← My AI friend

Privacy Policy — My AI friend

Updated: October 13, 2026 · Peter's Engineering (PTRS LTD), Poland · ceo@ptrs.ltd

My AI friend is a voice companion designed to keep your data on your device. This policy explains what the app processes and where it goes — written against the app's code, item by item. There is no account with us; the Google sign-in is optional and serves only your own backup.

Every way to delete your data is gathered in “How to delete your data” just below.

Where the monster thinks

At the first meeting you choose the “brain”:

  • On the phone. A language model (Gemma 4 E2B by Google, about 3.1 GB, downloaded from huggingface.co at your request) runs entirely on the device. In this mode nothing from the conversation leaves the phone. The model is provided under the Apache License 2.0.
  • In the cloud. You paste the API key of a language-model provider — by default DeepSeek (api.deepseek.com, a provider registered in the People's Republic of China); the address and model can be changed to any OpenAI-compatible provider. The key is stored encrypted on the phone (Android Keystore) and is never written into the chat. The provider receives everything the monster needs to answer: your messages and its replies, its memory about you (facts and diary), the names of tasks, calendar events and taught places when they matter for the answer, the town you are in and the details of a trip while you are on the road or far from home (see “Places and the road”), photos you send into the chat, the monster's remarks about your steps and sleep (see “Health Connect” below) and — if the notification digest is on — the text of notifications (see below), and, with “News three times a day” on, the headlines it retells and, every two days, what it knows about you to pick your news topics (see “News three times a day”). The provider processes this under its own terms; we do not choose it for you and never see this data.

Chat history, memory and diary stay on the phone; “Forget everything” in Settings erases them.

How to delete your data

There is no account with us, so there is no account to delete: your data lives on your phone and — only if you turn the copy on — in your own Google Drive. Here is every place it can be and how to remove it from there.

  • On the phone. Open Settings (the gear to the right of the monster's face) → “Memory” → “Clearing” → “Forget everything” and confirm with “Yes, delete”. This erases everything the monster knows about you: facts and standing notes, topics, upcoming moments, the diary, the whole conversation with its archive, tasks and reminders, taught places, the record of trips and nights, pronunciation corrections, and the games with every result and score. It cannot be undone. You can also go item by item: a single fact, diary entry, place or upcoming moment is struck out on the same page, and “Clear chat” there deletes only the conversation. “Forget everything” leaves the names, the monster's character and the settings, the API key, the downloaded models and voices, the photos sent into the chat and the worlds of Cubes on the phone. To remove absolutely everything, uninstall the app: Android deletes all of its data with it (or, keeping the app, phone Settings → Apps → My AI friend → Storage → Clear storage). The app puts nothing into Android's own system backup, so nothing is left there. Alarms and calendar events made at your request live in the Clock and Calendar apps and are deleted there.
  • The copy on Google Drive (only if the copy was turned on in “Google and backup”). First stop the copying: Settings → “Google and backup” → “Sign out”; signing out stops the backup but does not delete what is already on Drive. Then delete the copy itself in Google Drive on the web: Settings → Manage apps → My AI friend → Options → Delete hidden app data. This removes every copy at once — the current one, the earlier ones and the month-old one — together with the API key that travelled in them. “Forget everything” on the phone does not reach Drive: the next copy simply follows the cleared phone, but the earlier copies kept there still hold the old data. To withdraw the app's access to your Drive as well, remove My AI friend from the third-party connections of your Google Account (myaccount.google.com/connections).
  • Cubes online (only after you open “Online play”). In the game, open “Online play”, press “Delete my data from the server” and confirm. This deletes your files in every world, your nickname and the hash of your secret, your messages in the chat log (except those under an open report — until the report is closed) and your worlds on the server with everything built in them; the game on your phone and its worlds stay. A ban record stays until the ban ends; the rest expires by itself on the schedule given under “Cubes online” below. The server's nightly backups keep deleted data for up to 4 more weeks, then it disappears by itself; they serve only to recover from a failure. Press the button before you uninstall the app: the server knows you only by the anonymous number kept in the app. If the app is already gone, write to ceo@ptrs.ltd with your nickname, and we delete your data ourselves.
  • The cloud brain's provider (only in cloud mode, with your own API key). What the app sent to answer you is kept by that provider under its own terms, in your account with it; it never reaches us. To delete it, use your account with the provider (by default DeepSeek) or send the provider a request under its privacy policy. Switching the brain to the phone stops any further sending.
  • Other services. Weather (Open-Meteo), place names and maps (the phone's geocoder, Nominatim, the Overpass API), web and picture search (Google, DuckDuckGo, our image-search service), the news feeds (Google News) and the radio catalogues receive single requests that the app does not tie to you — no name and no account, only the IP address they come from. We keep nothing of them, so there is nothing to delete on our side; each service keeps its own logs under its own terms.
  • Letters and reports. A reply you report with the flag in the chat, and any letter you write to us, arrive as ordinary e-mail at ceo@ptrs.ltd; ask, and we delete them.

