Privacy Policy

1. Who We Are

Furcrush is an independent adult AI companion platform operated from Portugal. We are the data controller for the personal data described in this policy.

Full legal entity details and physical contact information are not published on this page to protect the operator from spam and abuse, but are available on written request to any competent supervisory authority. To contact us about privacy or data requests, use the dedicated support channel linked from the website footer.

Scope of this Policy.Capitalised terms used here ("Website", "Bot(s)", "the Service", "Interactive actions") have the meanings defined in Section 3 of our Terms of Service. In short: the Website (furcrush.com) is a static marketing and legal presence; the Service — the AI companion experience — is provided exclusively by the Bot(s) on the Telegram platform. Personal data in the sense of GDPR is processed by us almost entirely in connection with the Service; the Website collects only anonymous traffic analytics and a local-storage age-gate flag on the visitor's own device.

1a. Legal Basis for Processing

We process your personal data under the following GDPR Article 6 grounds:

• Contractual necessity (Art. 6(1)(b)) — processing chat messages, memory, and subscription data is necessary to provide the AI companion service you signed up for.
• Legal obligation (Art. 6(1)(c)) — content safety screening to prevent illegal material, tax and billing record retention.
• Legitimate interests (Art. 6(1)(f)) — abuse prevention and service security. You can object to processing based on legitimate interests at any time (see Section 8).
• Explicit consent (Art. 9(2)(a))— because chat content may include sensitive personal data (Art. 9) introduced by you during free-form conversation with the Bot(s), you provide explicit consent to processing such data via the 18+ age-gate step inside the Bot's onboarding flow. The Website itself does not collect or process any Art. 9 data.

2. Data We Collect

Data you provide:

• Telegram user ID — account identification
• Display name — personalization (per character)
• Language preference — localization (per character)
• Chat messages — AI response generation
• Subscription status — service delivery
• PayPal payment details, only if you choose to pay via PayPal — the name, PayPal email address, amount, and transaction ID that PayPal shares with us as the payee, plus the Telegram conversation you start with us to arrange the payment; we never receive card or bank details
• Photos you send to the bot (Premium only) — an AI vision model generates a short text description for the chat context; the original image is not written to our database

Data generated by the service:

• Conversation summaries — memory/context for AI
• Memory facts (embeddings) — long-term AI memory
• Achievement progress — gamification
• Content safety flags + violation counters — moderation
• Connection metadata (IP address, user agent) may be processed transiently by our hosting and CDN providers for fraud prevention and service delivery; we do not persist this data in our own database

FurCrush Creator:

FurCrush Creator is a separate bot of the platform — an image generator and an open roleplay chat. It is not one of our characters and keeps its own records, apart from your data with the characters:

• Settings — language, picture format, your own negative prompt, chat style, and the last prompt you drew
• The time you confirmed you are 18+ and accepted the Terms and this Policy (if you tap "I'm under 18", nothing is stored)
• The time Creator first showed you its start screen, and the time you last used it
• Chat messages with Creator, kept separately for each role
• A running summary of each role's conversation (and of the one with Creator itself) once it grows longer than the latest messages the bot sees — written automatically by an AI model from that conversation, so a long scene keeps its thread
• Your saved roles (the name and description of each character the bot can play for you, and which one it plays now) and your persona (the short text describing you in its scenes)
• Generation records — the prompt and negative prompt as drawn, picture format and size, seed, and the file name of the original on our generation server; for a picture from the step-by-step builder, also the buttons you picked, so you can change the setup and draw it again; for a prompt our safety check refused, only the safety category, the time, the kind of request (your prompt, a random picture, a builder picture, or another seed), the picture format, and whether our filter had adjusted the prompt — never the text
• A counter of the free pictures you have used in Creator

Before a prompt, a preset, a helper text, a role card, a persona, or a conversation summary is stored or drawn, an automated filter removes words that describe a minor. Pictures reach you in Telegram as a re-encoded JPEG with no embedded metadata; the original files stay on our own generation server (see Sections 5 and 6).

PawCreator:

PawCreator is FurCrush Creator's editor app, opened inside Telegram from Creator's buttons, and part of Premium. On top of Creator's records above, it keeps:

