Privacy Policy — Companion by AI Exodus
Companion is made by AI Exodus, an independent developer based in France. This page explains what the apps store about you, why, where it lives, who else sees it, and how to remove it. We never sell your data. The desktop app and the website show no ads and use no analytics or tracking SDKs; the free plan of the Android app shows ads, as described below.
What the product does
The desktop app watches your World of Warcraft session on your own PC and talks to you as the character you are playing. The phone app and the website let you keep talking to that character away from the game and look at its sheet, quests, gear and recent sessions. To do that, some game information has to travel from your PC to our servers and to your phone.
Data we collect
- Account. Your email address and, if you sign in with Google, the name and email Google shares with us. Passwords are handled by Amazon Cognito; we never see them.
- Character data. Character name, realm, class, race, level, experience, gear, bags, talents, quest log and objective progress, achievements and short summaries of your play sessions. The desktop app uploads these; nothing is read from the game client except what the free add-on writes to its own saved-variables file, what it shows on screen for the app to read, and the game's own chat and combat logs.
- Conversations. The messages you send to your companion in the app or on the website, and the lines it says to you in the game, so the conversation can continue on another device.
- Other players' text. The game's chat log on your PC contains what other players say near you, in your party and in your guild. The desktop app reads it so your companion can react, and short excerpts can end up in your own session summaries and conversation history. They are stored under your account only and are never published by us.
- Portraits and pictures. If you take a character portrait or have a picture painted for your gallery, the image is stored so the apps can show it. These images are public files: anyone who has the address of one can open it, and portraits appear next to your character wherever you choose to show it. Pictures you keep for your session book are private to your account.
- Reports and suggestions. When you tell us the companion got something wrong, or send an idea, we store what you wrote, the line concerned and its game context (game, zone, character name, race, class, level, language). Our team reads these.
- Purchases. Your subscription tier and coin balance. Payments are processed by Stripe (website and desktop app) or by Google Play (Android app); card details never reach our servers.
- Security and usage records. Each request that uses our AI capacity is recorded with its time, your account id and email, your IP address and the kind of request, to prevent abuse and to resolve billing questions. These records are kept for up to 13 months. Standard server logs (IP address, time, request) are kept for up to 90 days. When the installer is requested from our download server, the request is recorded (IP address, country, time, the file, and the browser or app that asked) to detect and stop abuse such as automated mass downloading; these records are kept for up to 30 days, and an address that downloads far too often is refused for a few minutes.
- Your screen (desktop app). To follow your game the desktop app reads a small data strip the free add-on draws in the corner of the game window, and it can take a picture of the game window when you ask it to look at what is happening or when a moment is saved to your session book. Pictures taken to look are described by a vision model running on your own PC and are never uploaded — we do not receive them, and the app is shipped pointing only at your own machine. The only images that reach us are the ones you keep: a character portrait you take, or a shot you save into your session book.
The apps do not access your contacts, location, photos or other apps, and the phone app does not use the microphone. The desktop app's voice features — hearing you and speaking — run on your own PC; your voice is not sent to us.
Some of the desktop app’s records never leave your PC at all. Its session book, the screenshots kept with it and a technical journal used for troubleshooting are written to Documents › Companion Sessions on your own machine. You can read or delete that folder yourself at any time; deleting it does not affect your account.
What you can choose to make public
- The Hall. If you join the Hall, anyone — including visitors who are not signed in — can see the name you chose, your feat count and, for each of your characters, its name, realm, race, class, level, whether it has died, and its portrait. A character you mark "Private profile" is left out. You can leave the Hall at any time, and your entry is deleted.
- Shared personas. If you share a persona card, the character's name, race and class, the personality text and lines you wrote, and your Hall name become public, together with how many people liked or adopted it.
- Lorekeepers. When we approve one of your reports, it counts towards a public ranking shown under your Hall name (or as "A player" if you have not joined the Hall), and may be thanked in our public Discord server under that name.
None of this happens unless you choose it.
Advertising (Android app, free plan only)
Accounts on the free plan see ads in the Android app, served by Google AdMob. AdMob uses your device's advertising ID and information about the ad request; where the law requires it, the app asks for your consent before any ad is shown, and you can reset or delete the advertising ID in your Android settings. Paid plans show no ads. Whether you are on a paid plan is decided by our server, not by the ad provider. The desktop app and the website never show ads.
How we use it
- To run the companion: generate its replies, remember your sessions, show your sheet and quests on your phone.
- To keep your account working across the desktop app, the phone app and the website.
- To grant what you paid for, and to keep the service from being abused.
- To improve what the companion knows, from the reports you send.
- To fix bugs you report — we may look at your own account's data when you ask for help.
Who processes it
- Amazon Web Services (Paris region, eu-west-3) — accounts, database, file storage, servers, email. Every picture you upload or have painted is checked automatically for prohibited content (explicit nudity, gore, hate symbols) before it is stored; the check runs on Amazon Rekognition in AWS's Ireland region (eu-west-1), inside the EU, and the picture is not kept there. A picture that fails the check is refused and never stored.
- Google — the Gemini API generates the companion's replies from the context above; Sign in with Google if you choose it; Google Play for purchases made in the Android app; Google AdMob for ads on the Android app's free plan.
- Stripe — payments made on the website and in the desktop app.
- Discord — our team is notified in private staff channels when someone signs up (a shortened form of the email address, such as
jo…@example.com), when a subscription starts, when the installer is downloaded (the IP address, country and kind of browser or app, for the abuse protection described above), and when a report or suggestion is filed (its text, its game context, and your Hall name or a short account reference). Thanks for approved reports are posted in our public community server.
The desktop app also fetches public game reference material directly from your PC: talent descriptions from Wowhead, talent data from Raidbots, class artwork from Blizzard, and guide videos from YouTube when you ask for one. Those sites see your IP address and what was requested, and nothing about your account.
These providers process data only to provide their service to us. We do not share your data with anyone else, and we never sell it.
Retention and deletion
Your data is kept while your account exists. Conversation history is pruned automatically to the most recent lines per character. You can delete individual characters from the account page — that removes the character, its conversations, its portrait and its gallery at once — and you can delete your whole account yourself: sign in on the account page, choose Delete account at the bottom and type DELETE (the account deletion page has the details, and an email route if you can no longer sign in). Everything — every character, conversation, portrait, picture, session summary, your place in the Hall and your sign-in — disappears from the apps and the website immediately. A private backup is kept for 30 days in case the deletion was a mistake or not made by you, then it erases itself; after that nothing remains except an anonymous record that a deletion happened. An account with a running subscription cannot be deleted until the subscription is cancelled, because deleting the account would not stop the payments (Stripe: "Manage plan" on the account page; Google Play: Subscriptions in the Play Store), or tell us and we will. Payment records stay with Stripe or Google Play as the law requires. Messages already posted to our staff channels on Discord are removed by hand as part of a deletion request.
Children
The product is not directed to children under 13 (or the age of digital consent where you live), and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
Security
Data travels over HTTPS and is stored in access-controlled AWS services. Each account can only read and write its own records, and what you have paid for is recorded by our servers, never by the app. No system is perfectly secure; if we learn of a breach affecting you we will tell you.
Your rights
Under the GDPR and similar laws you can ask for a copy of your data, correct it, delete it, or object to how it is used. Most of this you can do yourself from the account page; for anything else, contact us and we will answer within 30 days. You can also complain to your data protection authority (in France, the CNIL).
Changes
If this policy changes in a way that matters, the date at the top moves and the app tells you on next launch.
Contact
Email contact@ai-exodus.com.