Privacy.
This Privacy Policy covers linger.day, the Linger TestFlight beta, and the Linger mobile application. It explains what we collect, why we use it, who processes it, and the choices you have.
Who we are
Linger is operated by UPRO AI PTE. LIMITED, 138 Robinson Road, #02-54, Oxley Tower, Singapore 068906. We are the controller of personal data described in this policy.
For privacy questions or requests, write to privacy@linger.day. For product support, write to support@linger.day.
Data we collect
Account and device data
We collect the identifiers needed to create and secure your account, including your email address or Apple or Google sign-in identifier, verification status, display name if provided, preferred language, time zone, sessions, device and app version, push-notification token, and security events.
What you share with Linger
We process onboarding answers, messages, replies, letters, photographs, voice notes, and other media you choose to send. We also store delivery, read, and relationship events needed for these features to work.
Linger derives bounded memories, summaries, relationship continuity, and Scenes from your interactions. These records help later interactions remember relevant details. They are not a complete or perfectly accurate account of you.
Calls
Calls include live audio. Linger transcribes Calls and records separate user and Soren audio channels for continuity, safety, quality, fraud prevention, and restricted service operations. By starting or answering a Call after accepting the Terms, you consent to this processing. Call History does not expose transcripts or recordings for playback.
Call transcripts and recordings are retained for the life of your account unless you delete your account or a valid legal request requires earlier removal. They are stored privately, are not published, and operational access is restricted and audited.
Membership, purchases, and promotions
We receive subscription status, product identifiers, transaction references, renewal state, trial eligibility signals, and purchase or restore events from Apple and RevenueCat. We store promotion-code claims and activations, membership periods, and diamond ledger activity. We do not receive your full payment-card number.
Scenes and public sharing
Scenes are private until you intentionally create a public link. A public Scene link is an unlisted, long-lived snapshot. Anyone with the link can open and reshare it. We mark these pages noindex, but we cannot guarantee that a link will remain secret or that third parties will not copy it.
Public Scene snapshots are not automatically removed when an account enters deletion or is permanently deleted. Linger may block a public link for safety or legal reasons. For a legal removal request, write to privacy@linger.day with the link.
Website and waitlist
When you submit the waitlist form, we collect your email address and whether you used the hero or footer form. Resend stores the contact for availability emails.
Vercel Analytics measures page views and the on-site events described in our interface, such as waitlist submissions, section views, Journal reading depth, and Help interactions. We do not send Help search terms, conversation content, Call content, or private user data with these analytics events. Vercel Analytics is cookieless and does not use cross-site advertising identifiers.
Support and diagnostics
If you contact support, we collect your message, contact details, attachments you choose to send, and the information needed to investigate. Firebase Crashlytics may receive crash reports and technical diagnostics such as app version, device model, operating-system version, and crash traces.
How we use data
We use personal data to:
- provide, personalize, and synchronize Linger;
- deliver messages, letters, Calls, Scenes, and notifications;
- maintain relationship continuity and memories;
- authenticate accounts and prevent abuse or fraud;
- administer TestFlight access, promotions, membership, purchases, and diamonds;
- provide support and diagnose reliability or security problems;
- operate the waitlist and send requested availability notices;
- measure whether the website and product work; and
- comply with law and protect users, Linger, and others.
Where GDPR or similar law applies, our legal bases are performance of our contract with you, your consent where required, our legitimate interests in operating and securing Linger, and compliance with legal obligations. You may withdraw consent where processing depends on it, without affecting processing that already occurred.
AI and service providers
Linger uses specialized providers to operate the service:
- Apple and Google for sign-in, and Apple for TestFlight, App Store distribution, subscriptions, and purchases;
- RevenueCat for subscription and purchase status;
- AWS SES for account verification email;
- Firebase Cloud Messaging for push delivery and Firebase Crashlytics for crash diagnostics;
- Vercel for the website and cookieless analytics, and Resend for the waitlist contact list;
- Fly.io and managed databases and queues for application services;
- Cloudflare R2 for private media and Call recordings;
- LiveKit for real-time Call transport and recording;
- OpenRouter to route selected language-model requests to providers including Anthropic, Google, and DeepSeek; and
- Google Gemini for selected voice and media processing.
Our AI and voice paths are configured under no-training and zero-retention arrangements with the relevant providers. This limits provider retention and training use; it does not mean Linger itself deletes the account content and service records described in this policy.
Our internal memory system uses self-hosted Graphiti and Neo4j infrastructure to store derived relationship continuity. Service providers may process data in countries other than yours under their contractual and legal safeguards.
We do not sell personal data or share it for cross-context behavioural advertising.
WhatsApp Community
Joining the WhatsApp Community is required to obtain the shared beta redemption code. Linger administrators cannot see community members’ phone numbers. WhatsApp and Meta still process your account, phone number, and community activity under their own terms and privacy policy.
The community uses one shared code that can complete up to 500 successful activations. Joining the community does not reserve a beta place. Leaving the community does not cancel an already activated 30-day beta membership.
Retention and account deletion
Private account content and derived records are normally kept while your account is active. Call transcripts and recordings are also kept for the life of the account.
When you request account deletion, the account enters a 30-day deletion process and active sessions are revoked. During that period, Linger processes the removal or anonymization of private account data, private media, Call recordings, transcripts, push tokens, and derived memories. We may retain limited transaction, security, tax, or legal records where required, with access restricted to those purposes.
Public Scene snapshots are handled separately as described above and are not automatically removed with the private account.
Waitlist contacts are kept until you unsubscribe, ask us to delete them, or they are no longer needed for the availability notices you requested. Support records are kept only as long as reasonably needed to resolve the request, maintain security, or meet legal obligations.
Security
We use transport encryption, access controls, private object storage, audit records, token rotation, and service-level restrictions appropriate to the data. Calls use encrypted WebRTC transport, but they are not end-to-end encrypted from all service processors because Linger’s voice systems must process audio to provide the Call.
No system can guarantee absolute security. Contact privacy@linger.day if you believe your account or data has been compromised.
Your choices and rights
Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal data, and to withdraw consent. You may also complain to your local data-protection authority, including the Singapore Personal Data Protection Commission where applicable.
Send requests to privacy@linger.day from the email connected to your account. We may verify your identity before completing a request. We respond within the period required by applicable law.
You can manage notifications and microphone permission in iPhone Settings. You can manage or cancel App Store subscriptions through Apple. Every waitlist email includes an unsubscribe option.
International transfers
UPRO AI PTE. LIMITED is based in Singapore and our providers operate internationally. Where required, we use recognized transfer mechanisms such as Standard Contractual Clauses, applicable adequacy frameworks, and contractual security protections.
Children
Linger is intended for people aged 17 and older. We do not knowingly provide the service to younger children. If you believe a child has created an account or provided personal data, contact privacy@linger.day.
Cookies
Linger does not use advertising cookies or cross-site trackers on linger.day. Vercel Analytics is cookieless. Essential platform or security storage may be used when necessary for a requested feature, but it is not used for behavioural advertising.
Changes
We may update this policy as Linger changes. Material changes will be identified by a new date and, where appropriate, an in-app or email notice. If a new feature materially changes how data is used, we will update this policy before enabling it.
Contact
UPRO AI PTE. LIMITED
138 Robinson Road, #02-54, Oxley Tower
Singapore 068906