Privacy Policy

Last updated: 7 October 2026

Key points

• Dilbar.AI is run by Friendly Characters Limited, a UK company. We are responsible for your personal data.
• To give you a companion who talks with you and remembers you, we process what you say to your companions — in text chats, voice notes and voice calls — and we create companion memory from those conversations. When we start making memory from text chats and voice notes as well, we'll tell you in the app first.
• Replies, voices, transcripts and memory are produced with Google's Gemini AI. Google processes this for us and does not use it to train its models, but keeps it for up to 55 days to detect misuse.
• In voice calls, what you say is sent to Google to be turned into text, and your companion's spoken replies may be saved so you can play them again (section 5).
• When you install Dilbar from one of our links, we record which link (for example which video) brought you, so we know which of our posts work. We don't use it for advertising.
• We don't sell your data, we don't show ads, and we don't use your conversations to train AI models.
• Our database and servers are in India (Mumbai). Some Google services we use work in the US or elsewhere.
• You can delete your account any time in the app (Settings → Delete my account). You have 30 days to change your mind; after that we delete your data, apart from a few records the law requires us to keep.
• Dilbar.AI is for adults aged 18 and over.
• Questions or requests: privacy@dilbar.ai.

1. Who we are

Dilbar.AI ("Dilbar", "we", "us") is provided by Friendly Characters Limited, a private limited company registered in England and Wales (company number 17128418). Our registered office is 253 Hook Road, Chessington, KT9 1EQ, United Kingdom.

We decide how and why your personal data is used, so we are the controller under UK data protection law (the UK GDPR and the Data Protection Act 2018) and the Data Fiduciary under India's Digital Personal Data Protection Act 2023. We are registered with the UK Information Commissioner's Office (ICO) under registration number ZC137450.

If you have a question about how we use your personal data, contact our data protection lead at privacy@dilbar.ai.

This policy covers the Dilbar.AI app and our website, dilbar.ai. The app is currently offered in India. We plan to offer it in the United Kingdom later.

2. What we collect

2.1 Information you give us

• Sign-in details.
  • Phone sign-in: we collect your phone number. We send the one-time code by SMS through Google Firebase.
  • Google sign-in: Google shares your email address, name and profile photo link with us.
  • We use these to create and secure your account, and to confirm it's really you before we delete your account.
• Your age and agreement. Right after you sign in, you confirm that you're 18 or over and that you accept our Terms and this policy. We save that confirmation with the date, the versions you accepted, the language you chose and the app version.
• Your nickname (optional) — what you'd like companions to call you — and any custom names you give your companions.
• Your conversations:
  • the messages you type;
  • your voice notes — we send the recording to our AI provider to understand it and keep the written transcript, not the recording;
  • your voice during voice calls, which is sent to Google while you speak, to be understood and turned into text (section 5).
• Your choices in the app — for example notification settings, favourite companions and gifts you send.
• Purchases.
  • When you buy a pack or subscription through Google Play, we receive and keep a record of it: the product, Google's order number and purchase token, dates, status and any refund.
  • We also record your confirmation that you want immediate access and understand how this affects your right to cancel.
  • We never receive or store your card or bank details.
• Welcome gift. New and existing users who sign in with a phone number or with Google can claim one welcome gift (free voice replies, for voice notes or hands-free calls, valid for 7 days). To keep it to one per person and one per device, we store one-way codes made from your phone number or Google email address, and from your device, with a secret key (section 9).
• Support messages, reports and requests.
  • What you send when you contact support.
  • A report about a companion's message. We keep up to 500 characters of the reported message with the report.
  • Refund requests and requests for a copy of your data.
  • For refund and data requests, we also store your email address if we have one.

2.2 Information we create when you use Dilbar

• Companion memory — short notes about you and your conversations, created by AI (section 4).
• Diary entries — short weekly diary entries written from your companion's point of view, based on your recent conversations and memory.
• Transcripts of voice notes and voice calls (section 5).
• Relationship and activity information — for example your relationship level and streaks, topics and mood trends in your conversations, and activities you've played.
• Usage and allowance records — records of each call (date, length, which AI model was used and technical usage), how many messages and voice replies you've used, and your packs and subscription status.
• Safety and wellbeing signals (section 6) — for example whether a voice note showed signs that you might be in crisis, or whether your usage has been very high for several days.