For any request about your data, write to ceo@ptrs.ltd. As we hold no account of yours, tell us what to look for — for example, your nickname in Cubes.

Microphone and speech

Voice is recorded only while a conversation is active (after you press the mic, or the monster's button, or during a hands-free answer window). Speech is transcribed on the device by a local model (sherpa-onnx with GigaAM or Parakeet). Audio recordings are not stored and are never uploaded. The one exception, since version 1.1.56: before speaking up on its own (a reminder, a remark of its own, a notification read aloud) the companion may listen for a few seconds to check whether people are talking nearby, so as not to interrupt them (the «Do not interrupt a conversation» setting, on by default; the microphone icon lights up in the status bar meanwhile). The sound is analysed on the phone by a speech detector (Silero VAD): no words are recognised, nothing is stored and nothing is sent anywhere.

Notifications

With Notification access, which you enable yourself in the system settings, the app reads your notifications to show them on the companion's screen and, if enabled, read them aloud. If the digest is on (it is by default; Settings → Notifications), the app name, sender, title and text of a notification are sent to the brain — to the cloud provider when the brain is the cloud one — to be summarised and translated. One-time codes (SMS codes, passwords) are never sent to the model. Notifications are not stored.

Calendar, tasks and timers

With your permission the app reads the titles and times of calendar events for reminders and the morning summary, and writes to the calendar only when you ask it to add or remove an event (removal after confirmation). Events the conversation is about are included in the request to the cloud brain. Tasks and timers are stored on the phone; alarms and timers are created in the system Clock app.

Health Connect

Step count and sleep are read — also in the background — only so the companion can comment on your activity and sleep with pre-written phrases, and to answer when you ask how long you slept or how far you walked. The Health Connect records themselves stay on the phone. The monster's remark about them (“5,000 steps — shall we take a walk?”, “you slept 6 hours, take it easy”) is part of the conversation: it is kept in the chat history on the phone (and in the copy on your Google Drive, if the copy is on) and, if the brain is in the cloud, it goes to the language model provider with the rest of the conversation when you reply, so the answer makes sense. We never sell this data or use it for advertising. You can turn this off in Settings (the “Health” switch) and revoke access in Health Connect at any time.

Phone sensors

Since version 1.1.41 the app reads the phone's motion, proximity and light sensors so the companion knows where the phone is — in a pocket, on a table, face down, walking or riding, how long since it was last picked up — and picks the moment for its own remarks accordingly. The sensors are read only while “speaking first” and the “Sense of the situation” setting are on. The readings are processed on the phone, never stored, never sent anywhere and never reach the language model. The phrases for such moments are written by the model in advance, “in case”, without knowing where you actually are; out loud the companion does not describe where the phone lies or how it is carried (it may speak of the town and the road — see “Places and the road”), and its remark stays in the history like any other remark of the companion and travels to the cloud brain with it. On the move, with the “all the time” location permission granted, the position is taken only while the phone is moving: on foot every five minutes, in a car every two (on charge — precisely, once a minute), and once more where the phone comes to rest; what happens to it next is described under “Places and the road”. So that the companion does not start talking while you are busy with the phone, the app also looks at whether the screen is on, whether the phone is unlocked and which app is playing sound right now (through media sessions, which it already read in order not to open the microphone under somebody else's sound); these signs are likewise never stored and never sent anywhere.

