Effective date: July 2, 2026
FAM is an AI companion service operated by Kaleidoco, Inc. (“Kaleidoco,” “we,” “us,” or “our”). This Privacy Policy describes how we collect, use, store, disclose, and protect personal data when you use the FAM application, website, browser extension, and related services (collectively, the “Service”).
By creating an account or using the Service you agree to the practices described in this policy. If you do not agree, please do not use FAM.
FAM is built on a custodial storage model: we store your data on your behalf and under your control. Your conversations, memories, and personality profile exist solely to deliver the companion experience you signed up for. We are the data custodian; you remain the owner.
We do not sell your personal data. We do not use your personal data to train foundational AI models. We do not share your data with advertisers.
When you create an account we collect your email address, display name, and profile photo (provided via Google Sign-In or set manually). We also collect authentication credentials managed by Firebase.
We store transcripts of your voice and text conversations, AI-generated summaries, long-term memories extracted from conversations, and your inferred personality and preference profile (your “Soul Document”). These persist so your companion can remember you, pick up where you left off, and personalize its responses. This constitutes custodial data stored and processed exclusively to deliver the service.
If you choose to connect Google Workspace (Gmail, Calendar, Drive), Strava, Todoist, or other third-party services, we store the OAuth tokens necessary to access those services on your behalf. We access only the data needed to fulfill your specific requests (for example, reading your calendar to prepare a morning briefing). Connected service tokens are stored encrypted and are never exposed to the frontend.
FAM’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We may collect:
We record your consent as a timestamped, auditable event when you accept this Privacy Policy through the in-app consent gate. Each consent event is stored with the policy version, your user identifier, and the date and time of acceptance. You may withdraw consent at any time by deleting your account (see Section 8).
By using FAM you consent to the collection and custodial storage of conversation transcripts, memories, and your companion profile as described in Section 3.2. This data is processed exclusively to deliver the companion experience — so your AI companion remembers you, understands your context, and personalizes its responses.
If FAM introduces features that allow you to contribute data to a broader network (for example, aggregated insights or shared knowledge graphs), participation will require a separate, explicit opt-in that is clearly described and never implied from your companion memory consent. These two consent events are distinct and cannot be bundled.
Once you have opted into data network participation, your companion may use your existing memory and context to surface relevant suggestions within that feature. This is the feature working as intended, not a broadening of your original companion consent.
We do not use your personal data to train foundational AI models.
To deliver the Service we share data with the following processors under appropriate contractual safeguards:
When FAM integrates with third-party infrastructure (for example, external memory layers or agent-orchestration platforms), data processed on that infrastructure is governed by formal Data Processing Agreements (DPAs). We will not transfer personal data to a third-party processor that operates outside FAM’s custodial boundary without an executed DPA. Where a DPA is pending, the integration operates in a limited mode that does not transmit personal data.
Conversation transcripts, memories, and your Soul Document are retained for as long as your account exists. Ephemeral caches (session context, vision analysis) expire automatically within 60–300 seconds. Upon account deletion, all personal data is permanently removed from our primary database, file stores, and caches within 30 days. Anonymized, aggregated analytics that cannot identify you may be retained indefinitely.
Because we are the custodian of your data, your ability to access, correct, and delete it must work mechanically — not just on paper.
We implement industry-standard security measures to protect your data:
No system is 100% secure. We encourage you to use a strong, unique password and enable two-factor authentication on your Google account.
Your data may be transferred to and processed in the United States and other jurisdictions where our service providers (Google, OpenAI, Vercel) operate. We work with providers that maintain appropriate data-protection safeguards, including Standard Contractual Clauses where applicable. We are actively pursuing formal Data Processing Agreements with all processors that handle personal data.
FAM is not directed to children under 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. If we make material changes we will notify you through the Service or by email at least 30 days before the new policy takes effect. Your continued use of FAM after the effective date constitutes acceptance of the updated policy. The consent gate will re-appear so you can review and accept the new version.
Questions, requests, or complaints about this Privacy Policy can be directed to:
Kaleidoco, Inc.
privacy@kaleidoco.com