• The time you first opened PawCreator while Premium — after Premium ends, it is what keeps your access to what you made there
• Your presets — the name, the prompt and negative prompt, the picture format and the LoRAs (with their strengths) of each, and the order you put them in
• Your own versions of the two helper texts (the quality words and the standard negative prompt), if you changed them
• For a picture drawn in PawCreator, its generation settings (steps, CFG, scheduler and the LoRAs with their strengths — and, for a picture drawn over another of your pictures or over your upload, which one, how much it could change and which tool redrew it: a repaint, or a fix of the eyes, face or hands) in the generation record
• Your PawCreator List: up to 50 pictures per account — every picture drawn in PawCreator (a re-encoded JPEG with its settings), every picture you upload, every drawing you save and every copy that carries a mask — on our own generation server, so the app can show them and you can edit them. When the List is full, the oldest picture makes room. Each one is deleted at once by its 🗑 in Create → List, and removed automatically after 72 hours
• A picture you upload yourself is re-drawn into a new file without any of the original's metadata (camera, location, embedded text) before it joins your List
• When an upload is refused by the safety check: a record of the refusal with the reason category, the picture format and the time — never the picture
• A mask — the area you painted over, kept with its picture as a black-and-white outline only (no part of the picture) — goes with that picture: it is deleted with it and removed automatically after 72 hours. A drawing you make in PawCreator stays on your device until you choose to use it; it is then handled exactly like an upload

Before an uploaded picture is kept or used, an AI vision model (run through our AI provider, see Section 5) checks it: pictures that show anyone who looks under 18, and photographs of real people, are refused. The model receives the picture only — no user identifier — and its one-sentence description of the picture is checked by our safety classifier and then discarded, never stored.

PawCreator knows who you are from the data Telegram signs and passes to the app when you open it (your Telegram user ID and basic profile: name, username, language). It checks that signature on every request and does not store that data, and its server keeps no access log of your requests.

Website data:

• We use Cloudflare Web Analytics (privacy-friendly, anonymous)
• No advertising cookies or tracking pixels
• See our Cookie Policy

3. How We Use Your Data

• Generating AI responses to your messages
• Generating images from your prompts
• Maintaining conversation memory and context
• Content moderation and safety enforcement
• Service notifications (changelog updates)
• Complying with legal obligations

4. How We Do NOT Use Your Data

• We do NOT sell your data to third parties
• We do NOT share conversations with advertisers
• We do NOT read your private conversations
• We do NOT use your data for targeted advertising

5. Sub-processors (GDPR Art. 28)

We use a small number of named sub-processors to operate the service. Each processes your data under a Data Processing Agreement (DPA) and is contractually bound to the same confidentiality and security standards we apply to ourselves. We send each processor only the data strictly needed for its function.

Lawful disclosure requests: we disclose data only when compelled by a lawful binding request from a competent authority, and only what is specifically required by that request.

Non-EU transfers: where a processor is located outside the EU/EEA, transfers are protected by Standard Contractual Clauses (SCCs) or an applicable adequacy decision (e.g. the EU-US Data Privacy Framework).

6. Data Retention

• Active account data — duration of account
• Chat messages — until the user erases them (per character) or the account is deleted
• FurCrush Creator chat, conversation summaries, role cards, persona, settings, and generation records — until you delete them with Creator's commands (see Section 7) or the account is erased
• PawCreator presets and your helper texts — until you delete them in PawCreator or the account is erased; the pictures of your PawCreator List, with their masks — removed automatically after 72 hours
• Original picture files on our generation server — kept with no fixed deletion schedule, for the operator's quality and safety control; no bot command removes them. Ask via the support channel and we delete the files made for your account
• Messages that trigger a safety flag — not stored in our conversation history; our moderation layer drops them before any write to the database
• Payment records (Telegram Stars charge details; PayPal transaction details) — for as long as tax and accounting law requires
• Post-ban conversation history — retained so that automated bans can be reviewed under GDPR Art. 22 if you appeal. Banned users can request full cross-character erasure at any time via the /erase command (the dedicated banned-account escape hatch) or the support channel
• Banned user records — indefinite (Telegram user ID, ban reason, violation counters, and a metadata-only violation log with category / direction / timestamp — never the message text) to prevent re-registration and to respond to lawful binding requests from competent authorities

7. Data Erasure

Per-character erasure (/reset command). Each of our characters is an independent relationship. The /resetcommand (or the equivalent "Erase Memory" button in that character's /set menu) deletes your conversation history, memories, summaries, and identity with that one character only. Your data with any other character is left intact. Achievements are preserved by default and have a separate "Reset achievements" button inside the achievements screen.

Full-account erasure. To erase everything across every character at once, you can either run /reset on each bot you have used, or contact the support channel linked from the website footer with a short request. We will process support requests within 30 days as required by GDPR Art. 12(3). We retain only the minimum ban metadata (block status, ban reason, violation counters) as permitted under Art. 17(3)(b) and (e).

Retention after a ban. When an account is permanently banned for policy violations, we do not automatically purge the prior conversation history. Bans are automated and you have the right under GDPR Art. 22 to contest them; keeping the history allows a human reviewer to examine the context of the decision during an appeal. Banned users can still request full cross-character erasure at any time with the /erase command — it is the dedicated escape hatch for banned accounts so you can exercise your right of erasure (Art. 17). The regular per-character /reset command is silently disabled while a ban is active. We retain only the minimum ban metadata listed in Section 6.