2.3 Information collected automatically

• Account ID — the unique identifier Firebase creates for your account. It is not your name, but because it's linked to your account it is personal data.
• Device and app information — app version, device model, operating system, language and time zone.
• Device codes for fraud prevention. We make one-way codes from identifiers on your phone and store only the codes, never the identifiers. We use them:
  • to stop the welcome gift being claimed more than once on the same phone;
  • to prevent refund abuse.
• Notification token — if you allow notifications, a token that lets us send them to your phone.
• Where you installed from. If you install Dilbar through one of our links, Google Play tells the app which link it was: the campaign, the post or video, and where the link was placed. We save this with your account after you sign in, together with when you first opened the app, which language you chose and whether you listened to your companion's greeting. We use it to see which of our posts bring people who enjoy Dilbar.
• App analytics.
  • Google Analytics for Firebase collects how the app is used: app opens, screens viewed, session length and in-app purchases, plus a few steps we mark ourselves: choosing a language, hearing the greeting, signing up, confirming your age, your first message and first voice note, seeing a paywall, and a purchase going through.
  • It also collects an app-instance identifier, device information and your approximate location (country or city), which Google works out from your IP address. From version 1.2.1 the app doesn't collect your device's advertising ID.
  • We don't link analytics to your name, phone number, email or account ID, and we don't use it for advertising.
• Crash reports. Firebase Crashlytics collects technical details when the app crashes: the device, operating system, the app's state and a crash-reporting ID.
• Server logs. Our servers keep technical logs, including your IP address, account ID and details of requests, to keep the service secure and fix problems.

2.4 Sensitive information

Dilbar is a companion app, so you may choose to tell your companions about sensitive things. That might be your physical or mental health, your sex life or sexual orientation, your religion or beliefs, or your ethnic background. The law gives this "special category" information extra protection.

You don't have to share it, and Dilbar works without it. If you do share it:

• it is processed as part of your conversation;
• it may be saved in companion memory (section 4);
• we use it only to provide Dilbar to you and to keep you safe (section 6);
• we never use it for advertising, and we never sell it.

We process it only with your explicit consent, which you give when you choose to share it in a conversation. You can withdraw it at any time by deleting the conversation's memory (email privacy@dilbar.ai) or your account.

2.5 What we don't collect

We don't access your contacts, photos, files, camera or precise location. The app only asks for microphone access (for voice features) and permission to send notifications.

3. How we use your information, and our legal reasons

Legitimate interests. Where we rely on these, we have weighed our interests against your rights, and you can object (section 11).

Consent under the DPDP Act. When you sign up, you consent to us processing your personal data as described here. You can withdraw consent at any time by deleting your account or emailing privacy@dilbar.ai; withdrawing is as easy as giving it. Withdrawal doesn't affect processing that happened before, but we can't provide Dilbar without the core processing above.

We do not:

• sell your personal data;
• share it with advertisers or show you ads;
• use your conversations to train AI models.

4. Companion memory

So your companion can remember you between conversations, we use AI to make short notes from your conversations. These notes are your companion memory.

What memory contains:

• facts you've shared, such as your name, where you live, your work or studies, family, likes and dislikes, and important events;
• how you've been feeling;
• things you and your companion said you'd do;
• a short summary of each conversation;
• how your relationship with that companion is developing.

When memory is created:

• Voice calls: when a call ends, from what was said during that call.
• Text chats and voice notes — once we switch this on (we'll tell you in the app first):
  • once a conversation has been quiet for about 30 minutes;
  • in very long conversations, roughly every 40 messages;
  • very short chats (fewer than two messages from you) are skipped.

How it's made: our servers send the recent conversation to Google's Gemini AI, which writes the notes (section 5). Nobody at Dilbar writes or reads them as a matter of routine (section 13).

How it's used:

• A shortened version of your memory is included in the instructions sent to Gemini each time your companion replies, so the companion can refer back to things you've told it.
• Memory also helps write your weekly diary entries.
• Memory is kept separately for each companion.

Sensitive details: if you shared sensitive information (section 2.4), it may be included in memory.

How long it's kept:

• Until you delete your account.
• We limit how much is kept: older conversation summaries are replaced by newer ones, and the number of saved facts per companion is capped.

Your choices:

• You can ask us to delete your companion memory without deleting your account by emailing privacy@dilbar.ai.
• Deleting your account deletes all memory (section 10).

We never use memory to train AI models or for advertising.

5. How we use AI, including voice

Google Gemini. Companion replies, voices, transcripts, memory notes and diary entries are produced by Google's Gemini AI models, through Google's Gemini API. Google acts as our service provider under its terms for paid API services.

What we send to Gemini:

• your message, voice note, or what you say during a call (as audio);
• recent messages from the same conversation;
• your companion's character instructions;
• information that helps your companion reply personally: your nickname, language, relationship details and a shortened version of your companion memory.

