Privacy policy
Your conversations deserve care. This page explains what the application stores and how its features use that information.
Information stored
Charava stores your email, display name, profile, a salted password hash, and session records. It also stores your characters, personas, conversations, message variants, memories, likes, reports, and usage counters. Account passwords are never stored in plain text.
How AI replies work
To generate replies, the application sends your message, a limited portion of chat history, the character definition, your selected persona, pinned messages, and conversation memory to OpenAI. The integration sets store:false for Responses requests. Provider processing and retention remain subject to OpenAI's policies. Text may also be sent to OpenAI moderation. Avoid sharing sensitive information in chats.
Other service providers
Hosting and database providers process data needed to run the service. Resend delivers verification and password-reset emails. If you subscribe, Stripe processes payment details; Charava stores customer and subscription identifiers but not your card number. Browser dictation and read-aloud may use your browser or device vendor's services. External avatar URLs can cause your browser to contact that image host.
Visibility and moderation
Your conversations and personas are private to your account. Public character profiles are visible to others, and unlisted profiles are accessible through their link. Character definitions are not returned through public profile APIs. Reporting a message makes that message available to moderators along with your reason. Moderators can hide reported characters.
Cookies and preferences
The app uses an HttpOnly session cookie to keep you signed in and local storage for your appearance preference. This version does not include advertising or analytics trackers.
Your choices
Export your data or delete your account in Settings. Deletion removes application records and cancels an active subscription. Provider backups and payment records may follow separate retention requirements. For access or privacy questions, contact the operator using the address below.
Contact
The public support address will be added before launch.