic Area and the UK, you must be at least 16, or have a parent's consent where your country allows a lower age.

We don't knowingly collect data from anyone under 13. If we find out we have, we delete the account and its data. If you believe a child has given us data, email privacy@fermata.me and we'll remove it.

We ask for age to enforce this and to keep content appropriate.

14

Security

Passwords are hashed, never stored as text. Data is encrypted in transit and at rest. Access is limited to people who need it. Card numbers never reach us at all.

No system is perfectly secure, and we won't pretend otherwise. If a breach affects you, we'll tell you and the relevant regulator as the law requires.

15

Where your data lives

Our servers are in the United States (AWS, us-east-1, and Vercel). The providers in section 8 may process data elsewhere.

If you're in the EEA or UK, your data is transferred to the US under the Standard Contractual Clauses.

16

Changes

We'll update this page when the product changes. If a change is significant — new categories of data, a new purpose, anything involving biometrics — we'll tell you before it takes effect, not after. The date at the top always reflects the current version.

17

Contact us

privacy@fermata.me
Fermata, Inc.