What Google does with it (under Google's current Gemini API terms for paid services):

• Google does not use it to train or improve its products.
• Google keeps prompts and responses for up to 55 days to detect abuse and misuse of its service. Authorised Google staff may review content that its systems flag.
• Google may process data in any country where it has facilities.

Voice calls. Calls on Dilbar are hands-free: you speak, your companion answers, turn by turn. What you say is sent, through our servers, to Google's Gemini service, which turns your speech into text so your companion can understand and answer you. We don't record or keep the audio of what you say.

• How a call works:
  • Your phone sends audio only while you're speaking. Gemini turns each thing you say into text; the audio itself isn't saved. That text, and your companion's reply, are saved in your chat with that companion, like text messages.
  • When the call ends we make companion memory from it (section 4), leaving out any turn where we detected signs of crisis.
  • Your companion's spoken replies are saved as audio files so you can play them again. They're kept until you delete your account, and deleted then.
• For every call we keep a record that it happened (date, length and technical details), and we use the conversation to create companion memory (section 4).

Voice notes.

• Your recording is sent to Gemini so it can understand what you said. We don't keep the recording; we keep the written transcript as part of your chat.
• The companion's spoken reply is generated by Gemini and stored so you can play it again or share it. It is deleted when you delete your account.
• Voice notes you sent in older versions of the app may still be stored; they are deleted when you delete your account.

Other AI features. Gift reactions and diary entries are also written by Gemini, using the same kinds of information. During hands-free calls, Gemini also checks your words for signs of crisis before your companion replies (section 6).

AI can be wrong. Companions are fictional AI characters. What they say can be inaccurate, and it isn't professional advice.

6. Safety, wellbeing and fraud checks

Some checks run automatically:

• Crisis support. We check messages, voice notes and calls (including each turn of a hands-free call) for words and signs that you might be in crisis (for example thoughts of self-harm), so your companion can respond with care and show you helpline information. For voice notes, we store whether this happened alongside the message.
• Wellbeing. If your usage is very high for several days in a row (currently more than 4 hours a day for a week), we note this on your account, and your companion may gently talk about balance and taking breaks. It doesn't limit or close your account.
• Fraud and abuse prevention. We use rate limits, one-way codes derived from your phone number, email and device, and purchase and refund history to stop the free welcome gift being claimed more than once and to prevent refund abuse. If we detect abuse, you may not be able to buy a particular offer.

None of these checks makes decisions with legal or similarly significant effects on you. If you think a check got something wrong, contact privacy@dilbar.ai and a person will review it.

7. Who we share it with

We don't sell your personal data and we don't share it with advertisers.

Service providers. These work for us under contracts that require them to protect your data and use it only on our instructions:

Other organisations that use your data under their own privacy policies:

• Google Play processes your payments. We send Google Play a reference that links each purchase to your Dilbar account, so we can give you what you bought and prevent fraud.
• Google, if you choose Google sign-in, shares your name, email and profile photo link with us.

Other disclosures.

• We may disclose information where the law requires it, or to protect the safety, rights or property of our users, the public or us.
• If our business is sold or restructured, your data may transfer to the new owner, who must respect this policy.

8. International transfers

• Our main database, file storage and servers are in India (Google Cloud, Mumbai).
• Firebase Authentication, Google Analytics and Crashlytics process data in the United States.
• Google's Gemini API may process data in any country where Google operates.

If you're in the UK:

• When your data goes outside the UK, it is protected by Google's data processing terms. These include the UK's International Data Transfer Addendum to the European Commission's standard contractual clauses.
• For the United States, Google also relies on its certification under the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge").
• You can ask us for more information about these safeguards.

If you're in India: we may process your data outside India, except in any country the Government of India restricts.

9. How long we keep it

10. Deleting your account and your data

In the app: go to Settings → Delete my account and confirm it's you, with Google or an SMS code.

30 days to change your mind.

• Your account isn't deleted straight away. For 30 days you can sign back in and choose Restore account, and everything will be as you left it.
• After 30 days we permanently delete your account and personal data. This usually finishes within 1–2 days after the 30 days end.

What we delete:

• your profile and sign-in account;
• all conversations, transcripts and companion voice replies;
• companion memory and diary entries;
• relationship information, favourites and gifts;
• usage records;
• support tickets and requests;
• files linked to your account.

What we keep, unlinked from your account (section 9):

• purchase, subscription and purchase-consent records, which the law requires;
• your sign-up confirmations (that you're 18 or over, and the terms you accepted), as evidence;
• fraud-prevention codes, so free offers can't be claimed again;
• a record that the deletion was carried out.

