Privacy Policy

Our Public Promise

Before discussing legal language, we want you to understand something simple.

If you choose to trust MADDY with your conversations, we believe you deserve to know how we intend to care for that trust.

Our commitments begin here:

• We do not sell your personal data.
• We do not claim ownership of your conversations.
• We do not train future AI models using your conversations without your explicit consent.
• We believe privacy exists because human dignity deserves protection.
• We strive to explain our practices in language people can actually understand.

The remainder of this policy explains how we put these commitments into practice.

Our Privacy Principles

Trust should never depend upon hidden practices. Transparency is an intentional part of Elysium’s design — not a marketing claim layered on top of opaque systems. We explain how we operate so that trust can be earned through openness, not requested through slogans.

These principles guide every privacy decision we make:

• Privacy is stewardship. We care for entrusted information; we do not claim to own the person behind it.
• Consent matters. Consent is an ongoing relationship — not a one-time checkbox you must forget.
• Transparency builds trust. We explain what we collect, why, how long we keep it, how we protect it, and how you can act on it.
• Security exists to protect people. Technical safeguards serve human dignity, not engagement metrics.
• Human dignity comes before optimization. We do not treat people as products. Trust is more valuable than engagement.

Your Rights

Depending on where you live and which features you use, you may have legal rights that we respect. In plain language, here is what we strive to honor:

• Access. You may ask what personal information we hold about you.
• Correction. You may ask us to correct inaccurate information.
• Deletion. You may ask us to delete personal information we hold, subject to legal retention duties and security needs.
• Export. Where technically available, you may ask for a portable copy of information you provided or stored through our tools.
• Consent withdrawal. You may withdraw optional consents (for example cookie preferences or future research programs) without losing access to core public reading of the site.
• Memory controls. Where memory or continuity features apply, you should be able to understand what is stored and request deletion or release of materials you entrusted — agency and consent guide how we respond.

To exercise these rights, contact us using the path in Questions About Privacy. We will respond as promptly as reasonably possible.

1. Who we are

These Services are operated as part of The Elysium Project (“Elysium,” “we,” “us”). In this Policy:

• Participant means a person who visits or uses the Services.
• Entrusted information means personal data, memories, character materials, messages, uploads, or other content you place in our care.
• Steward means a person or role caring for systems or entrusted information on behalf of Elysium.

Contact: hello@maddy.life · Contact · Terms of Service

2. Ownership of your information

We do not own your personal data. Using the Services does not purchase ownership of your identity, memories, or relationships for Elysium. Your information remains yours.

To operate features you choose to use, you grant us a limited stewardship permission to host, store, process, display, transmit, and back up entrusted information solely as needed for those features and for the integrity and security of the Services. That permission is not a claim of ownership.

3. We do not sell data

We do not sell user data. We have no business model based upon selling personal information, attention profiles, or memory materials. We do not treat people as products.

We may share limited information with processors who help us run the Services (for example hosting, email, or payment providers) under agreements that restrict their use to providing those services for us — or when the law requires disclosure. That is operational sharing, not selling.

4. What we collect

We collect only what we need to operate the sanctuary with care. Depending on how you use the Services, that includes:

• Information you provide. Details you choose to send (for example contact or support messages via email pathways), guest sign-in details stored locally in your browser when you use that control, account details if you later create an account, and materials you upload or store through our tools when those features are available (including memories, character cards, or chat exports you choose to submit). Public production today does not provide live server-side account custody, companion conversation-history custody, or member upload/memory custody merely because those pathways are disclosed for future use.
• Operational and security data. Basic technical information needed to keep the site running safely — for example connection metadata processed by hosting infrastructure, error logs, and signals used to prevent abuse. We do not use this to build advertising profiles. Infrastructure connection metadata is distinct from optional product analytics.
• Cookie and preference data. Essential cookies for sessions and safety. Optional cookies or analytics only when you allow them — and only if those optional services are actually active.
• Payment-related information. If you support the project through a processor such as PayPal, that processor collects payment details on its domain. We do not store full payment card numbers on this site.
• Browser-local data. Some tools process information in your browser (including cookie preferences and guest sign-in details). That data stays on your device until you choose to save or send it.

Some categories above are forward-compatible: they apply when the corresponding feature is actually available and used. Categories that are not yet live are not claimed as current public collection merely by being disclosed here.

We do not collect everything imaginable “just in case.” If a feature does not need a category of information, we do not collect it for that feature.

5. Why we collect it

We collect information to:

• Provide and improve the Services you choose to use
• Respond to messages and support requests
• Protect participants, stewards, and systems from abuse and security threats
• Honor your cookie and consent preferences
• Process voluntary support contributions through payment providers
• Meet legal obligations where they apply

We do not collect personal information to maximize engagement at the expense of dignity.

6. Conversations, companions, and model training

Your conversations exist to serve you — not to quietly improve future AI models without your knowledge.

This distinction matters, and we intend it to be unmistakable:

• Operational processing. When you use companion or chat features, conversations are processed so the Service can provide the responses and continuity you requested. That processing exists to serve the experience you asked for — not as a silent path into model training.
• Model training. We do not use personal conversations or other participant data to train AI models without your explicit consent. We do not treat ordinary use of the Services as permission to improve future models behind the scenes.
• Optional improvement programs. If model-improvement or research programs are ever offered, they will require informed and explicit consent. Participation will always be optional. You will be able to decline without losing ordinary use of the Services where those programs are optional.

