did you know — your brain replays your day while you sleep — that's why mornings sometimes feel like a fresh page.
legal . obvix labs
privacy policy.
last updated . 2026-05-31
Obvix Labs (“we”, “us”) operates amyy, an AI companion for teenagers. this policy describes what data we collect, how we use it, and the choices you have. plain language. no lawyer-flavored fog.
i.
what we collect.
account info — email, google account id, name from your google sign-in; an optional display name and short bio.
onboarding answers — age range, what you usually talk to AI about, and the mood you reported on first visit.
conversations — every message you send and every message amyy sends back, with timestamps.
memories — short facts amyy extracts from conversations to remember you across sessions. you can view, edit, and delete these from the memories panel.
crisis flags — when amyy detects a crisis-level message, we record a SHA-256 hash of the message (not the text itself), the time, and a category.
feedback — your ratings and free-text answers when you complete a micro-survey.
openai, on microsoft azure — provides the AI model that generates replies. per their terms, your messages aren't used to train models.
hostinger (germany) & microsoft azure — host the app, database, and AI compute on our behalf.
cloudflare — provides DNS and edge routing.
sentry (optional) — for crash reports. configured to not capture request bodies or headers.
google analytics (optional) — only loaded after you accept the cookie banner. receives anonymized page-view events.
iv.
how long we keep data.
account info, conversations, and memories: kept until you delete your account.
crisis-event records: retained for 90 days, then automatically purged.
backups: rotated out within 30 days.
v.
your choices.
access — download everything we hold on you as one json file from the profile menu.
correction — edit your profile and memories from the profile and memories panels.
deletion — delete your account from the profile menu. this permanently erases your messages, memories, profile, and crisis records.
withdrawal — you can stop using amyy at any time.
vi.
your rights by region.
depending on where you live you may have extra rights. to use any of them, email connect@obvix.io — we verify the request against your account and reply within the time your law requires.
europe (EU / EEA) & the UK — GDPR
legal basis — we process account data to run the service (contract). your conversations and mood can reveal mental-health information (a “special category”), so we process those only with your explicit consent, which you can withdraw any time.
your rights — access, rectification, erasure, restriction, portability, and objection. you may also complain to your national data-protection authority.
transfers — some processors are in the US; those transfers rely on the EU Standard Contractual Clauses (email us for the references). our app + database are hosted in Germany.
india — DPDP Act 2023
children — under the Act, everyone under 18 is a “child”. we obtain verifiable parental / guardian consent before processing a child's data, and we do not use it for behavioural monitoring or targeted advertising.
your rights — access, correction, completion, erasure, grievance redressal, and to nominate someone to act for you. you can withdraw consent as easily as you gave it.
grievances — reach our grievance officer at the email above; unresolved issues can go to the Data Protection Board of India.
united states (california & other states)
we do not sell or “share” your personal information, and we don't use sensitive information (including mental-health content) beyond running amyy.
your rights — to know, access, correct, delete, and to opt out of sale/sharing and targeted advertising (none of which we do). we won't discriminate against you for using them.
california SB 243 — amyy tells you it's an AI, reminds you to take breaks, and surfaces crisis resources. a minor's data is never sold or shared.
vii.
children & parental consent.
amyy is built for teenagers, so most users are minors. the rules differ by country:
india — anyone under 18 is a child under the DPDP Act. we ask for verifiable parental or guardian consent before processing their data, and never use it for behavioural monitoring or ads.
eu / eea — users below the local age of digital consent (13–16, depending on the country) need a parent or guardian to consent on their behalf.
united states — amyy is for ages 13+. we don't knowingly collect data from children under 13 (COPPA), and under-16 users' information is never sold or shared.
parents/guardians: to review, consent to, or delete your child's data, email connect@obvix.io.
viii.
age.
amyy is for users 13+. we don't knowingly collect data from anyone younger. if you're under 18, please review these terms with a parent or guardian.
ix.
crisis disclaimer.
amyy is not a therapist, counselor, or emergency service. if you're in crisis, please reach a real person: US call or text 988; UK & Ireland call Samaritans on 116 123; Canada call or text 988; Australia call Lifeline on 13 11 14; India call Tele-MANAS on 14416; or find your local line at findahelpline.com. if you're in immediate danger, call your local emergency number (911 in the US/Canada, 999 in the UK, 112 in the EU).
x.
contact.
for data requests, account problems, or anything else: connect@obvix.io