Location

By default the weather is shown for where the phone is: an approximate location is taken about every six hours and its coordinates are sent to the Open-Meteo weather service, which does not store them and receives no identity. You can set a city by hand in Settings instead. Precise location serves the places you teach (“remember, this is my home”) and “what's nearby”: the coordinates of taught places are stored on the phone and watched by the system geofencing service, and a “what's nearby” request sends your coordinates to the Overpass API (OpenStreetMap). Background location (“all the time”) is asked for separately and only when it is needed — when you teach a place, or when the phone's sensors feel a trip that the app cannot follow without it — with a card in the chat whose button opens the system dialog. It lets the companion notice you arriving or leaving even with the app closed, and follow a trip (see below).

Places and the road

Since version 1.1.72 the companion can say a word or two on its own about a trip and about a new place. This is the “Places and the road” setting: it is on by default, can be switched off in Settings under “Monster initiative”, and works only together with “Sense of the situation” and the “all the time” location permission.

  • What is sent on its own, without your asking. The coordinates of a trip and its stops go to a geocoder to learn what the place is called — the phone's system geocoder (Google) or, if there is none, Nominatim (OpenStreetMap). At a stop in a new place (more than two kilometres from the previous one) the coordinates go to the Overpass API (OpenStreetMap) to find notable places nearby. So that the companion knows how far home is, the home point (a taught “home”, or the place where the phone spends its nights) is sent to the geocoder once, to name its town. If the weather follows your location, its place moves with you: the new town goes to the Open-Meteo weather service.
  • To the cloud brain (only in cloud mode) go the name of the town and district, notable places nearby, the speed, the time and distance of the trip and — when home is taught or guessed — the distance from home, so that it can write a short spoken line. The same place name and trip details are also included in the cloud brain's requests during a conversation while you are on the road or far from home.
  • Lines in the chat. The lines about the road and places name the town and stay in the chat history like any other remark of the companion — so they travel to the cloud brain with the history and are in the chat part of your Google Drive copy.
  • “Where am I?” When you ask, the coordinates go to the geocoder at your request even with “Places and the road” switched off — just as “what's nearby” goes to the Overpass API.
  • What stays on the phone. While “Sense of the situation” and the “all the time” location are on, the phone records — whatever “Places and the road” is set to — the trip (path, time, speed) and the last stop, where the phone spent the nights over the last few weeks (to guess home if you have not taught it), and when you left home and came back: from these the companion says “welcome back” and notices that you have arrived somewhere. With “Places and the road” it also keeps the names of the places and the spots already talked about (for two weeks). None of this leaves the phone or goes into the Google Drive copy; “Forget everything” erases it.

Web search, pictures, radio

When you ask for a web search, the query goes to Google and DuckDuckGo from your phone, the way a browser would send it. When you ask to see a picture, the query goes to Google Images from your phone; if that fails, to our own image-search service on ptrs.ltd (we do not log queries and cannot connect them to you) and through it to Openverse and Wikimedia. The chosen picture is copied into the app's temporary cache on the phone (not into the backup), and a “view original” link under it opens the page it came from. Internet radio uses the radio-browser.org and Audius catalogues and connects your phone directly to the station's public stream. None of these requests carries your identity beyond your IP address.

News three times a day

Since version 1.1.78, three times a day (about 9, 14 and 19 o'clock, within your active hours) the monster briefly tells the news: the main story of the day in your country and something new on your topics, naming the outlet. It is on by default and is switched off in Settings → “Monster initiative” → “News three times a day”. For this the phone itself requests the public news feeds of Google News (news.google.com): the country's top stories — the country is taken from the mobile network, the SIM card or the phone's language, or the one you choose in the settings — and searches for your topics, one to three words each. These requests carry no name and no account, only your IP address and the topic words. The topics are picked every two days by the cloud brain from the monster's memory (facts about your health and your close ones are not sent for this), a short summary of the recent conversation, the diary and your own messages of the last week; a topic about health, money or family is dropped on the phone before any search. In cloud mode the same cloud brain retells the headlines; in phone mode nothing goes to a model and only headlines in your language are read. The topics are listed in Settings → “Monster initiative”, where each can be removed; “Forget everything” erases them. Under each story the chat shows a link to the article on Google News.

Cubes online

Cubes, the game inside the app, is played on the phone, and a game on your own stays there. Only what playing online needs goes to our server — and only once you open “Online play” in the game. The server is our own: the same rented virtual server that hosts the ai-friend.club website, in a data centre in Vilnius, Lithuania (EU).

