This notice explains how Wizard Software Ltd handles personal information when you visit LonelyNo or talk to a companion. It covers the free first chat as well as paid subscriptions.
Who is responsible
LonelyNo is operated by Wizard Software Ltd, registered in England and Wales, company number 16914068. We are the controller of the personal information used to run LonelyNo.
Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
For privacy questions, requests or complaints, email mark@wizardsoftware.co.uk. You do not need to have an account to contact us.
What we collect and why
- Your conversations: the messages you send and the companion's replies, the companion you choose or create, and the groups you approve. We use these to provide the conversation and let you return to it.
- Memory and preferences: saved facts, notes, topics to avoid, conversation preferences and working context. Notes can be extracted automatically from what you tell a companion. We use them to personalise later replies. Internal conversation summaries and processing records may also be stored.
- Character pictures: we store generated pictures, the character reference face, and requested outfits and settings. These appearance details, scene requests and reference images go to OpenAI for image generation and safety checks; the image request does not include your chat transcript or saved notes. An occasional automatic picture uses a scene selected from the conversation topic and your local time. You can pause these pictures. Pictures stay private to your account and thread. Deleting a picture message hides it immediately and queues file removal; deleting your account also queues removal of its character reference images.
- Your account: a random visitor identifier before sign-up; your email address and sign-in information if you register; your confirmation that you are 18 or over; and settings you choose. The current age check records a confirmation, not your date of birth.
- Payments: subscription status, payment and customer identifiers, and information needed to administer billing, cancellation and reminders. Stripe collects card details; the LonelyNo application does not store your full card number.
- Service and security information: request times, connection errors, IP addresses or security checks, and records needed to prevent abuse and investigate faults. Hosting and payment suppliers also process technical information.
- Messages to us: information you provide when contacting Wizard Software about an account, complaint or data request.
Paid plans include inbound AI voice calls. Your microphone audio goes through our Fly.io service to OpenAI to generate spoken replies. We request that OpenAI does not store the session. LonelyNo does not save audio recordings. During a call we process temporary speech transcripts for safety and continuity; we store call times, duration and allowance use. Calls read the selected companion’s saved notes and earlier conversations. After a companion call, we process a summary for that companion so text and future calls can pick it up. Successful processing copies are cleared, except high-risk copies retained for up to 90 days; failed processing copies expire after seven days. Summaries follow the saved-memory deletion controls. We do not save a full call transcript in your visible chat. The separate product-questions line does not receive companion transcripts or saved notes.
You choose what to put in a conversation. You do not need to provide medical records, identity documents or other sensitive information to use LonelyNo. Messages can nevertheless reveal health, beliefs, sexuality or information about other people; that content is processed as part of the conversation too. Please avoid sending other people's private details unnecessarily.
A payer does not gain access to the subscriber's conversations.
How memory and sharing work
What they remember lets you view, add, edit and forget saved notes. A companion can save useful details automatically, but AI can misunderstand or record something incorrectly. You can correct those notes at any time.
Notes belong to the selected companion or group. Shared facts you approve can be used across your companions. A group starts only after you approve who joins and the starting context to share. Private one-to-one transcripts are not automatically copied into a group or another companion's conversation.
The memory list is not a complete copy of all information held about your account: messages, billing records, settings and internal processing records are separate. Deleting a note removes it from the saved notes used for future replies; it does not erase the message where you originally said it. Deleting a message does not automatically erase a note already extracted from it. For a fuller copy or deletion request, use the controls below or contact us.
Why we use information
We use account information, conversations and memory to provide the service you request and administer your subscription: performance of our contract with you, including steps you ask us to take before paying.
We use limited technical and account information for our legitimate interests in keeping the service secure, preventing misuse and resolving faults. We keep records where needed to meet legal obligations, including accounting and responding to lawful requests.
Optional marketing uses your consent, which you can withdraw. Necessary sign-in, payment, cancellation and service messages are separate from marketing. We do not sell conversations or use them to target advertising.
AI generates replies and suggests memory notes automatically. Those suggestions can be wrong. They are not a medical assessment or a decision about your legal rights. You can amend the visible notes and ask a person at Wizard Software to review a concern.
Optional product feedback
If you choose Give feedback, we store the fixed option you select, the time and a request reference under your account. This does not include message text, saved notes or the identity of a companion or group. We use it to improve the service and prevent duplicate reports, not for advertising or to infer personal circumstances. Feedback is removed by the daily cleanup after 90 days, or when your account is deleted.