FurCrush Creator. A character's /resetdoes not touch Creator's records, and Creator's /resetdoes not touch the characters'. Inside Creator, /reset deletes the conversation with the active role (or with Creator itself when no role is set) and its summary; deleting a role in /roles or /role deletes it together with its conversation and summary; clearing the persona in /personadeletes it; and the "Generation history" button in Creator's /setmenu deletes your generation records and the last prompt. In PawCreator's Library → Recent, 🗑 deletes one generation record and "Clear all" does what that button does. In PawCreator, 🗑 deletes a preset and "Reset to default" brings a helper text back to ours; Creator's /resetand its "Generation history" button do not touch presets. For a banned account, /erasein any of our bots also deletes your Creator chat, conversation summaries, role cards, persona, generation records, settings, PawCreator presets and helper texts, the time you first opened PawCreator, and the start-screen and last-use times. Each picture of your PawCreator List — drawn, uploaded or a mask copy — is deleted at once, with its mask, by its 🗑 in PawCreator's Create → List, and otherwise removed automatically after 72 hours. Your language, the 18+ confirmation record, and the count of free Creator pictures used are kept, so that erasure cannot be used to obtain more free pictures. Original picture files on our generation server are not removed by any command; to have them deleted, or for a full erasure without a ban, contact the support channel.

8. Your Rights

The rights below are granted to residents of the European Union, the European Economic Area, and the United Kingdom under GDPR (and UK GDPR for UK residents). If you reside elsewhere, your data-protection rights are governed by the laws of your jurisdiction.

(EU/EEA/UK residents.) As a data subject, you have the right to:

• Access (Art. 15) — request a copy of your personal data
• Rectification (Art. 16) — correct inaccurate data
• Erasure (Art. 17) — delete your data ("right to be forgotten")
• Restriction (Art. 18) — restrict processing
• Portability (Art. 20) — receive data in machine-readable format
• Object (Art. 21) — object to processing of your personal data that is based on our legitimate interests (such as fraud prevention via the violation log, or internal service analytics). On objection, we will either stop the specific processing or demonstrate compelling legitimate grounds that override your interests. This right does NOT apply to processing that is necessary to deliver the service you requested (chat handling, account state, payment records) — for those, your remedy is account erasure via the bot's /erase command (Art. 17), which ends your use of the Service.
• Withdraw consent — at any time, without affecting processing carried out before the withdrawal
• Human review of automated decisions (Art. 22) — content safety bans are issued automatically when the violation threshold is reached. You may appeal any such decision and have it reviewed by the operator (a human) via the support channel.

To exercise any of these rights, contact us via the support channel linked from the website footer. We respond within 30 days as required by GDPR Art. 12(3).

Right to lodge a complaint (Art. 77, EU/EEA residents)

If you reside in the EU or EEA and believe your data rights have been violated, you have the right to lodge a complaint with a supervisory authority in your member state of residence, place of work, or the place of the alleged infringement. In Portugal the competent authority is the Comissão Nacional de Protecção de Dados (CNPD), www.cnpd.pt. A list of all EU authorities is available at edpb.europa.eu.

9. Data Security

• In transit: TLS 1.2+ for every connection between the bot, the website, the database, and all sub-processors
• At rest: AES-256 encryption on the managed Postgres instance; static image and audio assets (galleries, prerecorded voice clips) stored in Cloudflare R2
• Access control: the database is reachable only by the bot runtime over an authenticated, SSL-enforced connection
• Moderation: content-safety classification is automated; no human routinely reads private conversations
• Operator access: the platform operator has admin-level database access strictly for service operation (debugging, troubleshooting, processing data-rights requests, and human review of automated decisions under GDPR Art. 22). Such access is not used for reading private conversations outside of those specific, legally-grounded purposes

10. Children's Privacy

Our service is strictly for users 18+. We do not knowingly collect data from anyone under 18. Underage accounts are immediately deleted upon discovery.

11. Automated Decision-Making

Our content safety layer automatically flags content that breaks the Content Policy. Only one content path can end in a ban, and it is within the scope of GDPR Art. 22:

• Child-safety (CSAM) bans.Each child-safety detection in a chat or in a character's image prompt issues a warning and increments a counter; the fourth detection results in an immediate permanent ban. Because this decision has significant effects on the user and is taken solely by automated means, it falls squarely within GDPR Art. 22.
• Other flagged content carries no penalty. It may be refused or withheld, but it issues no warning, increments no counter, writes no violation record and never leads to a ban.

You have the right to obtain human intervention on the part of the controller, to express your point of view, and to contest any such decision. Appeals are reviewed by the operator personally within 14 days. Contact the support channel linked from the footer to initiate an appeal; your account remains in its post-ban state during the review.

12. Changes

We may update this policy from time to time. Material changes will be notified via in-app or in-website announcement before they take effect. The "last updated" date at the top of this page reflects the most recent revision.