  • What reaches our server: an anonymous player number and a secret that the app makes up itself — linked neither to your Google account nor to your phone number (the server keeps only a hash of the secret); your nickname and your monster's name; the worlds you create on the server or move there, with everything built in them; your state in each world — where you stand, your backpack, health and books (the goals you have reached and the animals you have met); the chat messages written by you and by your monster; the reports you send; and your IP address — for limits and bans.
  • What other players see: your nickname with a short tag that tells apart players with the same nickname, your figure and your monster, the messages that passed the check, and what you build.
  • Voice. Speech is recognised on the phone; only the text of a message goes to the server. Your monster's messages are written by the brain you chose (see “Where the monster thinks”); in the online chat they go to the server too. Other players' messages are not passed to your monster's brain.
  • Moderation. Every message and every nickname is checked by an AI model on our own server (Qwen3Guard, Apache License 2.0). Nothing is sent to third parties for this. What does not pass the check is not shown.
  • Who reads it. The chat log and the reports are read only by the game's owner, Peter's Engineering, to deal with reports and broken rules; for this the owner has a closed page on our server. The game's statistics there are only totals by day, with no player numbers, and are kept for 400 days.
  • How long it is kept. Chat messages — 14 days; reports and the messages around them — 90 days; IP addresses — 30 days (under a ban — until the ban ends). A world nobody has entered for 30 days is deleted; a player's data in a world lives as long as the world. The server also backs up the worlds and the players' data every night and keeps the backups for up to 4 weeks, so anything deleted — including with “Delete my data from the server” — can stay in those backups for up to 4 more weeks and then disappears by itself. The backups are only for recovering from a failure; nothing is brought back from them otherwise.
  • Deleting. In “Online play”, the “Delete my data from the server” button (with a confirmation) deletes your data from the server; you can also write to ceo@ptrs.ltd. This deletes your files in every world, your nickname and the hash of your secret, your messages in the chat log (except those under an open report — until the report is closed) and your worlds on the server. A ban record stays until the ban ends.
  • No ads and no analytics here either; this data is not sold or shared.

Google account and backup (optional)

If you sign in with Google in Settings → “Google and backup”, the app keeps a copy of its data — the assistant's memory and diary, chat history, tasks, reminders, places, photos from the chat, settings and your AI provider's API key — in the hidden app folder of your Google Drive (the drive.appdata scope). Other apps, other people and we cannot see this folder; only the app on your phone, signed in to your account, can read it. The API key travels with the copy so that a new phone can talk straight away: on the phone it is stored encrypted, in the copy it is protected by your Google account. The copy is refreshed once a day and on demand; up to seven earlier copies and one month-old copy are kept, so a newer copy never wipes out the older ones at once. The record of your trips and nights (see “Places and the road”) stays on the phone and is not part of the copy. From your account the app learns only your email address and name, to show where the copy goes. Signing out stops the backup; the copy itself can be deleted in Google Drive on the web: Settings → Manage apps → My AI friend → Options → Delete hidden app data.

Voices and speech models

The English and Polish voice is Supertonic 3 by Supertone Inc. (BigScience Open RAIL-M license), downloaded with your consent; speech is recognised by GigaAM v3 (MIT) and Parakeet TDT (CC BY 4.0). All of them run on the phone. The full list of licences is in the app: Settings → Documents → Licences.

What we do not do

  • No ads and no advertising identifiers.
  • No analytics or tracking SDKs.
  • No sale or sharing of personal data.
  • No registration with us — apart from an anonymous number and a nickname for playing online, with no e-mail, phone number or password; the Google sign-in is optional and serves only your own backup.

The replies are written by artificial intelligence and can be wrong. Any reply can be reported with the flag button in the chat; the report goes by e-mail to ceo@ptrs.ltd.

Donations

Voluntary donations, if offered, are processed by Google Play Billing. We do not receive or store your payment details.

Children

The app is not directed at children under 13. Online play in Cubes, with its open chat, is for ages 13 and up; every message is checked by an AI, and there are reports and bans.

Changes and contact

Updates to this policy will be published on this page; see also the Terms of Use. Questions: ceo@ptrs.ltd.