Optional measurement
With your consent, Google Analytics and Google Ads help us understand which public pages and advertisements lead to a first conversation or purchase. Measurement is off until you allow it. We send limited page and campaign details, browser and click identifiers, a public-story companion-link event, a successful first-reply event, checkout starts and confirmed purchase amounts with scrambled transaction identifiers. We do not send messages, saved notes, private page addresses, personal topics, email addresses or account identifiers to these services. We do not use conversation content for advertising or enable personalised advertising audiences.
Google receives technical connection information when measurement is enabled and may process it outside the UK. Optional measurement uses consent, which you can withdraw through Cookie choices. Event-level Analytics retention is set to two months; aggregated reports may be retained longer. The Cookie notice explains browser storage and how to change your choice.
Who processes the information
We use suppliers to operate LonelyNo. They receive the information needed for their part of the service:
- Supabase: database storage and sign-in.
- Vercel and Fly.io: website and chat-service hosting, delivery and technical operations.
- OpenAI: generating companion replies and processing information needed for conversation and memory.
- Groq: background processing for memory and safety-related checks.
- Stripe: checkout, payments, subscriptions and fraud prevention.
- Resend: transactional emails and any email updates you request.
To answer you, a model provider receives the relevant messages and context, including selected saved notes. We do not send a whole year of history on every reply. These suppliers process conversation content to operate the service. Authorised people may need access to resolve a fault, handle a request or investigate abuse.
OpenAI states that API content is not used to train its models by default, unless a customer opts in. Its standard records for abuse prevention can be retained for up to 30 days, with exceptions. Groq also describes limited retention for reliability and abuse investigations. We have not verified zero-retention settings for every provider used by LonelyNo, so this notice does not promise zero retention. See OpenAI's data controls and Groq's data handling.
Our application infrastructure is configured in London where available, but suppliers may process information outside the UK, including in the United States. The applicable protection depends on the supplier and service; do not assume a UK-only location. You can contact us for information about the arrangements and safeguards applying to your data.
We may also disclose information where required by law or necessary to deal with a legal claim. A person paying for a subscription does not thereby gain access to the subscriber's conversations.
How long information is kept
- Active accounts: conversations, notes and settings are kept so you can return to them, until you remove them or delete the account, subject to the exceptions below.
- Unused free chats and cancelled accounts: a daily retention job schedules application data for deletion after about 12 months (360 days) without recorded conversation activity. It uses the later of recorded activity and cancellation. Cancellation alone does not immediately delete your conversations.
- Temporary processing copies: separate transcript copies used to extract memory are cleared after successful processing. Failed processing copies expire after seven days; copies flagged as high risk may be retained for up to 90 days. This is separate from the conversation you can still see in your thread.
- Billing, security and legal records: some information may remain for accounting, fraud prevention, legal claims or other legal duties. A minimal email-suppression record may be kept to honour a request not to contact you.
- Supplier systems and backups: deletion from the active application does not mean every supplier record or backup is erased at the same instant. Those records follow the supplier's retention and applicable legal requirements.
We do not promise that all information disappears immediately or that deleting a visible note deletes every historical copy. Contact us if you need a specific explanation of what remains after a request.
Your choices and rights
You can edit notes in What they remember, cancel your subscription in your account, and request deletion through Delete my data. Cancellation stops renewal; deletion removes the account's application data and ends its subscription. These are different actions.
You can delete a free chat from the browser you used, without first creating an account. Clearing browser cookies is not the same as deleting server-side data, and can remove the identifier needed to find an unsigned-in chat.
You may ask for access to your personal information, correction, erasure, restriction, portability where applicable, or object to processing based on legitimate interests. Where processing depends on consent, you can withdraw it without affecting the lawfulness of earlier processing. Rights may have legal exceptions.
Email mark@wizardsoftware.co.uk in your own words. We may need information to verify that the request is yours. We normally respond within one month; if a permitted extension is needed, we will explain it within that month. Requests are normally free.
You can complain directly to the Information Commissioner's Office, the UK's data-protection regulator, whether or not you have contacted us first.
Cookies and changes
Our Cookie notice explains sign-in cookies, age confirmation, local preferences and the public-page offline cache.
If we change how we handle personal information, we will update this notice and its date. We will bring material changes to your attention where required. Questions about this notice go to mark@wizardsoftware.co.uk.