Skip to content
Andromeda
Log inJoin

Privacy Policy

Effective date: January 1, 2026 · Last updated: August 2, 2026

This Privacy Policy explains how Andromeda, operated by Persephone Reborn LLC (“Andromeda”, the “Service”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards information in connection with your access to and use of our websites, applications, APIs, and related services. It should be read together with our Terms of Service.

By using the Service, you acknowledge that you have read and understood this Policy. Where required by applicable law, we rely on the legal bases described in Section 5 and obtain your consent before processing certain information.

1. Scope

This Policy applies to information we process about visitors and registered users of the Service. It does not apply to third-party products or services that we do not control, even if they link to or integrate with the Service.

2. Information We Collect

We collect information in the following ways:

  • Information you provide: account details (handle, display name, password, and—where applicable—email address and date of birth), profile information (bio, location, links, avatar, and banner), the content you create (posts, replies, reposts, messages, polls, and media), and communications you send to us.
  • Information collected automatically: usage and log data (such as posts viewed, features used, and interactions), device and connection information (such as IP address, browser type, and approximate location derived from IP), and identifiers stored via cookies or similar technologies.
  • Transaction and wallet information: your Stardust balance and a ledger of in-Service activity (such as tips, premium unlocks, subscriptions, gifts, and commissions). If you make a purchase, limited payment information is processed by our payment providers; we do not store full payment-card numbers.
  • Information from others: content and information other users provide about you (for example, when they mention, tag, message, or report you).
  • Connected third-party accounts: if you choose to link an external service (such as a music-streaming account), we receive the limited information that service returns to us with your authorization, as described in Section 13.

3. How We Use Information

We use information to:

  • provide, operate, maintain, and secure the Service and your account;
  • personalize your experience, including timelines, suggestions, and discovery features;
  • enable social features such as following, messaging, mentions, and notifications;
  • detect, prevent, and respond to fraud, abuse, security incidents, and policy violations;
  • communicate with you about the Service, including verification and security alerts;
  • develop new features and conduct research and analytics; and
  • comply with legal obligations and enforce our Terms.

4. How We Share Information

We do not sell your personal information. We share information only as follows:

  • With other users according to your settings (for example, your public profile and posts, or close-friends content limited to selected people);
  • With service providers who process information on our behalf under appropriate confidentiality and security obligations (such as hosting, email delivery, and analytics);
  • For legal and safety reasons, where we believe disclosure is reasonably necessary to comply with law, enforce our Terms, or protect the rights, property, or safety of users or the public;
  • In a business transfer, such as a merger, acquisition, or sale of assets, subject to this Policy; and
  • With your consent or at your direction.

5. Legal Bases for Processing

Where applicable data-protection law (such as the GDPR) requires it, we process personal information on the following legal bases: performance of our contract with you (providing the Service); your consent (which you may withdraw at any time); our legitimate interests (such as securing and improving the Service), balanced against your rights; and compliance with legal obligations.

6. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, maintain security, and understand how the Service is used. We do not use third-party advertising or cross-site tracking cookies. You can control cookies through your browser settings; disabling certain cookies may affect functionality such as staying logged in. For details, see our Cookie Policy.

Embedded media. Some posts and pages can embed media hosted elsewhere — most often YouTube (operated by Google), and the music services described in Section 13. An embedded player is a connection between you and that provider: loading one lets them see your IP address and may let them set their own cookies, under their privacy policy rather than ours.

Two things limit that. No third-party player loads until you choose to play it — until then you are looking at a still image served by us, and the provider has not been contacted at all. And where the provider offers a privacy-preserving embed domain, we use it: YouTube videos load from youtube-nocookie.com.

7. Data Retention

We retain information for as long as your account is active or as needed to provide the Service, and thereafter as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete content or your account, we delete or de-identify the associated information within a commercially reasonable period, except for copies retained in routine backups or as required by law, and except for content others have reshared.

8. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing. You can exercise many of these directly in the Service:

  • review and edit your profile and privacy & safety settings;
  • control who can message, tag, or quote you, who can see who you follow, and your discoverability;
  • download an archive of your data from Account settings;
  • deactivate (a reversible pause) or permanently delete your account.

To make a request that cannot be completed in-product, contact us using Section 16. We will respond consistent with applicable law and may need to verify your identity.

9. Security

We use administrative, technical, and organizational measures designed to protect information, including encrypted credentials, optional two-factor authentication, rate-limiting, and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your password and devices secure.

10. Children's Privacy

The Service is not directed to children under 16 (or the minimum age of digital consent in your jurisdiction, if higher), and we do not knowingly collect personal information from them. If we learn that we have collected such information without appropriate consent, we will take steps to delete it.

11. International Data Transfers

We may process and store information in countries other than your own. Where we transfer personal information across borders, we implement safeguards designed to provide an adequate level of protection consistent with applicable law.

12. Artificial Intelligence and Automated Processing

The Service includes features powered by artificial intelligence and automated systems — for example, content summaries (Clouds), writing and image tools, recommendations and discovery, search, and safety and moderation systems. To provide some of these features, we share the relevant inputs (such as the text or image you submit) with third-party AI providers that process them on our behalf under confidentiality and security obligations.

Who processes your inputs. We use two AI processing providers. Anthropic handles reading and writing — content summaries, the writing and image studios, discovery, safety systems, and the reading the Lens returns for a frame you capture. fal handles generative media and speech-to-text: it receives the still image you choose when you create a Living Portrait, and the audio of a track or video you have uploaded at the point captions or a transcript are produced for it. We may engage additional providers to perform the same function — returning a result for something you submit — and where we do, we will name them in this Policy before they are used. We will not use a provider to do something of a different kind than is described in this Section without telling you first.

Training. Your content is never used to train an AI provider’s models. This applies to everything you submit — not only to the private content of your direct messages. We will not engage a provider whose terms permit training on what you send.

Retention. Providers process your inputs to return a result, and we ask for the shortest retention each service offers. We want to be precise rather than reassuring here, because the honest answer has exceptions:

  • For most requests to Anthropic, your prompt and the result are not stored by the provider after the response is returned.
  • Some of the models we use for writing and narrative features are, under our provider’s policy, subject to a 30-day retention requirement, and that requirement cannot be waived for those models. Where we use them, the input and the result may be held by the provider for up to 30 days and are then deleted.
  • fal, which handles generative media and speech-to-text, does not promise in its published terms that each request is deleted as it completes. The still you submit for a Living Portrait, and audio submitted for captions, may therefore be held while our account with fal remains open. We are seeking written confirmation of the shortest retention they will commit to, and will state it here once we have it.
  • If a request is flagged by a provider’s automated safety systems, or where retention is required by law, it may be held for longer — up to two years under Anthropic’s published policy — so that abuse can be investigated.

What happens on your device instead. A substantial part of the Service’s intelligence never reaches us or anyone else, because it runs inside your browser. In the Lens, the live camera view is analysed on your device by models downloaded to it, and that live view is never transmitted to us or to any provider. Only a frame you deliberately capture is sent to be identified. The same is true of the Lens’s optional listening feature, which classifies sound on your device and never records or transmits audio; of on-device text reading; and of transcription in the Vigil. Where a feature summarises what those on-device models concluded, it sends the resulting words and never the images or audio they came from, and it says so at the point you press the button.

We also use automated systems to help detect spam, fraud, abuse, and policy violations and to operate and secure the Service. Where these systems produce a decision with a legal or similarly significant effect, you may have the right to request human review; you can reach us using Section 16, and many enforcement decisions can be appealed in-product.

13. Connected Music Services

You may optionally connect a third-party music-streaming account—currently Spotify and Apple Music—to display your listening activity on your profile. This connection is entirely at your election and is off unless you enable it.

