Last updated: September 16, 2026
Your privacy matters to us. This policy explains what data Alma collects, how we use it, and your rights regarding your information.
Alma is designed with privacy in mind. We follow these principles:
The following data is stored in your browser. If you use Alma as a guest, without creating an account, it stays there:
Creating an account syncs your conversations and settings to our servers, which is what allows them to appear on your other devices. See section 2.2.
If you create an account, we store:
| Data | Purpose |
|---|---|
| Email address | Account authentication |
| Display name | Personalization |
| Settings (theme, companion name, personality) | Cross-device sync |
| Credit balance, Alma Pass records and purchase history | Paid feature access and receipts |
| Romance mode consent timestamp | Recorded when you first start an Alma Pass; intimate conversations are stored like any other conversation so your companion can remember you |
| Support tickets and emails you send us | Answering your request |
| Conversations and companion memories | Cross-device sync and companion memory |
How your conversations are protected: they are stored under row-level security, meaning the database itself enforces that only your own account can read them. Our own support tooling can see account details, purchases and message counts, never message content. We do not sell your conversations, use them for advertising, or train AI models on them. We do not store your API keys on our servers.
Safety: romance mode is for adults; a small automated check keeps it that way, without storing or reading your messages.
Note on AI providers: to generate a reply, the text of your message is sent to the AI provider serving your conversation (see section 3.1). This is true of every AI companion service and is unavoidable — the model has to read your message to answer it.
Paid features are bought as one-time credit top-ups and Alma Passes; there are no subscriptions. Payment processing is handled by PayPal. We store:
We do NOT store your credit card numbers, bank details, or PayPal password. PayPal handles all payment processing according to their Privacy Policy.
Alma uses the following third-party services:
By default your messages are sent through OpenRouter to the model answering your conversation (currently models from Google, Mistral and Nous Research for chat, and Google for illustrated moments). OpenRouter routes requests to model hosts under its own privacy policy; we send only what is needed for the reply and no account identifiers.
If you bring your own API key, your input goes directly from your browser to the provider you've selected:
Each provider has their own data retention and privacy policies. We encourage you to review them.
We use Supabase for user authentication and data storage. See their Privacy Policy.
Credit top-ups and Alma Pass purchases are processed by PayPal. See their Privacy Policy.
If you sign in with Google, we receive your email and display name. See Google's Privacy Policy.
We use your data to:
We do NOT:
You have the right to:
We protect your data through:
However, no system is 100% secure. Please keep your API keys and account credentials safe.
Alma is not intended for users under 18 years of age. We do not knowingly collect data from children.
Your account data and conversations are stored in the European Union (Ireland), and the website is served from the Netherlands. The AI model hosts reached through OpenRouter, and PayPal, may process data in the United States; by using Alma you consent to that transfer.
We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new "Last updated" date.
For privacy-related questions or to exercise your rights, contact us at: