Privacy Policy
Last updated June 30, 2026
This Privacy Policy explains how TheInfluence, Inc., a Delaware corporation (“TheInfluence,” “we,” “us,” “our”), collects, uses, shares, and protects your information when you use Prelulu (the “Service”). Prelulu is an adults-only (18+) service where you text with fictional AI characters and place real-time AI voice and video-avatar calls. By using the Service, you agree to this Policy and to our Terms of Service.
We know these conversations are often personal and intimate. We treat that data with the seriousness it deserves, and this Policy describes the choices and controls you have over it.
1. Who we are and how to reach us
TheInfluence, Inc. is the controller of your personal information. You can reach us at:
- Privacy questions and requests: privacy@prelulu.ai
- Legal: legal@prelulu.ai
- Mailing address: TheInfluence, Inc., 2261 Market Street, STE 36461, San Francisco, CA 94114, United States
2. Scope
This Policy applies to the Prelulu website and apps and to all information we process about people who use the Service. It does not apply to third-party websites or services that we do not control.
3. Information we collect
The categories below map to the formal categories used under California and other U.S. state laws in Section 14.
- Account information. Your email address, display name, avatar, and — if you sign in through a third-party sign-in option — the account identifier it gives us. We never receive your password for that third-party account.
- Content you create. The messages you send to characters; the characters you bookmark; your scene-game play; the AI “keepsake” images you keep; comments you post; and the taste preferences you set. Because the Service is built around romantic and companionship-themed conversations, this content can be personal and intimate, and may reveal information about your sex life or sexual orientation. We treat this as special-category / sensitive information — see Section 6.
- Derived memory. To give your conversations continuity (so a character can remember things you’ve told it), we extract and store facts derived from your conversations. This is stored in our own systems.
- Usage and log data. Actions you take in the Service, timestamps, and your browser and device type — used to operate, secure, and improve the Service and to prevent abuse.
- Approximate location. When you sign up, we derive your country only from your IP address. We do not store your raw IP address, and we do not collect precise or GPS location.
- Payment information. When you buy a plan or credits, our third-party payment processor handles your card details. We do not store full card numbers. We receive limited information such as your subscription status and the last four digits of your card, which we use to manage your billing.
- Live-call data. When you place a voice or video-avatar call, real-time audio (and, for avatar calls, audio and video) is processed to power the call as it happens.
4. Where this information comes from
- From you — when you create an account, set up your profile, chat or call, post content, set preferences, or contact support.
- Automatically — from your use of the Service (usage and log data, device type, country-level location from your IP at signup).
- From third parties — from a third-party sign-in option if you choose to use it, and from our payment processor in connection with your payments.
5. How and why we use your information, and our legal bases
If you are in the EEA, UK, or Switzerland, the General Data Protection Regulation (GDPR) requires us to have a “legal basis” for each way we use your information.
| What we do | Why | Legal basis (EEA/UK) |
|---|---|---|
| Run the Service: deliver your chats and calls, generate AI responses, maintain conversation continuity/memory, run your account | To provide the service you signed up for | Contract (Art. 6(1)(b)) |
| Process payments, memberships, and credits | To take payment and give you what you paid for | Contract (Art. 6(1)(b)) |
| Process your intimate / sensitive conversation content to generate your responses and continuity | Because this can reveal sensitive information, we rely on your explicit consent (see Section 6) | Explicit consent (Art. 9(2)(a)), on top of contract |
| Secure the Service, prevent fraud and abuse, enforce our Terms, keep the Service reliable | Our legitimate interest in a safe, working service | Legitimate interests (Art. 6(1)(f)) |
| Understand how the Service is used and improve features and characters | Improving the product (and, for analytics cookies, your consent) | Legitimate interests (Art. 6(1)(f)); consent for analytics cookies (Art. 6(1)(a)) |
| Detect signs of self-harm and surface crisis resources | Our legitimate interest in user safety | Legitimate interests (Art. 6(1)(f)) |
| Keep records and meet tax, accounting, and other legal duties | To comply with the law | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have weighed those interests against your rights and concluded the processing is proportionate; you can object at any time (see Section 13). Where we rely on consent, you can withdraw it at any time, without affecting processing that already happened.
