Privacy Policy

Last updated: September 2026

1. Introduction

Dochi AI ("we", "us") is operated by DochiAi. We value your privacy and are committed to protecting your personal data. This policy explains what we collect, how we use it, and your choices when you use our website and services.

2. Information We Collect

• Account: your email and basic profile when you sign in with Google (or as an anonymous guest).
• Content you create: characters, coworkers, projects, uploaded images/files, chat messages, reviews, and the settings and instructions you give each AI model.
• Usage: basic settings (theme, language, workspace mode) and credit/usage counters.
• Date of birth: you give your birthday when you set up your account. It decides which features and AI characters you can see — Dochi AI is for ages 13 and up, and the 18+ mode is only for adults. We keep a record of your age on our servers, including when it changed and whether you, a parent or our support team set it, so that the age rules cannot be got around. Your birthday is never shown to other people.
• Age signal from Google Play (Android app): the app may ask Google Play for the age range of your account (for example "under 18" or "18 or older"). We keep only that range, and use it only to keep people under 18 out of the 18+ mode.
• Parental controls (optional): if a teenager invites a parent, we store the parent's email address, the link between the two accounts, and one-time codes (stored scrambled, and valid for minutes). For the teenager's account we then count activity for the parent's weekly summary: messages sent, minutes spent chatting, active days, chats started over or deleted, the AI characters used most, how many replies the safety filter stopped, how many messages mentioned self-harm, and how many times the teenager tried to reach content for adults (for example opening an AI character made for adults, or asking an AI character for sexual content). When that happens, the parent may also get one phone notification a day saying so. The text of the chats is never stored for this and never shared with the parent. Daily counts are deleted after 35 days, and parental controls end on the teenager's 18th birthday.
• Device identifier (parental controls only): for an account with parental controls, the app sends a one-way scrambled (hashed) form of the phone's Android ID, so we can warn the parent when a different account signs in on that phone. The parent is never told which account it was. This record is deleted after 90 days.
• Notifications (Android app): a device token, so we can send the notifications you have chosen.
• Connected AI access (optional): if you connect your own OpenRouter account, the access key it issues — stored encrypted, never displayed or shared. See section 4.
• Advertising ID (Android app): the Dochi AI Android app includes Google AdMob so you can watch an optional rewarded advert to earn Sparks. AdMob collects your device's Advertising ID and shares it with Google to serve and measure that advert and to detect invalid traffic. This is the only advertising identifier the app uses, and Google is the only third party that receives it. You can reset or delete the Advertising ID at any time in Android Settings → Privacy → Ads; the app keeps working without it.
• Microphone (Android app, voice calls only): starting a voice call asks for microphone access so your speech can be turned into text. The audio never reaches our servers and is never stored. Speech recognition is performed by your device's own Android speech service; Dochi AI receives only the resulting text, which is then treated exactly like a typed message. The microphone is requested only when you start a call, never in the background, and never at app launch.
• Purchases: subscriptions and credit packs are processed by Google Play (via RevenueCat). We receive a record that a purchase completed — never your card details.
• App usage and error reports (Android app, adults only): for accounts aged 18 or over with no parent connected, the app sends Google Firebase Analytics a count of the screens and features used (for example "a chat was opened" or "a companion was published"), and sends Firebase Crashlytics the technical details of an error or crash (the app version, the phone model and Android version, and the line of code that failed). No chat text, names, AI characters, email address or advertising ID is included. Nothing is sent for anyone under 18, for accounts with a parent connected, or for guests. You can switch it off at any time in Settings → Privacy settings → Help improve the app.
• App and device check (Android app): at a few moments (a new account, once a day, before a rewarded video, and when the 18+ mode is used) the app asks Google Play whether it is a genuine copy installed from Google Play on a genuine Android device. Google returns a verdict about the app and the phone (for example whether Google Play Protect is on). We use these verdicts only to protect the service from abuse and keep the latest one for your account; they contain no personal details.