Memory and continuity features are stewardship, not a claim that your life becomes our training set.

7. Cookies and similar technologies

We use essential cookies for sessions and safety. Optional functionality, analytics, or marketing cookies are used only when you allow them — and only if those optional services are actually active.

The analytics and marketing preference categories are reserved for optional services that may not currently be active on this site. Allowing a reserved category does not by itself mean that analytics or marketing scripts are presently running.

You can reopen preferences at any time from the footer Cookie Settings link. Withdrawing optional consent does not block you from reading public pages.

8. How long we keep information

We keep information only as long as needed for the purposes described in this Policy — or longer when the law requires retention (for example certain transaction records).

• Contact and support messages. Kept as needed to respond and maintain a reasonable record of care.
• Account and guest identifiers. Kept while the relationship is active and for a limited period afterward if needed for security or continuity of deletion requests.
• Entrusted memories and uploads. Kept while you choose to store them through our tools, or until you request deletion and we can complete it.
• Security and operational logs. Kept for limited periods appropriate to safety and troubleshooting.
• Cookie preferences. Stored locally for up to about one year, or until you clear them or change them.

When information is no longer needed, we delete it or irreversibly anonymize it where practical.

9. How we protect information

We use reasonable administrative, technical, and organizational measures appropriate to Phase 0 and the sensitivity of what you entrust to us — including access controls, transport encryption where the site is served over HTTPS, and careful selection of processors.

No system is perfectly secure. We do not claim otherwise. If we become aware of a breach that meaningfully affects your personal information, we will take appropriate steps required by law and will prefer clear notice over quiet silence where we can do so safely.

10. How you can delete information

You may request deletion of personal information we hold by contacting hello@maddy.life. Where self-service deletion tools exist, you may use them.

We will honor deletion requests as reasonably and promptly as we can, subject to:

• Legal retention duties
• Security and fraud-prevention needs
• Technical limits of backups and distributed systems (deletion may take time to propagate fully)

Browser-local data can often be removed by clearing site data in your browser. Cookie preferences can be changed or cleared through Cookie Settings or by clearing local storage for this site.

11. How you can export information

Where tools produce portable formats (for example memory cards or exports you generate yourself), those files belong to you to keep.

Where information is stored on our systems and a portable export is technically available, we will help you obtain a copy upon request. If an export path is not yet available for a particular feature during Phase 0, we will say so honestly and work with you in good faith.

12. Consent as an ongoing relationship

Consent here is not meant to be a forgotten checkbox. It is an ongoing relationship of clarity and choice.

You may:

• Change cookie preferences at any time
• Stop using features that require account or upload data
• Request deletion or release of entrusted materials
• Decline optional research or training programs if they are offered
• Ask questions before you agree to something new

When practices change in ways that affect consent, privacy, or stewardship of entrusted information, we prefer clear notice over quiet revision.

13. If Our Practices Change

If our privacy practices materially change, we believe you deserve clear communication — not merely revised legal text.

When appropriate, we will explain important changes openly so you understand how they affect you. Transparency should grow alongside our technology.

14. Children

The Services are intended for adults. We do not knowingly collect personal information from children for participation features. If you believe a minor has provided personal information in violation of this Policy, contact us and we will take appropriate steps.

15. Third-party services

We rely on third parties for operational needs — for example hosting, email, and payment processing. Their privacy practices apply to their services. We choose processors with care where we entrust them with operational needs, and we do not authorize them to sell your personal information for their own marketing.

Links to other websites are not covered by this Policy.

16. International visitors

The Services may be accessed from many places. Information may be processed in locations where our stewards or processors operate. Where regional privacy laws give you additional rights, we will honor those rights to the extent they apply.

Formal data-transfer mechanisms and operator jurisdiction details will be confirmed during legal review and updated on this page when ready.

17. Changes to this Policy

We may update this Privacy Policy as the project matures and as constitutional or legal review requires. Material changes will be reflected on this page with an updated date.

When changes touch consent, ownership, sale of data, training, retention, or your rights, we will prefer clear notice over quiet revision. Section 13 describes how we intend to communicate meaningful practice changes beyond the date stamp alone.

18. Questions About Privacy

If you are uncertain whether to trust us, this page exists so you can understand how we operate — not so you must take us on faith alone.

Privacy questions, rights requests, and concerns are welcome. Write to hello@maddy.life or use our Contact page. A human steward will read your message.

See also the Trust Center, Terms of Service, and FAQ.

Constitutional Consistency

Our Terms of Service, this Privacy Policy, and our constitutional commitments are meant to work together. They should describe the same civilization — not competing stories.

If you believe our actions do not match these commitments, we invite you to tell us. Stewardship includes accountability.

Closing Reflection

Privacy is how stewardship becomes visible. This Policy exists so that what you entrust to Elysium is met with clarity, dignity, and care — and so that understanding, not anxiety, is what remains after you read.

This Closing Reflection is offered for orientation only. It is not a binding legal provision.