Pinky privacy policy
Effective date: 22 October 2026
This policy explains what the Pinky app collects, why, who receives it, how long it is kept, and how to delete it. It covers the Pinky apps for iPhone and Android, the test version of Pinky on the web (chat.pinky123.app), and this website.
Who runs Pinky
Pinky is run by Qiuyuan Zhu, an individual developer. This is the developer name shown on Google Play and the App Store. In this policy, "we" and "us" mean the person who runs Pinky.
To contact us about privacy, or to make any request in this policy, email chat.pinky.app@gmail.com.
What Pinky is
Pinky is a chat app. You talk with AI characters that you name, and they remember what you tell them so they can carry on the conversation. Replies are written by AI, not by a person.
What we collect
What you give us
- Your email address, to sign you in. We email you a one-time code; there is no password.
- Your confirmation that you are 18 or over, and your agreement to send your messages to the AI services listed below, with the date and the version of the text you agreed to.
- Your messages and the chats, including the replies the AI characters write.
- What the AI characters remember about you: facts from your chats, short summaries of what you talked about, the names you give them and what they call you.
- Reports and feedback. If you report a reply, we receive that reply and your message just before it, with the reason you choose and any comment you add. If you tell us a reply was off, we receive that and any comment you add. If you use Report a problem, we receive what you write, with the time and which AI character you were talking to.
- Emails you send us.
You may choose to tell Pinky sensitive things, such as your health, your feelings or your relationships. We handle them like the rest of your chat: they are used to reply to you and to remember what you said. Please don't share anything you don't want stored.
What the app sends with your requests
- Your phone's time zone, so the AI characters know your local time and day.
- The kind of phone (iPhone or Android) and the app's version, so the server can tell when the app needs an update.
- Your phone's IP address reaches Cloudflare and our server with every request, as with any app that uses the internet. Our server uses it only for a short time, in memory, to limit how many requests one address can make. It is not saved in Pinky's database.
What we keep to run the service
- A sign-in record for each phone you use. The key that keeps each phone signed in is stored only in scrambled form (a hash).
- How much each chat costs to run, so we can apply the daily limits.
- Your age range, if the app store tells us what it is. Where Apple or Google can tell an app whether its user is 18 or over, the app may ask for it. If it says you are under 18 you can't use Pinky, and if it says you are under 13 your account is deleted. We keep only that age range and the date, and don't send it to any AI service.
- Exact copies of each request we send to the AI services, to find and fix faults.
- Technical logs of what the server did: events, error codes and the web addresses the app asked for, which can contain the number of a chat or an account but are written to leave out your messages. We keep them for 14 days.
We don't collect your location, contacts, photos or payment details. The app has no advertising, no analytics tools and no tracking across other apps or websites. Because we don't track you across other apps or websites, nothing changes when your browser sends a "Do Not Track" signal.
If you allow your phone to share diagnostics with app developers, Apple or Google may show us crash reports and app performance figures. These don't include your name, email or chats.
On your phone The app keeps your sign-in on your phone, and text you have typed but not sent. Signing out clears unsent text from that phone.
How we use it
We use your information only to:
- reply to you and keep each conversation going;
- remember what you have told the AI characters, and show it to you on the Memory page;
- look things up on the web when a message needs it;
- handle your reports, support requests and deletion requests;
- check what you write with automatic rules for signs of suicide, self-harm, hurting someone or an eating disorder, and show you a crisis line when one matches (we keep only a yearly count of how many times this happened, with no message text and no account; see our crisis support page);
- keep Pinky safe, apply the daily limits, and find and fix faults.
We do not sell your information, use it for advertising, or send you marketing.
AI services that receive what you write
To write replies, Pinky sends your messages to the AI services below. Before anything is sent, the app asks for your agreement. The AI model that writes the replies is DeepSeek V4.1 Flash, a publicly released model that runs on these services' own servers. DeepSeek, the company that made the model, does not receive your messages or chats: it receives only the search questions in its row below.
| Service | Country | What is sent | How long it is kept |
|---|---|---|---|
| OpenRouter (OpenRouter, Inc.) | United States | Everything in this table except DeepSeek's search passes through OpenRouter, which forwards each request to the service that runs it. | OpenRouter does not store the content of requests or replies; it keeps details such as their size and timing, without the content. |
| Together AI (Together Computer, Inc.), through OpenRouter | United States | Your messages, the chat so far, and what the AI characters remember about you. It plans and writes the replies, writes your Memory page, and writes search questions. | Its published terms say it does not train on its customers' data (Pinky is one) unless they agree, and keeps it only as long as needed for the purposes in its privacy policy. |
| Fireworks AI, through OpenRouter | United States | Your messages, the chat so far and what the AI characters remember, to plan and write a reply, only when a request to Together AI fails and is tried again. | Its published terms say it does not log or store requests to publicly released models such as this one, and does not train on them unless the customer agrees. |
| DeepSeek (Hangzhou DeepSeek AI Co., Ltd.), directly, not through OpenRouter | China (mainland) | Only a short search question, written by AI from your message, when something needs looking up. It can include details you wrote, such as a place you asked about. Not your chat, your account or anything else Pinky keeps about you. | DeepSeek's privacy policy says it processes and stores personal data in mainland China; its search pages do not say where searches run or how long it keeps search questions. Its terms let it use what it receives to improve its services, which may include training its AI models. |
| DeepInfra, through OpenRouter | United States | Your messages, the chat so far, what the AI characters remember about you and short summaries of past chats. It turns them into numbers that help Pinky find what relates to what you are saying now. In the background it also reads the chats to keep the AI characters' memories up to date, and to take out what you asked them to forget. | Its published terms say it does not store what it is sent on disk, deletes it from memory once it has answered, and does not train on it. |
Each service handles your data under its own terms and privacy policy. Where a service's terms allow more than this policy does, the table says so (DeepSeek, above). Deleting your Pinky account does not delete what these services already received; each keeps it as its row says.
