Privacy Policy

1. Who we are

Persona is developed and published by HighRoad Software, the trading name of COBI Management SRL, a Belgian company registered at Rue Haut Chemin 8, 1370 Jodoigne, Belgium (BE 0761.812.854).

For privacy-related questions, contact us at: privacy@highroadsoftware.com

2. What Persona does with your data

Conversation data

Every conversation you have in Persona is stored in a protected JSON snapshot on your iPhone, in the app's Application Support directory. Persona does not automatically transmit conversation content. The AI model generates replies on your device, so no conversation text is sent for inference. If you choose Report on a reply, Persona opens a Mail draft addressed to HighRoad Software containing the character name and an excerpt of the reply; nothing is sent until you tap Send in Mail. Copy, Share, and Export send data only to the destination you choose.

Memory data

Persona can save selected facts and preferences as memory entries associated with a character and can add recent unsuppressed entries to a later prompt. This data remains on your device. Persona does not provide an iCloud sync feature and HighRoad Software cannot access it automatically.

Character data

Characters you create — including names, taglines, traits, backstories, relationship types, and voice settings — are stored locally. HighRoad has no automatic access to custom character configurations. A Report email includes the name of the character associated with the reply only if you choose to send it.

3. Data we do collect

Purchase information

Persona uses Apple's StoreKit 2 for monthly and annual Persona Premium subscriptions and, where Apple makes it available, a one-time lifetime Premium purchase. Payment processing, billing details, trial eligibility, and transaction records are handled by Apple. The app reads Apple-signed transaction information to determine whether Premium is active. HighRoad Software does not see your payment method, billing address, or credit card details.

Download traffic

When Persona updates the Atmospheres catalogue, begins an eligible Wi-Fi download of the locale-appropriate Base model during your first chat, or downloads another supported model or Atmosphere you choose, it makes HTTPS requests to HighRoad Software or Hugging Face content infrastructure. As with an ordinary HTTPS request, the provider may receive technical request information such as an IP address, IP-derived approximate location, session or request time, requested file, and device, operating-system, or user-agent data.

Hugging Face states that its services automatically record service and session information, including date, location, IP address, and device or software information. It may retain and use that information to deliver, secure, diagnose, improve, and analyse its services. Persona does not add conversation content, character data, memory entries, an advertising identifier, precise GPS coordinates, or a HighRoad account to these requests. See Hugging Face's Privacy Policy for its current practices.

Age gate

Persona asks users to enter a date of birth and checks locally whether it meets the 18-year threshold. If it does, the self-declared date is stored in the iOS Keychain on the device. Persona does not verify an identity document, transmit the date of birth, or include it in a data export. The current app does not include adult content packs and intentionally blocks explicit sexual content.

4. Data Persona does not automatically collect

• HighRoad does not operate in-app product analytics or include a third-party analytics SDK. Hugging Face may use technical model-download request metadata for analysis and service improvement under its privacy policy
• We do not have automatic access to your conversation content or memory entries
• We do not use advertising identifiers (IDFA)
• We do not use third-party analytics SDKs (no Firebase, Amplitude, Mixpanel, etc.)
• Persona does not require or automatically collect your name, email address, advertising identifier, or a HighRoad account. If you send a support or Report email, HighRoad receives the sender address and the content you choose to send
• We do not require an account to use Persona
• We do not provide an iCloud sync feature for Persona data

5. Data storage and security

Conversation history, memory entries, and character data are stored in a protected JSON snapshot in the app's Application Support directory on your iPhone. This file is protected by iOS filesystem sandboxing and marked for exclusion from device backups.

When you use the built-in data export feature, Persona creates a JSON file protected by iOS complete file protection in the temporary directory. Nothing leaves the device until you explicitly choose a destination in the iOS share sheet. Persona removes the temporary file after sharing and sweeps stale export files on a later launch.

Each installed on-device model is stored in its own dedicated directory in Application Support. Its files include model configuration, tokenizer and special-token data, and quantized model weights. Persona offers locale-appropriate Base models and, with Persona Premium on supported hardware, larger Deep and Pro models. The app shows an approximate download size before installation because size varies by model. Model files contain no personal conversation data.

6. Your rights (GDPR)

HighRoad Software is based in Belgium and subject to EU GDPR. Persona stores conversation, memory, and character data locally, and HighRoad has no automatic access to it. HighRoad infrastructure may receive ordinary technical request metadata when Persona updates the catalogue or downloads an Atmosphere. HighRoad also receives the sender address and content you choose when you contact support or send a Report email. Hugging Face and Apple process their own technical or transaction data under their privacy policies. Most rights concerning Persona's local data are exercised directly within the app:

• Right to access: Browse your full memory timeline and conversation history within the app at any time.
• Right to erasure: Delete individual memory entries or a character and its associated local data. In Settings, Delete content and downloads removes local conversations, characters, memories, rituals, downloaded models and Atmospheres, and temporary exports, while keeping age verification and app preferences. To also remove the self-declared date of birth from the iOS Keychain, use Reset onboarding & wipe data; this restarts onboarding. Apple purchase records remain with Apple.
• Right to portability: The built-in export (Settings → Privacy Dashboard → Export) includes your local conversations, characters, memories, related portable content and portraits, and supported app preferences. It intentionally excludes the self-declared date of birth, downloaded model weights and model-download state, and subscription, lifetime-purchase, or Premium-entitlement state.
• Right to rectification: Edit any memory entry directly in the Memory tab.

For questions related to Apple commerce or this policy, contact privacy@highroadsoftware.com. We will respond within 30 days.

7. Children

Persona requires users to confirm that they are at least 18 and is not intended for minors. We do not knowingly collect personal data from minors. If you believe a minor is using Persona, contact us at privacy@highroadsoftware.com.

8. Third-party services

Persona relies on Apple's App Store and TestFlight infrastructure for app distribution and commerce, on Hugging Face infrastructure for model downloads, and on HighRoad Software infrastructure for the Atmospheres catalogue and downloads. Apple's handling of transaction data is governed by Apple's Privacy Policy. Hugging Face's policy governs its receipt, retention, security, diagnostic, and analytics use of technical download-request metadata.

Persona does not integrate advertising networks, analytics SDKs, social login SDKs, or third-party crash-reporting SDKs. Apple still processes App Store, TestFlight, and commerce data under its own terms. Server-side commerce measurement, including App Store Server Notifications or RevenueCat, is deferred and is not active in Persona 1.0.

9. Changes to this policy

If we make material changes to this privacy policy, we will update the "Last updated" date at the top of this page and, where required, notify users via an in-app message. The current version is always available at highroadsoftware.com/apps/persona/privacy.

10. Contact

For privacy-related questions or requests:

• Email: privacy@highroadsoftware.com
• Post: COBI Management SRL, Rue Haut Chemin 8, 1370 Jodoigne, Belgium

You also have the right to lodge a complaint with your local data protection authority. In Belgium, this is the Data Protection Authority (APD).