3. How We Use Your Information

To provide and improve Dochi AI: authenticating you, storing your creations and conversations, generating AI responses, applying the age rules, sending the parental summaries a parent has asked for, enforcing plan limits, and processing payments. We do not sell your data.

We use these service providers, each only for its part of the service:

• AI providers: your messages and the AI character's description are sent to the company that runs the AI model you chose — through OpenRouter, or directly to the provider behind a Dochi model — so it can write the reply.
• Content checks: the text and pictures of an AI character you publish, persona text, and other uploads are sent through OpenRouter to AI models (from companies such as OpenAI, Anthropic and Google) that check them against our rules. Some replies are checked the same way before you see them. The text of an AI character is also translated by an AI model so people can read it in their own language.
• ElevenLabs: when you choose a premium voice, the text being read aloud is sent to ElevenLabs to turn it into speech.
• Resend: sends the emails for parental controls (invites, codes and weekly summaries).
• Google Firebase and Vercel: host your account, data and our servers, and deliver notifications. For adults who allow it, Firebase Analytics and Crashlytics receive the usage counts and error reports described above.
• Google Play Integrity: checks that the Android app and the phone are genuine.
• Google Play and RevenueCat: process purchases. Google Play is the merchant of record for all purchases.

4. Connected AI accounts

Dochi AI lets you connect your own OpenRouter account so that free-model conversations run on your personal allowance rather than one shared with every other user. If you choose to connect, OpenRouter issues an access key tied to your OpenRouter account and we store it in encrypted form on our servers (AES-256-GCM, with the encryption key held outside the database). We use it for one purpose only: sending the messages you yourself send in Dochi AI. We never display it, export it, sell it, or share it with anyone, and it is not visible to Dochi AI staff. You can disconnect it at any time from Settings, revoke it directly from your OpenRouter account, or delete it along with everything else by deleting your Dochi AI account. Connecting an account is optional — Dochi AI remains usable without it.

5. Content Safety

Everything shown to everyone on Dochi AI is safe for all ages, and we apply automated moderation to characters, images and replies. Adults may switch on an 18+ mode that also shows AI characters made for adults, with romance and desire written gently, through feelings and closeness; explicit sexual content is never allowed for anyone, and nothing involving minors is ever allowed. If a reply goes further than an account allows, the AI character stays in the story but leads the scene in another direction. See our Content & Community Guidelines.

Self-harm. If a message mentions self-harm, the app shows where to find a free helpline. For an account with parental controls, the parent's summary shows only how many times that happened — never the words.

Reports. When you report something, we store what you reported, the reason you chose, anything you wrote, and your account ID, so our team can review it. Reporting an AI reply also sends that reply, the message you sent just before it, and the name of the model that wrote it. Reports are never shown to the person or creator you reported, and we never tell anyone who reported them. Reports we have finished reviewing are deleted after one year.

6. Data Deletion

In-app: open Settings → Preferences & Privacy → Delete account & data. This removes your profile, conversations, pictures, saved items, creations, age record, parental links and any connected AI access, and signs you out.

If a parent was connected to the account, we tell the parent that it was deleted. If a parent had set the account's age, we keep only that birthday, under a one-way scrambled form of the email address, so a new account with the same email address keeps the age the parent set.

By email: if you can't access the app, email admin@dochiai.com from your registered address with the subject "Data Deletion Request". We process requests within 14 days.

7. Children and teenagers

Dochi AI is intended for users 13 and older; we ask for your birthday on first use and do not knowingly collect data from children under 13. Users under 18 always see the filtered app, cannot use the 18+ mode, are told that they are chatting with an AI, and are reminded to take breaks. Parental controls are optional and show a parent activity counts only, never the chats; a connected parent is also told when the teenager tries to reach content for adults.

8. Security

We use industry-standard measures (Firebase Authentication, security rules, encrypted transport). No method of transmission over the internet is 100% secure.

9. Contact

Questions about this policy? Contact admin@dochiai.com.