Midnight Chat Privacy Policy

Effective date: October 6, 2026

Midnight Chat ("the app", "we", "us") is an AI character chat app for adults aged 18 and over. This policy explains what information the app handles, why, who it is shared with, and the choices you have.

1. The short version

• Your chats are stored on your phone, not on our servers.
• You don't need an account, email or phone number. The app identifies each install with a random ID (your Support ID), not with who you are.
• Ads come from Google AdMob, and payments are handled by Google Play.
• We don't sell personal data.

2. Information that stays on your phone

• Your conversations, the characters you make, your settings and your language choice.
• Your "About me" card (name or nickname, pronouns, likes, dislikes and chat style). It is added to the AI's instructions so replies fit you, so if you use cloud AI it is sent to the AI provider along with your messages.
• Your app lock PIN and recovery phrase, which are stored as one-way hashes or encrypted, never as plain text.
• Chat backups you create, which are saved where you choose.
• On-device AI: when you use a downloaded AI model, your messages are processed on your phone and never leave it.
• Voice: voice typing uses your phone's own speech service.

3. Information sent to our servers

Our servers run on Cloudflare. They receive the following.

• Install and usage information: your Support ID, app version, phone model, daily usage counts (for example messages sent, pictures made and ads watched), the last screen open before you left the app, and estimated ad earnings per ad type. We use this to run the service, fix problems, prevent abuse and improve the app.
• Cloud AI: by default the app writes replies with a free cloud AI service. The messages in the current chat, the character's details and your "About me" card are sent to that AI provider to write each reply. If you switch to a downloaded on-device model in Settings, no chat text leaves your phone.
• Pictures: the text description of a character or scene is sent to make a picture. If you send a photo in a chat or use AI redraw, that photo is sent to our image service for a safety check and to make the new picture. Character pictures may be shown to all users.
• Profile (optional): if you choose a username, it is shown publicly with your profile and leaderboard scores.
• Shared characters: characters you share (name, description, tags and picture) are public and linked to your username or Support ID. You can choose whether characters you make are shared.
• Purchases and coins: your Premium status, Google Play order IDs, refund notices and your coin totals (bought, earned and spent). We use these to restore purchases, handle refunds and prevent abuse.
• Reports: if you report a reply or a picture, we receive your Support ID, the reason, your note, the reported reply text or picture, the character and the AI model used.
• Reply ratings: a thumbs up or down with your Support ID, the AI model, the character and an internal message number, never the text of your messages.
• Crash reports: if the app crashes, it automatically sends a crash report (error details, Support ID, app version, phone model and Android version), never your chats.
• Problem reports and surveys (optional): what you write, an optional crash log, the app version and phone model, and the optional reason you give if you leave the app.
• Invites: your Support ID and a one-way, salted hash of your device ID, so each phone can use an invite code only once.
• Network addresses: our picture service uses your network (IP) address for about a minute to limit abuse. Everywhere else, network addresses are only stored as salted hashes.

4. Advertising

Free users see ads served by Google AdMob. AdMob may collect device identifiers (such as the advertising ID), IP address and ad interactions to show and measure ads, as described in Google's Privacy Policy (https://policies.google.com/privacy).

• In the European Economic Area, the UK and Switzerland, we ask for your consent with Google's consent form. You can change your choice at any time in Settings (Ad privacy choices).
• You can reset or delete your advertising ID in your phone's settings.
• Premium users see no ads unless they choose to watch one for coins.
• When you watch an ad for coins or to double a reward, your Support ID is passed to Google with the ad, so Google can confirm to our server that the ad was watched to the end.

5. Payments

Purchases (Premium and coins) are processed by Google Play. We never see your payment card details.

6. Who we share information with

We don't sell personal data. We only share information with:

• Google (AdMob and Google Play), as described above;
• Cloudflare, which hosts our servers and makes pictures;
• other image services we use when our main picture service is busy. They receive the picture description and, when the picture is based on one, the reference image or the photo you sent. Our safety check always runs first;
• the cloud AI provider that writes replies, unless you use an on-device model;
• authorities where the law requires it, including reports of child sexual abuse material to NCMEC.

7. How long we keep information

• Chats stay on your phone until you delete them or uninstall the app.
• Reports, problem reports and survey answers are kept only as long as needed to review them and keep the app safe.
• Usage and purchase records are kept as long as needed to run the service, handle refunds and meet legal duties.

8. Adults only and child safety

Midnight Chat is only for adults aged 18 and over, and must not be used by minors. An always-on child-safety filter checks AI replies and pictures, and pictures never show minors. These protections can't be turned off. We have zero tolerance for child sexual abuse and exploitation. To report a concern, email us or contact the NCMEC CyberTipline (https://report.cybertip.org/).

9. Your choices and rights

• Delete chats in the app, or uninstall the app to remove everything stored on your phone.
• Use a downloaded AI model so that no chat text leaves your phone.
• Choose whether characters you make are shared, and report or block any character.
• Change your ad consent in Settings, where the law requires it (EEA, UK and Switzerland).
• Cancel Premium in the Google Play Store app.
• To access or delete the information on our servers linked to your install, email us with your Support ID (shown in Settings).

Depending on where you live (for example under the GDPR or the CCPA), you may have further rights, such as access, correction, deletion and objection. Email us to use them.

10. Security

Chats and settings are kept in the app's private storage on your phone, protected by Android's device encryption. Keys are stored encrypted, your PIN is stored as a one-way hash, and all connections to our servers are encrypted. No system is perfectly secure, but we keep sensitive data on your phone wherever we can.

11. Changes to this policy

We may update this policy as the app changes. We will show the new effective date at the top, and tell you in the app about important changes.

12. Contact

Questions, data requests or takedown requests: chattbot.ai@gmail.com