Privacy Policy

1. Overview

This Privacy Policy explains how Iris Light Within LLC (“Iris,” “we,” “us,” or “our”) collects, uses, shares, stores, and protects information when you use the Iris website, web app, mobile apps, support channels, and related services (collectively, the “Services”).

Iris is an adult-focused artificial intelligence service for personal reflection and everyday support. Iris is not a human, therapist, medical provider, lawyer, financial adviser, or emergency service.

2. Information we collect

Account and contact information

Depending on the sign-in method and features you use, we may collect an email address, telephone number, login credentials or authentication tokens, age confirmation, country or region, subscription status, and information you send to support.

Conversation and feature content

We process the text you send to Iris and the responses generated for you. When offered and used, this may also include voice transcripts or recordings, photos, journal entries, saved reflections, reminders, and saved memories. Memory and automatic saving are described below. Website story submissions may include a written account, images, and video links.

Technical and usage information

We may collect device type, operating system, browser, app version, IP address, approximate region derived from IP, session and feature activity, crash reports, security logs, anti-abuse signals, and diagnostic data.

Payment information

Apple, Google, Stripe, or another disclosed payment provider may process purchases. Iris generally receives transaction identifiers, subscription status, plan, renewal information, and limited billing metadata—not full payment-card or bank-account details.

3. Sensitive information you choose to provide

Conversations may involve health, grief, trauma, relationships, finances, religious or philosophical beliefs, sexuality, unusual experiences, or other deeply personal subjects. You decide what to share.

By using the Services, you acknowledge that you may voluntarily provide sensitive personal information and authorize its processing as described in this Policy so Iris can respond and provide the features you request.

4. How we use information

• Provide conversations, accounts, saved history, user-approved memory, reminders, support, and other requested features.
• Authenticate users, count free questions, manage subscriptions, and prevent duplicate or abusive trial use.
• Secure the Services, investigate fraud or misuse, diagnose technical problems, and maintain reliability.
• Respond to support, privacy, account-deletion, and legal requests.
• Measure high-level product performance and improve design, safety, accessibility, and quality.
• Comply with law, enforce our Terms of Use, and protect users, Iris, and others.

Iris does not make legal, medical, credit, employment, housing, insurance, or other consequential decisions about users.

5. AI systems and service providers

Iris uses automated systems and third-party infrastructure to generate responses and operate the Services. This may include AI model providers, cloud hosting, authentication, databases, analytics, crash reporting, payment processing, email, customer support, and security services.

Conversation content and related context may be transmitted to OpenAI to generate responses and process speech. Iris uses DigitalOcean for backend hosting, databases, cache and file storage; Vercel for frontend hosting; Cloudflare for DNS, the authenticated gateway and Turnstile abuse protection; Stripe for payment processing; Twilio SendGrid for transactional email; and Sentry for error monitoring. These services receive the information needed for their respective functions; this list does not imply that every provider receives conversation content or that provider copies follow identical deletion schedules.

AI-generated outputs may reproduce details you included in your input or approved memory. Outputs can be inaccurate, incomplete, outdated, or inappropriate and should not be treated as verified facts.

6. How information is shared

We may share the minimum information reasonably necessary with service providers that help operate Iris, including AI, cloud, database, authentication, communications, analytics, safety, payment, and support providers.

We may also disclose information when required by valid legal process; to investigate fraud, abuse, or security incidents; to protect rights or safety; in a business transaction subject to appropriate safeguards; or with your direction or consent.

We do not sell personal information. We do not disclose private conversations to advertising partners for behavioral advertising.

7. Automated safety systems are not monitoring

We may use automated systems to detect possible safety, abuse, fraud, or policy concerns. Iris does not provide continuous human monitoring, real-time intervention, or emergency response. Automated detection may be incomplete or wrong.

If you are in immediate danger in the United States, call 911. If you or someone else may be at risk of suicide or self-harm, call or text 988. Outside the United States, contact local emergency or crisis services.

8. Memory and personalization

Memory and automatic saving are on by default for eligible accounts and guest sessions. Iris may automatically save useful details from your chats for future conversations. You can view and delete saved memories in Privacy & Data, or turn Memory off to stop its use and future saving. Turning Memory off does not erase items already saved.

Delete removes the selected saved memory and its stored earlier versions. Clear or Reset all memory removes all saved, inactive and pending memories for that account. Deleted memory text is not kept as a deletion marker, and delayed memory-saving work cannot restore it. These controls do not delete your conversations: text still present in a chat may remain part of that chat’s context. Delete the conversation separately if you want that text removed too. You may save a new memory later.

Sensitive-memory settings control whether sensitive items are blocked, require confirmation or may be saved. The default asks for confirmation. Automated memory can be inaccurate; review saved items and delete anything you do not want retained. Iris’s safety restrictions still apply.

