Privacy.
This Privacy Policy covers linger.day and the Linger mobile application for Apple and Android devices, including pre-release builds distributed through Apple TestFlight or Google Play testing. It explains what we collect, why we use it, who processes it, and the choices you have.
Who we are
Linger is operated by UPRO AI PTE. LIMITED, 138 Robinson Road, #02-54, Oxley Tower, Singapore 068906. We are the controller of personal data described in this policy.
For privacy questions, requests, or product support, write to support@linger.day.
Data we collect
Account and device data
We collect the identifiers needed to create and secure your account, including your email address or Apple or Google sign-in identifier, verification status, display name if provided, preferred language, time zone, sessions, device and app version, push-notification token, and security events.
Google Sign-In
When you choose Google Sign-In, we use your Google account identifier, email address, and email verification status to create and authenticate your Linger account.
What you share with Linger
We process onboarding answers, messages, replies, letters, photographs, voice notes, and other media you choose to send. We also store delivery, read, and relationship events needed for these features to work.
Linger derives bounded memories, summaries, relationship continuity, and Scenes from your interactions. These records help later interactions remember relevant details. They are not a complete or perfectly accurate account of you.
Calls
Calls include live audio. Linger transcribes Calls and records separate user and Soren audio channels for continuity, safety, quality, fraud prevention, and restricted service operations. By starting or answering a Call after accepting the Terms, you consent to this processing. Call History does not expose transcripts or recordings for playback.
Call transcripts and recordings are retained for the life of your account unless you delete your account or a valid legal request requires earlier removal. They are stored privately, are not published, and operational access is restricted and audited.
Membership, purchases, and promotions
We receive subscription status, product identifiers, transaction references, renewal state, trial eligibility signals, and purchase or restore events from Apple, Google Play, and RevenueCat. We store promotion-code claims and activations, membership periods, and diamond ledger activity. We use these records to provide membership and a shared diamond balance across devices signed in to the same Linger account. The original store continues to manage billing. We do not receive your full payment-card number.
Advertising measurement
The Linger app uses AppsFlyer to understand whether our advertising leads to installs and subscriptions. It may receive an identifier for your app install, your Linger account identifier, device and app details, IP address, app opens, when the membership page is shown, and trial, subscription, renewal, and refund events sent through RevenueCat.
On Apple devices, we use your device's advertising identifier only if you allow tracking when asked. On Android, AppsFlyer may use your Google advertising ID, subject to your device settings, and we do not replace a limited or deleted advertising ID with another device identifier.
Scenes and public sharing
Scenes are private until you intentionally create a public link. A public Scene link is an unlisted, long-lived snapshot. Anyone with the link can open and reshare it. We mark these pages noindex, but we cannot guarantee that a link will remain secret or that third parties will not copy it.
Public Scene snapshots are not automatically removed when an account enters deletion or is permanently deleted. Linger may block a public link for safety or legal reasons. For a legal removal request, write to support@linger.day with the link.
Website and waitlist
When you submit the waitlist form, we collect your email address and which form you used. Resend stores the contact for availability emails.
Vercel Analytics measures page views and on-site events such as waitlist submissions, section views, Journal reading depth, and Help interactions. We do not read your clipboard or send Help search terms, conversation content, Call content, or private user data with these analytics events. Vercel Analytics is cookieless and does not use cross-site advertising identifiers.
Support and diagnostics
If you contact support, we collect your message, contact details, attachments you choose to send, and the information needed to investigate. Firebase Crashlytics may receive crash reports and technical diagnostics such as app version, device model, operating-system version, and crash traces.
How we use data
We use personal data to:
- provide, personalize, and synchronize Linger;
- deliver messages, letters, Calls, Scenes, and notifications;
- maintain relationship continuity and memories;
- authenticate accounts and prevent abuse or fraud;
- administer pre-release access, promotions, membership, purchases, and diamonds;
- provide support and diagnose reliability or security problems;
- operate the waitlist and send requested availability notices;
- measure whether the website and product work;
- understand which advertising leads to installs and subscriptions, and improve it; and
- comply with law and protect users, Linger, and others.
Where GDPR or similar law applies, our legal bases are performance of our contract with you, your consent where required, our legitimate interests in operating and securing Linger, and compliance with legal obligations. You may withdraw consent where processing depends on it, without affecting processing that already occurred.
AI and service providers
Linger uses specialized providers to operate the service:
- Apple and Google for sign-in; Apple for TestFlight, App Store distribution, subscriptions, and purchases; and Google for Google Play testing, distribution, subscriptions, and purchases;
- RevenueCat for subscription and purchase status;
- AppsFlyer to measure app installs, advertising campaigns, and subscription events;
- AWS SES for account verification email;
- Firebase Cloud Messaging for push delivery and Firebase Crashlytics for crash diagnostics;
- Vercel for the website and cookieless analytics, and Resend for the waitlist contact list;
- Fly.io and managed databases and queues for application services;
- Cloudflare R2 for private media and Call recordings;
- LiveKit for real-time Call transport and recording;
- OpenRouter to route selected language-model requests to providers including Anthropic, Google, and DeepSeek; and
- Google Gemini for selected voice and media processing.