Services that host and deliver Pinky
| Service | Country | What it does |
|---|---|---|
| Vultr | Singapore (our server) | Runs Pinky's server and database, where your account, chats and memories are stored, and keeps whole-server backups of it. |
| Cloudflare | United States; its network serves you from a data centre near you | Carries the connection between the app and our server, sends the sign-in code emails, and hosts this website. |
| Google (Gmail) | United States | Our support inbox, when you email us. |
Google Play and the App Store handle your download of the app under their own privacy policies.
Your consent
The first time you open the app, it asks you to confirm that you are 18 or over and to agree to send your messages to the AI services above. Nothing is sent to them before you agree. If you don't agree, Pinky can't reply to you.
To withdraw your consent, delete your account (see below). Pinky can't work without these services, so there is no way to keep using it after withdrawing.
How long we keep it
| What | How long |
|---|---|
| Your account, chats, memories, reports and everything else in your account | Until you delete your account |
| Exact copies of requests sent to the AI services | 14 days, then deleted from our database; copies in our backups go within the backup periods below |
| Our server's own backup copies | At most 18 days |
| Technical logs of what the server did | 14 days; copies in our hosting provider's whole-server backups go within 7 more days |
| Our hosting provider's whole-server backups | At most 7 days |
| Emails you send us | In our support inbox until you ask us to delete them |
Forget, Say goodbye and Clear chat history are not the same as deleting
- Forget, on the Memory page, makes the AI characters stop using that thing. Forgotten things stay in your account, listed under Forgotten things, so you can bring them back.
- Say goodbye takes the AI character off your list. Everything you talked about stays, so you can bring it back from the Memory page.
- Clear chat history starts the chat over: the AI character no longer uses the earlier messages, and those messages stay in our database. It keeps what it learned from them, including facts it notes from the last messages as the chat is cleared; you can forget those on the Memory page.
Forgotten things, AI characters you said goodbye to and cleared messages stay until you delete your account. Only deleting your account removes them.
Deleting your account
You can delete your account in the app at any time: open the More menu, then Account, then Delete account. If you no longer have the app, email us from the address you sign in with. The steps are on our account deletion page.
When you delete your account:
- it is locked at once and can no longer be used;
- your chats, memories and everything else in it are deleted from our server, usually the same day;
- everything on our server and in its backups is gone within 30 days, except what is listed below.
After that we keep only these, and none of them contains your chats:
- a note that an account with a given number was deleted, and when, so a backup can't bring it back;
- records of actions on the account, with numbers and codes only;
- server log lines that name the deleted account's number, with no chats in them, for 14 days;
- daily spending totals, linked to no account;
- for 30 days, scrambled copies of your old sign-in keys, so a phone still signed in learns the account is gone, and copies of them can stay in our backups for up to 25 more days after that;
- if we invited you to test Pinky, your email on our invite list, until you ask us to remove it;
- if you tested Pinky on our test website, your email on its access list at Cloudflare, until you ask us to remove it;
- emails you sent us, in our support inbox, until you ask us to delete them.
Deleted data can't be brought back. If you sign up again later with the same email, you get a new, empty account.
Who can see your data
The person who runs Pinky can open an account's data in a private admin tool. We use it only to deal with a report, a support or deletion request, a safety problem or a fault. When you report a reply, we see that reply and your message just before it.
How we protect it
- Connections between the app and our server are encrypted (HTTPS).
- Sign-in uses a one-time email code, so there is no password to steal. Sign-in keys are stored only as hashes.
- Our server accepts administrator logins only with cryptographic keys, never with passwords.
No system is perfectly secure. If something goes wrong that puts your information at risk, we will tell you as the law requires.
Your rights
Wherever you live, you can:
- see your chats and what the AI characters remember in the app, and correct or forget memories on the Memory page;
- ask us for a copy of the other information we hold about you, or to correct it;
- delete your account, or ask us to delete it.
Email chat.pinky.app@gmail.com from the address you sign in with. We answer in 30 days at most.
If you are not happy with our answer, you can complain to the privacy regulator where you live, such as the Office of the Australian Information Commissioner (oaic.gov.au) or the Privacy Commissioner for Personal Data, Hong Kong (pcpd.org.hk).
Hong Kong: personal information collection statement
- Purpose. We collect your information for the purposes in How we use it, above.
- Is it required? Your email address is needed to sign in, and your messages are needed for Pinky to reply. Without them you can't use Pinky. Everything else in your chats is up to you.
- Who receives it. The services listed in this policy, for the purposes stated next to each one. Some of them are outside Hong Kong: in the United States, in mainland China (DeepSeek's search) and in Singapore (our server).
- Access and correction. You may ask to see or correct the personal data we hold about you. Requests are handled by Qiuyuan Zhu at chat.pinky.app@gmail.com. We answer in 30 days at most.
- Direct marketing. We don't use your personal data for direct marketing.
Australia: overseas recipients
We disclose your personal information to recipients outside Australia: the AI services and Cloudflare in the United States, DeepSeek's search in mainland China, and our server with Vultr in Singapore, as listed above. Google's support inbox is in the United States. If you have a complaint, email us first; if you are not satisfied, you can contact the Office of the Australian Information Commissioner.
Children
Pinky is only for people 18 or over. It is not meant for children, and we don't knowingly collect information from anyone under 18. If you think someone under 18 is using Pinky, email us and we will look into it.
Changes to this policy
When we change this policy, we post the new version here with a new effective date. If a change is significant, we will tell you in the app or by email before it takes effect.