6. Intimate conversations and sensitive information
Prelulu’s conversations are romantic and companionship-themed. Because of this, the content you create — and facts the service derives from it — can reveal information about your sex life or sexual orientation. Under the GDPR this is “special category” data; under California and other U.S. state laws it is “sensitive personal information.”
- We process it only to run the Service — to generate your own responses and keep your conversations continuous. We do not use it to infer characteristics about you for advertising, and we do not sell or share it.
- For users in the EEA, UK, and Switzerland, we ask for your explicit consent to process this sensitive information, separately from your general acceptance of these terms. You can withdraw that consent at any time — it is as easy to withdraw as it was to give. Withdrawing may mean we can no longer provide parts of the Service that depend on this processing.
- You are never required to share sensitive details, and you should share only what you are comfortable sharing.
7. How we share your information
We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising. We disclose information only as described here.
Service providers acting on our behalf. We use service providers, each under a contract that limits them to processing data for us, in the following roles:
- cloud hosting, database, media storage, and security/content-delivery;
- a payment processor (for purchases and subscriptions);
- a third-party sign-in option (only if you choose it);
- AI model providers — used solely to generate the responses and media you ask for (text, images, and voice);
- a real-time calling provider (to power live voice and video-avatar calls); and
- a product-analytics provider (consent-gated for users in the EEA/UK and disabled for anyone whose browser sends a Global Privacy Control signal).
We can provide the current list of the specific service providers we use on request, at privacy@prelulu.ai. We send the content of your messages to AI model providers only to generate the response or output you asked for.
Legal and safety. We may disclose information when required by law, or where we reasonably believe it is necessary to protect the rights, safety, and property of users, the public, or us.
Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.
8. We do not sell or share — and we honor Global Privacy Control
We have not sold your personal information, and we have not “shared” it for cross-context behavioral advertising, in the preceding 12 months, and we do not do so. We also do not use or disclose your sensitive information to infer characteristics about you.
Separately, we honor the Global Privacy Control (GPC) browser signal as an opt-out of non-essential analytics: if your browser or an extension sends GPC, we automatically suppress analytics for you.
9. Cookies and similar technologies
We use cookies and similar technologies to keep you signed in, remember your preferences, and — with your consent where required — measure how the Service is used. Non-essential analytics do not run until you accept, and we honor Global Privacy Control as described above. You can re-open your privacy choices at any time using the “Privacy choices” control in our website footer. For full details, see our Cookie Policy.
10. How long we keep your information
We keep personal information only for as long as we need it. Our general approach by category:
- Account information — for as long as your account is active.
- Conversation content and derived memory — until you delete the content or close your account.
- Sensitive conversation content — kept only while needed to provide your continuity, and removed when you delete the content or your account.
- Usage and log data — for a limited period needed to operate and secure the Service.
- Payment and billing records — for as long as required to meet our legal, tax, and accounting obligations.
When you delete your account, we delete or de-identify your personal information, except where we must keep certain records by law.
11. Security
We use technical and organizational measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you and the relevant authorities as required by applicable law.
12. International data transfers
We are based in the United States, and we and our service providers process information in the United States and other countries. If you are in the EEA, UK, or Switzerland, this means your information is transferred outside your home country. When we do this, we put in place the safeguards required by law — such as the European Commission’s Standard Contractual Clauses (with the UK Addendum for UK data), or reliance on an applicable adequacy decision or framework. You can ask us for more detail at privacy@prelulu.ai.
13. Your rights
You can exercise the rights below by emailing privacy@prelulu.ai, or by using the controls in the app. You can update your account details in your settings, and you can delete your account and the data in your account at any time from the app’s settings page. We will not discriminate against you for exercising any privacy right.