9. Retention and deletion

Guest content and trial eligibility have separate lifetimes. Deleting guest data removes its conversations, messages, memories, summaries and embeddings; it does not restore used questions or a claimed feedback bonus. For new trials under this policy, we retain a separate browser-linked entitlement record for 730 fixed days from the first grant: a random record identifier, used-question count, feedback-bonus status and amount, grant and expiry dates, and policy version. The record contains no chat content, memories, summaries, embeddings, email address or device fingerprint. It is not anonymous: a secure cookie can link it to this browser. Deletion, session expiry and later use do not restart its clock. Existing records subject to an explicit 30-day promise keep their original deadline. Expired records are removed; a still-recognized expired trial requires account verification and the existing eligibility checks, not an automatic new trial. Clearing cookies or using another browser can prevent recognition. Browser recognition does not establish a unique person, and verified email establishes an account boundary rather than unique personhood.

Registered accounts, including free-trial accounts and accounts whose paid subscription has ended, keep their chats until you delete them or your account. Subscription cancellation does not start a chat-expiry clock. Guest content follows the separate inactivity rule below. Earlier explicit deletion deadlines are preserved.

When Privacy & Data shows the one-year policy, guest chats, memories and summaries are saved for 365 days after your last activity. Login credentials expire separately after 30 days; returning requires your saved private recovery link or a linked account. Explicit deletion removes content sooner and revokes recovery. Previously promised shorter deadlines remain unchanged. The separate trial record grants neither content access nor a new allowance. Registered accounts, including free-trial accounts, keep their chats indefinitely unless you delete the chats or your account. Chats transferred from a guest session leave the guest-expiry schedule.

Account deletion closes access and starts a retryable deletion process, including cancellation of linked recurring billing. A payment-provider or storage failure can leave deletion in progress; an accepted request is not confirmation that every step has finished. We do not report completion until the required steps are confirmed. Deleted chats, messages, memories, summaries and embeddings are not retained for fraud prevention or under the limited-record categories below.

From the original scheduled account-closure date, limited financial records are retained for 2,555 days, fraud and eligibility evidence for 730 days, minimized security evidence for 90 days, consent evidence for 2,555 days, delivery-suppression markers for 30 days, and scrubbed account references for 2,555 days. These support transactions and disputes, abuse prevention, security, proof of choices, prevention of unwanted delivery, and record integrity respectively. They do not include deleted private content. Retries and later activity do not restart these clocks. Scrubbed references are not necessarily anonymous. The browser trial record has its separate fixed clock from the first grant, not account closure.

New support messages, feedback and Unusual submissions accepted in the Production service are retained for 30 days from first acceptance, including failed or undelivered submissions. Retries, delivery attempts and claiming a guest account do not extend that deadline. At expiry, the submission body, reply email address and translations are removed; only separately approved minimal records may remain under their existing retention rules. This does not extend earlier deletion deadlines or change retention for existing submissions, staging data, chats or memories. Mailbox, backup and provider copies follow the separate boundaries below.

Our deletion targets are seven days for backup copies and 30 days for Iris-controlled inbox, archive and trash copies, measured from deletion or expiry. Restored data must have deletion requests reapplied before it is served. For nonfinancial provider copies, the deletion target is 30 days, subject to the provider’s actual controls and disclosed exceptions. This is not a promise that every external copy is erased within those targets: for example, SendGrid may retain email metadata for up to 37 days and some security records for one year. We must verify provider and backup deletion rather than treating an Iris database change as proof. Copies in a recipient’s own mailbox are outside Iris’s control.

To request account deletion in Iris, open Settings, then Account, then Delete Account. You can also request deletion by emailing app@irislightwithin.com. We may need to verify your identity before fulfilling the request.

10. Your rights and choices

Depending on your location, you may have rights to request access, correction, export, deletion, restriction, objection, or information about how data is used and shared. You may also have the right to appeal a denied request and use an authorized agent.

• Control or remove saved memories.
• Delete individual conversations or the entire account where available.
• Opt out of marketing communications.
• Decline optional analytics or cookies where required.
• Decline any optional content-contribution or training program.

Use Privacy & Data in Iris or email app@irislightwithin.com. We may need to verify identity before fulfilling a request. We will not discriminate against you for exercising an applicable privacy right.

11. Cookies and analytics

The website and web app may use essential cookies or similar storage for login, security, preferences, trial continuity, and basic operation. Optional analytics or marketing technologies, if added, must be disclosed and presented with consent controls where required.

Browser “Do Not Track” signals are not universally standardized. The final product should describe whether it responds to Global Privacy Control or other legally recognized opt-out signals.

12. Security

We use administrative, technical, and organizational safeguards designed to protect information, such as encrypted transmission, access controls, authentication, logging, vendor review, and data minimization. No system is completely secure.

Users are responsible for protecting their credentials and devices. Iris may offer Face ID, Touch ID, device-passcode protection, or similar features where supported.

13. International processing

Information may be processed in the United States and other locations where Iris or its providers operate. Where required, Iris will use appropriate contractual and legal safeguards for international transfers.

14. People 18 and over

The Services are intended only for people 18 and over. We do not knowingly offer Iris to children. If we learn that a person under 18 provided personal information, we will take appropriate steps to restrict the account and delete information as required.

15. Contact