Effective date: January 1, 2026 · Last updated: August 2, 2026
This Privacy Policy explains how Andromeda, operated by Persephone Reborn LLC (“Andromeda”, the “Service”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards information in connection with your access to and use of our websites, applications, APIs, and related services. It should be read together with our Terms of Service.
By using the Service, you acknowledge that you have read and understood this Policy. Where required by applicable law, we rely on the legal bases described in Section 5 and obtain your consent before processing certain information.
This Policy applies to information we process about visitors and registered users of the Service. It does not apply to third-party products or services that we do not control, even if they link to or integrate with the Service.
We collect information in the following ways:
We use information to:
We do not sell your personal information. We share information only as follows:
Where applicable data-protection law (such as the GDPR) requires it, we process personal information on the following legal bases: performance of our contract with you (providing the Service); your consent (which you may withdraw at any time); our legitimate interests (such as securing and improving the Service), balanced against your rights; and compliance with legal obligations.
We use cookies and similar technologies to keep you signed in, remember your preferences, maintain security, and understand how the Service is used. We do not use third-party advertising or cross-site tracking cookies. You can control cookies through your browser settings; disabling certain cookies may affect functionality such as staying logged in. For details, see our Cookie Policy.
Embedded media. Some posts and pages can embed media hosted elsewhere — most often YouTube (operated by Google), and the music services described in Section 13. An embedded player is a connection between you and that provider: loading one lets them see your IP address and may let them set their own cookies, under their privacy policy rather than ours.
Two things limit that. No third-party player loads until you choose to play it — until then you are looking at a still image served by us, and the provider has not been contacted at all. And where the provider offers a privacy-preserving embed domain, we use it: YouTube videos load from youtube-nocookie.com.
We retain information for as long as your account is active or as needed to provide the Service, and thereafter as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete content or your account, we delete or de-identify the associated information within a commercially reasonable period, except for copies retained in routine backups or as required by law, and except for content others have reshared.
Depending on your location, you may have rights to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing. You can exercise many of these directly in the Service:
To make a request that cannot be completed in-product, contact us using Section 16. We will respond consistent with applicable law and may need to verify your identity.
We use administrative, technical, and organizational measures designed to protect information, including encrypted credentials, optional two-factor authentication, rate-limiting, and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your password and devices secure.
The Service is not directed to children under 16 (or the minimum age of digital consent in your jurisdiction, if higher), and we do not knowingly collect personal information from them. If we learn that we have collected such information without appropriate consent, we will take steps to delete it.
We may process and store information in countries other than your own. Where we transfer personal information across borders, we implement safeguards designed to provide an adequate level of protection consistent with applicable law.
The Service includes features powered by artificial intelligence and automated systems — for example, content summaries (Clouds), writing and image tools, recommendations and discovery, search, and safety and moderation systems. To provide some of these features, we share the relevant inputs (such as the text or image you submit) with third-party AI providers that process them on our behalf under confidentiality and security obligations.
Who processes your inputs. We use two AI processing providers. Anthropic handles reading and writing — content summaries, the writing and image studios, discovery, safety systems, and the reading the Lens returns for a frame you capture. fal handles generative media and speech-to-text: it receives the still image you choose when you create a Living Portrait, and the audio of a track or video you have uploaded at the point captions or a transcript are produced for it. We may engage additional providers to perform the same function — returning a result for something you submit — and where we do, we will name them in this Policy before they are used. We will not use a provider to do something of a different kind than is described in this Section without telling you first.
Training. Your content is never used to train an AI provider’s models. This applies to everything you submit — not only to the private content of your direct messages. We will not engage a provider whose terms permit training on what you send.
Retention. Providers process your inputs to return a result, and we ask for the shortest retention each service offers. We want to be precise rather than reassuring here, because the honest answer has exceptions:
What happens on your device instead. A substantial part of the Service’s intelligence never reaches us or anyone else, because it runs inside your browser. In the Lens, the live camera view is analysed on your device by models downloaded to it, and that live view is never transmitted to us or to any provider. Only a frame you deliberately capture is sent to be identified. The same is true of the Lens’s optional listening feature, which classifies sound on your device and never records or transmits audio; of on-device text reading; and of transcription in the Vigil. Where a feature summarises what those on-device models concluded, it sends the resulting words and never the images or audio they came from, and it says so at the point you press the button.
We also use automated systems to help detect spam, fraud, abuse, and policy violations and to operate and secure the Service. Where these systems produce a decision with a legal or similarly significant effect, you may have the right to request human review; you can reach us using Section 16, and many enforcement decisions can be appealed in-product.
You may optionally connect a third-party music-streaming account—currently Spotify and Apple Music—to display your listening activity on your profile. This connection is entirely at your election and is off unless you enable it.
Parts of the Service carry live audio and video: direct-message calls, live streams, and Spheres (live rooms). Your microphone and camera are used only after you turn them on for a specific call or room, and you can mute or switch them off at any time. We do not access your microphone or camera in the background, and we do not record calls on our own initiative.
How the media travels. Live audio and video is sent between participants over WebRTC. To connect participants whose networks cannot reach each other directly, media may be relayed through a third-party relay (TURN) service acting on our behalf. In larger rooms, media may instead be routed through a third-party real-time media server (an SFU) that forwards it to the other participants. These providers carry the stream to deliver the call; live call audio and video is not stored by us in the ordinary course.
Recording. The host of a Sphere decides whether recording is allowed at all. When recording is disallowed, the Service refuses to record. When somebody is recording, everyone in the room is shown a notice naming who is recording and what will become of the recording, which the host also chooses when the room is created: kept by the host only, replayable by people who were in the room, or publishable. A recording made by a participant captures that participant’s own microphone. You are responsible for complying with the recording and consent laws that apply where you are and where the other participants are.
Live captions. Captions are optional and off by default. When a speaker has captions running, the speech recognition is performed by the speaker’s own web browser, and some browsers perform that recognition by sending audio to the browser vendor’s servers — a transfer between you and your browser vendor, governed by their privacy policy, not ours. Only the resulting text reaches us. Caption text is held in memory to display it live and to write the room’s summary when it ends; it is discarded when the room closes, and it is excluded from the summary entirely if the host disallowed recording.
What we do keep. We keep the ordinary operational record of a room — who joined and when, and whether a room was live — along with anything you deliberately create in it, such as questions, poll votes, or a recording that was saved. Deleting a room deletes that record.
California (CCPA/CPRA). If you are a California resident, you have rights to know the categories and specific pieces of personal information we collect, to delete and correct your information, and to opt out of “sales” or “sharing” of personal information and certain targeted advertising. We do not sell your personal information, and we honor recognized opt-out preference signals (such as Global Privacy Control) where required. We do not discriminate against you for exercising your rights. You may exercise rights as described in Section 8 or by contacting us.
European Economic Area, United Kingdom, and Switzerland. If you are in these regions, our legal bases for processing are described in Section 5, and you have the rights described in Section 8, including the right to lodge a complaint with your local data-protection authority. Where we rely on consent, you may withdraw it at any time without affecting prior processing. For international transfers, see Section 11.
Other jurisdictions may provide additional rights; we honor applicable local requirements.
We may update this Policy from time to time. If we make material changes, we will provide reasonable notice, such as by posting the updated Policy with a new effective date or notifying you within the Service. Questions or requests may be sent to privacy@andromedasphere.com.
© 2026 Andromeda · Created by Persephone Reborn LLC in 2026