Our AI and voice paths are configured under no-training and zero-retention arrangements with the relevant providers. This limits provider retention and training use; it does not mean Linger itself deletes the account content and service records described in this policy.
Our internal memory system uses self-hosted Graphiti and Neo4j infrastructure to store derived relationship continuity. Service providers may process data in countries other than yours under their contractual and legal safeguards.
We do not sell personal data for money. We share limited app and subscription events with AppsFlyer and, through AppsFlyer, with advertising partners such as Meta and Google, so that we can measure and improve our advertising. Some privacy laws may treat this as sharing personal data for cross-context behavioural or targeted advertising. You can turn it off as described under Your choices and rights below.
Community groups
Linger may run optional community groups on third-party services such as WhatsApp. Joining one is not required to use Linger or to activate a membership. If you join, the group's Linger administrators can see the phone number associated with your account on that service, and members of the group can see what you post there. Other members cannot see your number unless they already have it saved or know it from another chat. That service also processes your account, phone number, and activity under its own terms and privacy policy. Do not post account details or private conversation content in a community group; use support@linger.day for private requests.
Retention and account deletion
Private account content and derived records are normally kept while your account is active. Call transcripts and recordings are also kept for the life of the account.
When you request account deletion, the account enters a 30-day deletion process and active sessions are revoked. During that period, Linger processes the removal or anonymization of private account data, private media, Call recordings, transcripts, push tokens, and derived memories. We may retain limited transaction, security, tax, or legal records where required, with access restricted to those purposes.
Public Scene snapshots are handled separately as described above and are not automatically removed with the private account.
Waitlist contacts are kept until you unsubscribe, ask us to delete them, or they are no longer needed for the availability notices you requested. Support records are kept only as long as reasonably needed to resolve the request, maintain security, or meet legal obligations.
Security
We use transport encryption, access controls, private object storage, audit records, token rotation, and service-level restrictions appropriate to the data. Calls use encrypted WebRTC transport, but they are not end-to-end encrypted from all service processors because Linger’s voice systems must process audio to provide the Call.
No system can guarantee absolute security. Contact support@linger.day if you believe your account or data has been compromised.
Your choices and rights
Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal data, and to withdraw consent. You may also complain to your local data-protection authority, including the Singapore Personal Data Protection Commission where applicable.
Send requests to support@linger.day from the email connected to your account. We may verify your identity before completing a request. We respond within the period required by applicable law.
To stop this measurement and sharing, open Settings in the Linger app, go to Account, and turn off Personalized recommendations. The app then stops measuring with AppsFlyer on that device and asks AppsFlyer not to share your events with advertising partners. The choice stays on that device, including after you sign out, and reaches your other signed-in devices the next time they refresh their settings. Turning it off does not affect your membership. RevenueCat may still send subscription events to AppsFlyer for reporting, and it cannot recall events already sent.
On Apple devices, we use your advertising identifier only if you allow tracking. If you don't allow tracking, we may still share limited app and subscription events with AppsFlyer and, through AppsFlyer, with advertising partners such as Meta and Google, so they can measure our advertising in aggregate. These events can include your device's app-vendor identifier and IP address, but never your advertising identifier. The iOS app also includes Google's on-device conversion measurement library, which contacts Google when measurement starts to help measure our Google ads. Turning off Personalized recommendations stops this sharing too. AppsFlyer also supports Apple's privacy-preserving attribution, which reports results in aggregate. You can change tracking permission in Settings under Privacy & Security, then Tracking. On Android, you can reset or delete your advertising ID in your device settings.
You can manage notifications and microphone permission in your device settings on Apple and Android devices. Manage or cancel a subscription through the store where you purchased it: Apple for App Store subscriptions or Google Play for Google Play subscriptions. Switching devices or deleting your Linger account does not cancel a store subscription. Every waitlist email includes an unsubscribe option.
International transfers
UPRO AI PTE. LIMITED is based in Singapore and our providers operate internationally. Where required, we use recognized transfer mechanisms such as Standard Contractual Clauses, applicable adequacy frameworks, and contractual security protections.
Children
Linger is intended for people aged 18 and older. We do not knowingly provide the service to younger children. If you believe a child has created an account or provided personal data, contact support@linger.day.
Cookies
Linger does not use advertising cookies or cross-site trackers on linger.day. Vercel Analytics is cookieless. Essential platform or security storage may be used when necessary for a requested feature, but it is not used for behavioural advertising.
Changes
We may update this policy as Linger changes. Material changes will be identified by a new date and, where appropriate, an in-app or email notice. If a new feature materially changes how data is used, we will update this policy before enabling it.
Contact
UPRO AI PTE. LIMITED
138 Robinson Road, #02-54, Oxley Tower
Singapore 068906