Privacy Policy

1. Who we are

Persona is developed and published by HighRoad Software, the trading name of COBI Management SRL, a Belgian company registered at Rue Haut Chemin 8, 1370 Jodoigne, Belgium (BE 0761.812.854).

For privacy-related questions, contact us at: privacy@highroadsoftware.com

2. What Persona does with your data

Conversation data

Every conversation you have in Persona is stored in a SQLite database on your iPhone, in the app's Application Support directory. Messages are never transmitted to our servers or any third party. The AI model that generates responses runs entirely on your device — no text leaves your phone during a conversation.

Memory data

Persona maintains a semantic memory database per character. This database stores facts, preferences, emotional context, and relationship history extracted from your conversations, along with vector embeddings generated by an on-device embedding model (MiniLM-L6-v2). All of this data remains on your device. It is never uploaded, synced to the cloud (iCloud sync is off by default), or accessible to HighRoad Software.

Character data

Characters you create or modify — including names, backstories, system prompts, and voice settings — are stored locally. We never have access to custom character configurations.

3. Data we do collect

Purchase information

Persona uses Apple's StoreKit 2 for all in-app purchases (Premium subscription, model upgrades, style packs). Payment processing, billing details, and transaction records are handled entirely by Apple. HighRoad Software receives only a transaction receipt confirmation from Apple to verify purchase status. We do not see your payment method, billing address, or credit card details.

Crash diagnostics (optional, opt-in only)

Persona uses Apple's MetricKit framework for crash reporting. This is opt-in and controlled by your device-level "Share with App Developers" setting in iOS Settings → Privacy → Analytics. If enabled, Apple forwards anonymised crash logs to us. These logs contain stack traces and device information (iOS version, device model) but no conversation data, memory entries, or personal information.

Download traffic

When you download optional AI models or style packs, Persona makes HTTPS requests to our content delivery network. These requests include a standard HTTP User-Agent string and the file path requested. We do not log user-identifiable information from these requests. Download URLs are authenticated using short-lived signed tokens to prevent unauthorised redistribution — no account or personal data is required to generate them.

Age gate

If you access the adult content section of the style pack store, Persona asks you to confirm you are 17 or older. This confirmation is stored locally on your device as a boolean flag. We do not transmit your age or any identifying information to any server.

4. Data we do not collect

• We do not collect analytics about how you use the app
• We do not have access to your conversation content or memory entries
• We do not use advertising identifiers (IDFA)
• We do not use third-party analytics SDKs (no Firebase, Amplitude, Mixpanel, etc.)
• We do not collect your name, email address, or any personal identifiers
• We do not require an account to use Persona
• We do not sync your data to iCloud (by default; a future opt-in encrypted iCloud backup feature is planned)

5. Data storage and security

Conversation history, memory databases, and character data are stored in the app's Application Support directory on your iPhone. This directory is protected by iOS filesystem sandboxing — other apps cannot read it. It is excluded from standard iCloud backups by default.

When you use the built-in data export feature, Persona creates an encrypted ZIP file using AES-256 encryption. You set the password; we never receive the export file or the password.

AI model files are large (700 MB to 4.5 GB) and stored in a dedicated models directory in Application Support. These are the quantized model weights only — they contain no personal data.

6. Your rights (GDPR)

HighRoad Software is based in Belgium and subject to EU GDPR. Because Persona stores all personal data locally on your device and we have no access to it, most GDPR rights are exercised directly within the app:

• Right to access: Browse your full memory timeline and conversation history within the app at any time.
• Right to erasure: Delete individual memory entries, full character memory databases, or the entire app (including all data) from within the app or via iOS Settings → General → iPhone Storage.
• Right to portability: Export all your data using the built-in export feature (Settings → Privacy Dashboard → Export).
• Right to rectification: Edit any memory entry directly in the Memory tab.

For questions or requests related to the limited data we do hold (purchase verification, crash logs), contact privacy@highroadsoftware.com. We will respond within 30 days.

7. Children

Persona is rated 17+ and is not intended for users under 17. We do not knowingly collect any data from anyone under 17. If you believe a user under 17 has accessed content intended for adults, contact us at privacy@highroadsoftware.com.

8. Third-party services

The only third-party service involved in Persona's operation is Apple's App Store infrastructure (payment processing, download delivery). Apple's privacy practices are governed by Apple's Privacy Policy.

We do not use any advertising networks, analytics platforms, social login SDKs, or third-party crash reporting tools (beyond the Apple-provided MetricKit, which only operates if your device-level analytics sharing is enabled).

9. Changes to this policy

If we make material changes to this privacy policy, we will update the "Last updated" date at the top of this page and, where required, notify users via an in-app message. The current version is always available at highroadsoftware.com/apps/persona/privacy.

10. Contact

For privacy-related questions or requests:

• Email: privacy@highroadsoftware.com
• Post: COBI Management SRL, Rue Haut Chemin 8, 1370 Jodoigne, Belgium

You also have the right to lodge a complaint with your local data protection authority. In Belgium, this is the Data Protection Authority (APD).