Effective date: Geneva, 1st August 2026
This Privacy Policy explains how PurePure GmbH operator of TheBone.PrivateChat (“we,” “us,” or “our”), collects, uses, stores, and shares personal data when you use the TheBone.PrivateChat mobile application and related services.
1. WHO WE ARE
Data controller:
PurePure GmbH
Wesemlinstrasse 41
6006 Luzern
Email: catch@thebone.club
2. AGE REQUIREMENTS
The app is intended only for users who meet the minimum age shown in the App Store for their country or region. In most regions, the app is rated 16+.
Certain optional adult-oriented conversational features are available only to users who declare that they are at least 18 years old.
Users below the age of 18 may use the general app only where permitted by the applicable App Store age rating, but they may not enable or use adult mode.
Adult mode does not permit content involving minors, exploitation, non-consensual conduct, or other prohibited material.
We do not require users to upload a passport, identity card, or other government-issued identification to declare that they are 18 or older, unless a different form of age assurance is required by applicable law.
3. INFORMATION WE COLLECT
Depending on how you use the app, we may collect and process:
– messages and content entered during conversations;
– recent conversation history and selected conversation context;
– stored memories, summaries, personal facts, interests, plans, and preferences that you choose to provide;
– avatar names, personality settings, relationship settings, communication preferences, schedules, and availability information;
– age declaration, adult-mode status, and consent settings;
– images that you voluntarily select or upload where image features are available;
– feedback, support requests, and communications with us;
– device type, operating system, app version, IP address, time zone, local time, and basic request metadata;
– device notification tokens;
– technical logs, error information, diagnostic data, and security-related information;
– service usage information necessary to operate, secure, and improve the app.
Please do not enter information that you do not want processed in accordance with this Privacy Policy.
4. AI CONVERSATION PROCESSING
To generate responses, the app may transmit and process:
– your current message;
– selected recent conversation history;
– relevant stored memories or summaries;
– avatar and personality settings;
– relationship and communication settings;
– local time, time zone, schedules, or availability information;
– age, consent, adult-mode, and safety settings.
AI-generated responses are produced automatically based on this information.
The app may also automatically evaluate whether a request falls within permitted content boundaries. This may allow, limit, or block a requested response.
These automated processes are used to provide the service and apply content controls. They are not used to make decisions that produce legal or similarly significant effects about you.
5. HOW WE USE PERSONAL DATA
We use personal data to:
– provide AI-generated conversations and responses;
– maintain conversation continuity and memory;
– personalise avatar behaviour, personality, relationship context, and communication style;
– save user preferences and settings;
– deliver notifications and scheduled check-ins;
– operate age, consent, and adult-mode controls;
– block prohibited content, including sexual content involving minors;
– protect users and prevent misuse;
– maintain service security;
– diagnose technical problems and improve reliability;
– respond to support and privacy requests;
– comply with legal obligations and enforce our terms.
We do not sell personal data.
We do not use private conversations for third-party advertising.
We do not track users across unrelated apps or websites for advertising purposes.
6. ADULT MODE AND CONSENT
Adult mode is an optional feature intended only for users who declare that they are at least 18 years old.
Before adult mode is enabled, the user may be required to:
– declare that they are at least 18 years old;
– deliberately enable adult mode; and
– provide consent to receive adult-oriented conversational content.
These settings may be stored so that the app can apply the user’s selected preferences.
Users may disable adult mode or withdraw consent at any time through the app’s settings or by contacting us.
Disabling adult mode or withdrawing consent does not affect processing that lawfully occurred before the change.
We may retain a limited record showing that age was declared, adult mode was enabled or disabled, and consent was provided or withdrawn, together with the applicable date or policy version where necessary.
7. LEGAL BASES FOR PROCESSING
Where the General Data Protection Regulation, the Swiss Federal Act on Data Protection, or similar laws apply, we process personal data on one or more of the following legal bases:
– performance of a contract, to provide the requested app and AI conversation services;
– consent, for optional features, notifications, adult mode, and processing that legally requires consent;
– legitimate interests, to operate, secure, maintain, and improve the service;
– compliance with legal obligations;
– establishment, exercise, or defence of legal claims.
Where users voluntarily disclose information that qualifies as sensitive personal data, we process it only as necessary to provide the requested feature and, where required, on the basis of explicit consent.
8. SERVICE PROVIDERS
We use third-party service providers to operate the app. These providers may process personal data on our behalf only for authorised purposes.
