TL;DR summary
We collect the minimum data needed to run Gochu your account, your messages, basic device info. We don't sell it. We don't share it with advertisers. You can export or delete everything at any time at gochu.ai/delete-account.
Who we are
"Gochu" is operated by SkyLabs LLC, a company registered in Wyoming, United States (Registration number: 2025001813009). Our registered office is at 30 N Gould St Ste N, Sheridan, WY 82801, United States. For data-protection matters, we act as the data controller of your personal information.
You can reach our Data Protection Officer at privacy@gochu.ai.
What we collect
We split the data we collect into three buckets.
1. Account & identity
- Email address required for sign-in and account recovery.
- Display name & profile picture optional; defaults to a placeholder.
- Date of birth required to verify you are 17 or older.
- Authentication tokens securely hashed; we never see your password in clear.
2. Content you generate
- Conversations the messages you exchange with AI characters, including voice notes (transcribed for moderation).
- Preferences taste tags, favourites, and characters you've blocked or reported.
3. Device & usage
- Device info OS version, app version, device model.
- Crash logs & diagnostics to find and fix bugs.
- Approximate location derived from IP, used for fraud prevention and locale (never precise GPS).
- Subscription receipts handled by Apple / Google; we receive a transaction ID, not a card number.
Why we collect it
Each category maps to a specific purpose. We rely on these legal bases under GDPR Article 6:
- Contract performance to provide the service you signed up for (chat, sync, billing).
- Legitimate interest to keep the platform safe, detect fraud, and improve the product.
- Consent for optional features (e.g. push notifications, marketing emails). You can withdraw consent at any time in Settings.
- Legal obligation to comply with applicable laws (e.g. tax, age verification).
Data retention
- Active accounts we keep your data while your account is active.
- Deleted accounts fully erased within 30 days, except where retention is required by law (e.g. tax records: 10 years for invoices).
- Backups encrypted backups roll off within 90 days.
- Moderation records when content is removed for safety reasons, we retain a minimal record (timestamp, reason) for up to 2 years to prevent re-abuse.
Your rights
Under GDPR (EU), UK GDPR, CCPA (California), and similar laws elsewhere, you have the right to:
- Access a copy of the personal data we hold about you.
- Rectify data that is inaccurate or incomplete.
- Erase your data (right to be forgotten).
- Restrict or object to certain processing.
- Port your data to another service in a machine-readable format.
- Withdraw consent for any consent-based processing.
- Lodge a complaint with your local data-protection authority (e.g. CNIL in France).
Exercise any of these by emailing privacy@gochu.ai, or use the self-serve flow at gochu.ai/delete-account. We respond within 30 days.
Security
We take security seriously. In particular:
- Encryption in transit TLS 1.3 on every connection.
- Encryption at rest AES-256 on databases and backups.
- Access control least-privilege, SSO + 2FA on all admin accounts, full audit log.
- Pen testing independent third-party penetration test every 12 months.
- Disclosure if a breach affects you, we will notify you and the relevant authority within 72 hours, as required by law.
Children
Gochu is rated and is not intended for, nor directed at, anyone under 17. We require date of birth at sign-up and use both age-gating and account-level checks. If we learn that a user is under 17, we will terminate the account and delete associated data.
International transfers
Your data is primarily processed in the European Union. When we use processors outside the EU (e.g. for support tooling), we rely on Standard Contractual Clauses approved by the European Commission, plus supplementary measures where appropriate.
Changes to this policy
We'll let you know about material changes at least 30 days before they take effect, via in-app notice and email. Minor edits (typos, clarifications) may happen without notice; the "Last updated" date at the top always reflects the current version.
Contact
For privacy questions: privacy@gochu.ai
For everything else:
hello@gochu.ai
Postal: SkyLabs LLC, 30 N Gould St Ste N,
Sheridan, WY 82801, United States