Privacy Policy

• Account data: a pseudonymous account ID and username, your confirmation that you are 18 or older, your preferences, and your email address if you give it to us. If you sign in with Google, Discord or X, we receive your account ID with that service and, where they share it, your verified email address and display name — we never receive your password for those services. If you sign in with an email address and password, we store only a secure one-way hash of your password (bcrypt), never the password itself.
• Content: your messages, prompts, characters you create, memories your characters keep about your conversations, and the photos and voice messages generated for you.
• Purchase data: your plan, purchases, token balance and payment status. Card details are handled by our payment processor; we do not receive or store your full card number.
• Technical and usage data: IP address, approximate location derived from it, browser and device information, pages and features used, and the link or campaign that brought you to us (including affiliate or advertising click identifiers).
• Messages to us: what you send us through the contact form or by email, such as support requests, content reports and complaints.
• Cookies: see section 7.

Your conversations may reveal information about your sex life or sexual orientation, which is a special category of data. We process it only to provide the service you ask for, and you can delete it at any time.

• To provide the service: run your account, generate responses and media, and remember your conversations (contract).
• To take payments, prevent fraud and handle refunds and chargebacks (contract, legal obligation).
• To keep the service safe: filter prompts and outputs, enforce our Terms and Content Policy, and meet legal and payment-network requirements (legitimate interests, legal obligation).
• To measure and improve the service with first-party analytics that never include your chat content (legitimate interests).
• To attribute sign-ups and purchases to the affiliate or campaign that referred you (legitimate interests).
• To show and measure our advertising with marketing cookies, only if you agree (consent).
• To send service emails and, if you agree, marketing emails (contract, consent).

We do not sell your personal data, and we do not use your chat content for advertising.

We use the following service providers (sub-processors). Each receives only the data it needs for the purpose listed.

We may also use the following providers for some features, or as a replacement for a provider above. If we do, they receive only the data listed.

We also share personal data with:

• The affiliate or advertising network that referred you, which receives conversion information such as a transaction ID, amount and status — not your content.
• Professional advisers, and law enforcement or regulators where the law requires it, including reports of child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC), the Internet Watch Foundation (IWF) and the police.
• A buyer or successor if our business is sold or restructured.

Our servers are in the European Union. Some of our providers process data outside the UK and the European Economic Area, including in the United States and China. Where we transfer personal data to countries without an adequacy decision, we take steps to protect it as required by data protection law.

• Chats, memories, characters and generated media: until you delete them, or until you delete your account. When you delete your account, we delete your profile, conversations, memories and generated media.
• Account data: while your account exists.
• Billing and tax records (purchases, invoices, refunds): 6 years after the end of the financial year they relate to, as UK tax law requires — even if you delete your account.
• Safety and moderation logs: 12 months. Records of reports to law enforcement, and records we must keep for a legal claim or investigation, are kept for as long as that requires.
• Analytics data: 13 months.
• Affiliate attribution: the cookie lasts 30 days; a referral linked to a purchase is kept with the billing records.
• Residual copies in backups are overwritten within 30 days.

You have the right to access, correct, delete, restrict or object to the use of your personal data, to receive a copy of it, and to withdraw consent at any time. You can export or delete your data yourself in Settings, or email [email protected]. We reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk). If you are in the EU, you can also contact your local data protection authority.

We use these cookies. Essential and preference cookies are needed for the site to work. Marketing cookies are set only if you click “Accept” in the cookie banner; to change your choice, clear this site’s cookies and choose again.

We also keep a few settings in your browser’s local storage (such as your chat and voice preferences) and a random analytics session ID that is deleted when you close the tab.

Kissmark is for adults. We do not knowingly collect data from anyone under 18. If we learn that a user is under 18, we close the account and delete its data.

We protect data in transit with encryption and limit access to people and providers who need it. No online service is completely secure, so please keep your device secure too.

We may update this policy. If the changes are significant, we will give notice on the site.