They may include:
– OpenAI, for AI-generated responses and related processing;
– Google Firebase, for cloud infrastructure, notifications, storage, authentication, or related services;
– Render, for hosting backend services and stored application state;
– Apple, for app distribution, platform services, and payment processing where applicable;
– technical service providers used for infrastructure, security, diagnostics, customer support, and error monitoring.
These providers may process data in countries other than the country where the user lives.
Where required, we use appropriate safeguards for international transfers, including contractual protections, adequacy decisions, or recognised standard contractual clauses.
9. DATA WE MAY STORE
Depending on the features used, we may store:
– conversation memories and summaries;
– selected conversation context;
– user or owner preferences;
– avatar state;
– relationship state;
– schedules and planned check-ins;
– device notification tokens;
– selected personal facts supplied for continuity;
– age declaration, adult-mode, and consent settings;
– recent safety or boundary decisions;
– technical, diagnostic, and security information.
The full text of every conversation may not necessarily be stored permanently. Selected context, memories, summaries, or state information may be retained to provide continuity.
10. IMAGES
Images selected for an avatar or profile may remain stored locally on the user’s device unless the app clearly indicates that an image will be uploaded for a particular feature.
Where an image is uploaded or processed remotely, it will be used only to provide the requested feature, maintain safety, or comply with legal obligations.
11. DATA RETENTION
We retain personal data only for as long as reasonably necessary to:
– provide the service;
– maintain the features selected by the user;
– preserve conversation continuity;
– comply with legal obligations;
– resolve disputes;
– prevent misuse;
– protect the security and reliability of the service.
Conversation memories, preferences, settings, and app state may remain stored until the user deletes or resets them, deletes their account where account functionality exists, or requests deletion.
Following a valid deletion request, we will delete or anonymise relevant personal data within 30 days unless continued retention is required by law or necessary for legal claims, fraud prevention, security, or dispute resolution.
Residual copies may remain in encrypted backups for up to 30 days before being overwritten.
Third-party providers may apply their own limited retention periods under their applicable data-processing terms.
12. USER RIGHTS
Depending on the user’s location, they may have the right to:
– request access to their personal data;
– request correction of inaccurate personal data;
– request deletion of personal data;
– restrict or object to certain processing;
– request a portable copy of information they provided;
– withdraw consent at any time;
– object to processing based on legitimate interests;
– lodge a complaint with a competent data-protection authority.
Withdrawing consent does not affect processing that lawfully occurred before withdrawal.
To exercise these rights, contact catch@thebone.club
We may request limited information necessary to confirm that a request relates to the correct app installation or account. We will not request more information than reasonably necessary.
13. DATA DELETION
Users may request deletion by:
– using any deletion or reset function available within the app; or
– email: catch@thebone.club with the subject line “Data Deletion Request.”
Where applicable, users should include sufficient information to help us locate the relevant app data, such as an account email address or app identifier.
Users should not send identity documents unless we specifically explain why verification is reasonably necessary.
Deletion may remove stored memories, preferences, relationship state, schedules, notification tokens, consent settings, and other information connected with use of the service.
14. NOTIFICATIONS
With the user’s permission, the app may send notifications, scheduled messages, reminders, or avatar-initiated check-ins.
A device notification token may be transmitted to our backend and notification provider for this purpose.
Users may disable notifications through the app or their device settings.
15. CHILDREN AND YOUNG PEOPLE
The app is not intended for users below the minimum age shown in the App Store for their country or region.
Adult mode is available only to users who declare that they are at least 18 years old.
We do not knowingly permit sexual content involving minors.
Where the service detects a possible minor-related sexual context, the relevant request may be blocked regardless of the user’s settings.
If you believe that a minor has provided personal data contrary to this policy, contact catch@thebone.club.
16. SECURITY
We use reasonable technical and organisational measures designed to protect personal data, including encrypted network transmission, access controls, authentication measures, and restricted backend access where applicable.
No electronic service can guarantee absolute security.
Users are responsible for protecting access to their device and any account credentials.
17. NO SALE, ADVERTISING, OR CROSS-APP TRACKING
We do not:
– sell personal data;
– use conversation content for third-party advertising;
– allow advertising networks to build profiles from private conversations;
– track users across unrelated third-party apps or websites for advertising purposes.
If these practices change, we will update this Privacy Policy and obtain consent where required.
18. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy when the app, our service providers, or applicable legal requirements change.
The updated version will be published at this URL with a revised effective date.
Where changes materially affect user rights or how personal data is used, we may provide additional notice within the app.
19. CONTACT
For privacy questions, complaints, consent withdrawal, or data requests, contact:
PurePure GmbH
Wesemlinstrasse 41
6006 Luzern
Email: catch@thebone.club
Users may also have the right to contact their local data-protection authority.