If you are in the EEA, UK, or Switzerland, you have the right to:
- access the personal information we hold about you;
- correct inaccurate information;
- erase your information (“right to be forgotten”);
- restrict or object to certain processing, including processing based on our legitimate interests;
- port your information (receive a copy in a portable format);
- withdraw consent at any time, where we rely on consent; and
- lodge a complaint with your local data protection authority (in the UK, the Information Commissioner’s Office). We’d appreciate the chance to address your concern first.
We will respond to your request within one month, as required by the GDPR.
If you are in California or another U.S. state with a comprehensive privacy law, you have the right to:
- know and access the categories and specific pieces of personal information we collect;
- delete your personal information;
- correct inaccurate personal information;
- obtain a portable copy of your information; and
- opt out of any sale or “sharing” of personal information (we do neither) and to limit the use of sensitive personal information (we already use it only to provide the Service).
We will respond to California requests within 45 days (extendable as the law allows). Several other U.S. states (for example Virginia, Colorado, Connecticut, Oregon, Montana, and Texas) give similar rights and require your opt-in before sensitive data is processed; the explicit-consent approach in Section 6 is how we honor that. Verification: to protect your information, we may need to verify your identity before fulfilling a request, typically by confirming control of your account email.
14. California & U.S. state privacy disclosures
This section provides the specific disclosures required by the California Consumer Privacy Act (as amended by the CPRA) and is a useful reference for residents of other U.S. states. For each category we collect it from the sources in Section 4, use it for the purposes in Section 5, and may disclose it to the categories of recipients in Section 7. We have not sold or “shared” any category.
| Statutory category | Examples in Prelulu | Sold / shared? |
|---|---|---|
| Identifiers | Email, display name, third-party sign-in identifier | No |
| Customer records | Account profile, billing status, last-4 of card | No |
| Commercial information | Plans and credits purchased | No |
| Internet / usage activity | Actions, timestamps, browser/device type | No |
| Geolocation | Country only, derived from IP at signup (raw IP not stored) | No |
| Audio / audiovisual | Live voice and video-avatar call data, processed in real time | No |
| Sensitive personal information | Intimate conversation content (may reveal sex life or sexual orientation), derived memory | No |
| Inferences | Memory and taste preferences derived from your activity | No |
Sensitive personal information. We use and disclose it only to provide the Service you requested and for related security and legal purposes — never to infer characteristics about you for advertising. Because we limit our use to these permitted purposes, we are not required to offer a separate “Limit the Use of My Sensitive Personal Information” link, but you may still ask us about this use at privacy@prelulu.ai. Non-discrimination: we will not deny you service, charge a different price, or give a lower quality of service because you exercised a privacy right.
15. Automated processing
We use AI to generate conversational and creative responses and to derive memory so characters can keep context. This does notinvolve decisions that produce legal or similarly significant effects about you, and we do not engage in the kind of solely automated decision-making that the GDPR restricts. The Service presents its characters as fictional AI throughout the experience, so you always know you are interacting with artificial intelligence.
16. AI and your conversations
We use AI model providers to generate the text, images, voice, and video you experience, and we send your message content to them solely to generate the output you asked for. We do not use the content of your conversations for advertising or to build advertising profiles about you.
17. Children and 18+
The Service is for adults 18 and older. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. This companion experience may not be suitable for some minors. If you believe a minor has provided us information, contact us at privacy@prelulu.ai and we will delete it.
18. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect means you accept the revised Policy.
19. Contact us
Questions about your privacy? Email privacy@prelulu.ai. Prelulu is operated by TheInfluence, Inc., a Delaware corporation located at 2261 Market Street, STE 36461, San Francisco, CA 94114, United States. If you are in the EEA or UK and cannot resolve a concern with us directly, you may also contact your local data protection authority.