  • Authorization. Spotify is connected through its OAuth authorization flow, after which we store an access token and a refresh token on your account. Apple Music is connected in your browser through Apple’s MusicKit, which returns a “music user token” that we store on your account. You must have an active subscription with the relevant service to authorize it.
  • Information we access. Using these tokens, we access, on a read-only basis, a limited set of your listening data—such as your currently playing track (Spotify only), recently played tracks, top tracks, and associated genre information. We do not access your payment details, and we do not modify your music account or play, purchase, or save content on your behalf.
  • What we store and display. We derive and cache a limited “listening profile”—for example, recently played and top tracks, a “most played” list, and a colour theme derived from your most-listened genres—which is refreshed periodically and stored in association with your account so that it can appear on your profile. If you choose, you may also share an individual track as a post, which publishes that track’s title, artist, and a link.
  • Your control. You control whether this information is shown and can disconnect at any time in your settings. Disconnecting deletes the stored tokens and the cached listening profile. You may also revoke our access directly from within the third-party service’s account settings.
  • Third-party terms. Your use of Spotify and Apple Music is governed by those providers’ own terms and privacy policies, which we do not control. Apple Music functionality is provided through Apple’s MusicKit and is additionally subject to Apple’s applicable terms.

14. Live Audio, Video, and Calls

Parts of the Service carry live audio and video: direct-message calls, live streams, and Spheres (live rooms). Your microphone and camera are used only after you turn them on for a specific call or room, and you can mute or switch them off at any time. We do not access your microphone or camera in the background, and we do not record calls on our own initiative.

How the media travels. Live audio and video is sent between participants over WebRTC. To connect participants whose networks cannot reach each other directly, media may be relayed through a third-party relay (TURN) service acting on our behalf. In larger rooms, media may instead be routed through a third-party real-time media server (an SFU) that forwards it to the other participants. These providers carry the stream to deliver the call; live call audio and video is not stored by us in the ordinary course.

Recording. The host of a Sphere decides whether recording is allowed at all. When recording is disallowed, the Service refuses to record. When somebody is recording, everyone in the room is shown a notice naming who is recording and what will become of the recording, which the host also chooses when the room is created: kept by the host only, replayable by people who were in the room, or publishable. A recording made by a participant captures that participant’s own microphone. You are responsible for complying with the recording and consent laws that apply where you are and where the other participants are.

Live captions. Captions are optional and off by default. When a speaker has captions running, the speech recognition is performed by the speaker’s own web browser, and some browsers perform that recognition by sending audio to the browser vendor’s servers — a transfer between you and your browser vendor, governed by their privacy policy, not ours. Only the resulting text reaches us. Caption text is held in memory to display it live and to write the room’s summary when it ends; it is discarded when the room closes, and it is excluded from the summary entirely if the host disallowed recording.

What we do keep. We keep the ordinary operational record of a room — who joined and when, and whether a room was live — along with anything you deliberately create in it, such as questions, poll votes, or a recording that was saved. Deleting a room deletes that record.

15. Region-Specific Disclosures

California (CCPA/CPRA). If you are a California resident, you have rights to know the categories and specific pieces of personal information we collect, to delete and correct your information, and to opt out of “sales” or “sharing” of personal information and certain targeted advertising. We do not sell your personal information, and we honor recognized opt-out preference signals (such as Global Privacy Control) where required. We do not discriminate against you for exercising your rights. You may exercise rights as described in Section 8 or by contacting us.

European Economic Area, United Kingdom, and Switzerland. If you are in these regions, our legal bases for processing are described in Section 5, and you have the rights described in Section 8, including the right to lodge a complaint with your local data-protection authority. Where we rely on consent, you may withdraw it at any time without affecting prior processing. For international transfers, see Section 11.

Other jurisdictions may provide additional rights; we honor applicable local requirements.

16. Changes and Contact

We may update this Policy from time to time. If we make material changes, we will provide reasonable notice, such as by posting the updated Policy with a new effective date or notifying you within the Service. Questions or requests may be sent to privacy@andromedasphere.com.

© 2026 Andromeda · Created by Persephone Reborn LLC in 2026

← Legal & copyrightCreditsHome