Disputes. If you have an open refund or payment dispute, we may delay deletion until it's resolved, but by no more than 30 days.

Confirmation email. If your account has a verified email address (for example because you use Google sign-in), we'll email you from privacy@dilbar.ai when deletion is complete.

If you can't use the app: email privacy@dilbar.ai with the subject "Account Deletion Request" and tell us the phone number or email address you sign in with. We'll check it's your account, confirm within 7 business days, and the same 30-day period applies.

Subscriptions. Deleting your account doesn't cancel a Google Play subscription. Cancel it in Google Play first. Google Play keeps its own purchase records, which we can't delete.

Deleting some data but keeping your account. Email privacy@dilbar.ai, for example to delete your companion memory.

Data on your phone. Uninstall the app, or clear its storage in your phone's settings, to remove data the app has saved on your device.

11. Your rights

Everyone. You can ask us to:

• give you a copy of your personal data;
• correct it;
• delete it;
• tell you how we use it and who we share it with.

In the UK (UK GDPR) you also have the right to:

• object to processing based on legitimate interests;
• restrict processing;
• data portability — receive the data you gave us in a machine-readable format;
• withdraw consent at any time, without affecting earlier processing;
• not be subject to decisions based solely on automated processing that have legal or similarly significant effects;
• complain to the Information Commissioner's Office (section 18).

In India (DPDP Act) you also have the right to:

• get a summary of your personal data and how we process it, and the identities of those we share it with (section 7);
• correct, complete, update or erase your data;
• use our grievance process, and then complain to the Data Protection Board of India;
• nominate someone to exercise your rights if you die or become unable to act.

How to ask:

• Email privacy@dilbar.ai from the address you sign in with, or tell us your sign-in phone number.
• We may ask you to confirm it's you, for example with an SMS code or by signing in to the app.
• Signed-in users can also use Settings → Download my data (after you confirm it's you, the app gives you a copy straight away; once a day) and Settings → Delete my account.
• It's free.

How fast we answer:

• UK: within one month. We may extend this by up to two more months for complex requests, and we'll tell you if we do.
• India: within 30 days, and never more than 90 days.

12. Security

• Everything the app sends or receives is encrypted in transit (HTTPS / TLS).
• Our data is encrypted at rest by Google.
• Database security rules mean each account can only reach its own data.
• Only the founder and authorised staff, using 2-step verification, can access our production systems.
• If a data breach puts you at risk, we'll tell you and the relevant regulators (for example the ICO within 72 hours, and the Data Protection Board of India) as the law requires.

13. Who at Dilbar can see your conversations

We don't read your conversations as a matter of routine. A small number of authorised people at Friendly Characters may look at specific conversations or memory only:

• when you ask us to, for example in a support request or a report you send;
• to investigate a safety or abuse concern or a report;
• to fix a technical problem;
• where the law requires it.

When we do, we look at the minimum needed. We never use your conversations for marketing.

14. Children

Dilbar.AI is only for adults aged 18 and over.

• You must confirm you're 18 or over, right after you sign in and before you can chat. Before sign-in, the app only shows a language choice and a short greeting.
• We don't knowingly collect data from anyone under 18.
• If we learn that a user is under 18, we'll close their account and delete their data.
• If you think a child is using Dilbar, email privacy@dilbar.ai.

15. Notifications and emails

• We send push notifications only if you allow them, for example when your companion writes a diary entry. You can turn them off in the app or in your phone's settings.
• We don't send marketing emails.
• We send service emails only when needed, for example to confirm your account has been deleted.

16. Our website

• dilbar.ai doesn't use cookies, analytics or advertising trackers.
• Our hosting provider, Vercel, keeps standard technical logs (such as IP address and browser type) for security, for a short period (Vercel's standard log retention).
• If you email us using a link on the site, we handle your email as described above.

17. Changes to this policy

• When we update this policy, we change the "last updated" date at the top.
• For important changes, we'll tell you in the app before the change takes effect, for example when we start creating companion memory from text chats.

18. Contact and complaints

Contact:

• Email privacy@dilbar.ai.
• Post: Friendly Characters Limited, 253 Hook Road, Chessington, KT9 1EQ, United Kingdom.
• India: our Grievance Officer is Anil Kumar Mullagiri, privacy@dilbar.ai.

Complaints:

• Tell us first: email privacy@dilbar.ai with "Complaint" in the subject. We'll acknowledge it within 30 days, keep you updated, and tell you the outcome.
• UK: you can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk, or 0303 123 1113. Our ICO registration number is ZC137450 (Friendly Characters Limited).
• India: once you've used our grievance process, you can complain to the Data Protection Board of India.