GPZ Privacy Policy
Last updated: October 6, 2026. This policy describes the current GPZ beta.
1. Data controller
GPZ (app.gpz.mobile) is published by GOPOWZ, a French simplified joint-stock company (SAS), SIREN 988 489 001, registered at 60 rue François Ier, 75008 Paris, France. For questions or to exercise your rights: support@gopowz.com. You may also write to the registered office, for the attention of the person responsible for data protection.
2. Data we use
Depending on the features you use, GPZ processes:
- Account: email address, username, internal identifier, language preferences, confirmation of adulthood, accepted rule versions and authentication information. Passwords, where used, are hashed, not stored as plain text.
- Optional third-party sign-in: verified email and stable identifier to link your account. This does not authorise access to your mailbox, contacts or personal files.
- Content: characters, scenarios, personas, descriptions, selected photographs and images, generated images and voices, messages, expressed preferences, memories and summaries for story continuity.
- Operation: request dates and identifiers, sessions, errors, generation metadata, usage, credits and transaction history. Some image-generation traces contain the submitted context and visual references to reproduce or understand results.
- Community and support: creator subscriptions, blocks, reports, reported content, decisions about public creations and support correspondence.
- Technical connection data needed for security, including IP addresses and login events processed by infrastructure and request-rate controls.
You choose whether to import photos. Speech synthesis converts text to speech without recording your voice. Device permissions serve the media import or saving features you select. You can invent a persona and use a pseudonym. Avoid private contact details, secrets or sensitive information about yourself or others in conversations or files. AI replies may be inaccurate and are not a personality diagnosis.
3. Purposes and legal bases
Necessary account creation, authentication, character creation and requested generations rely on performance of the service contract. Account protection, abuse prevention, technical reliability and handling reports rely on our legitimate interest in a safe, functioning service, respecting your rights. Data may also be processed or retained for legal obligations, binding requests or establishing, exercising or defending legal claims. Consent required for optional uses is obtained separately: accepting the terms is not blanket consent to advertising or exploitation of conversations.
4. Private stories and shared creations
Conversations and personas are private. A character's creator cannot read your conversations with that character. Publishing a character does not publish users' private conversations. Its public presentation, including information you voluntarily place there, may be visible to others.
A report submits the reported elements needed for review. Authorised technical administrators may access hosted data for maintenance, security, support or legal obligations. Conversations are not end-to-end encrypted: AI services require access to content needed for generation.
5. Recipients and providers
Authorised GOPOWZ personnel and these provider categories may receive data necessary for their tasks:
| Category | Purpose and data |
|---|---|
| Hosting and storage — OVHcloud | Hosting GPZ and storing its data and media in Europe |
| Transactional email | Email address and sign-in, verification or support messages |
| Authentication | Verification of the third-party account sign-in you select |
| Technical intermediaries and text AI providers | Request, character profile, relevant persona, history excerpts and useful memory to reply, write, translate or summarise |
| Image generation | Scene description and required visual references, including selected character or persona portraits |
| Speech synthesis | Passage to read and chosen voice settings |
Transfers serve the functions you request. GPZ does not need to send your password to AI providers, but your texts and images may themselves contain personal information. Privacy settings for certain text calls do not guarantee that every provider retains no images, audio or metadata. Ask about actual recipients at support@gopowz.com.
6. Location and transfers
GPZ hosting and media storage are in Europe with OVHcloud. This does not mean all processing takes place in Europe: authentication and AI data also reach the provider categories above, with some processing outside the European Economic Area.
AI intermediaries provide international transfer safeguards in their contractual terms, including European Commission standard contractual clauses. Some processing occurs in the United States; conditions and locations vary by feature and provider. Ask support@gopowz.com about actual recipients, applicable safeguards and a copy of available safeguards. European hosting does not promise European processing by every external provider.
7. Retention and deletion
Account data and stories are kept for access and continuing conversations until you delete them or the account, subject to the exceptions below. The app provides deletion of conversations, characters, personas and memories. Account deletion removes associated active data and invalidates sessions. Media copies are deleted through storage synchronisation, which may be delayed during temporary unavailability.
Some report evidence and decisions may remain to address abuse or defend rights. Retained reports are detached from the reporter's account upon account deletion; this does not guarantee that free text is anonymous.
Periods approved on 21 September 2026:
| Category | Retention |
|---|---|
| Conversations, characters, personas and associated media | Until user deletion or account deletion |
| Backups | 30 days from creation |
| Technical logs | 30 days from the event |
| Support requests and reports | 12 months after closure |
Only evidence necessary for a dispute or legal obligation may remain longer, for the time necessary and with restricted access.
8. Your rights
Under GDPR conditions, you can request access, rectification, erasure, restriction and portability, object to processing based on legitimate interests and withdraw consent for future consent-based processing. Write to support@gopowz.com, preferably from your account email, explaining your request. Proportionate identity verification may be needed. Account deletion can also be requested this way without app access. Do not send identity documents unless requested.
We normally respond within one month; any GDPR-permitted extension will be communicated. You may complain to the CNIL via cnil.fr or your country's competent supervisory authority.
9. Advertising, purchases and device storage
The Android app may show free accounts native ads in designated placements, occasional interstitials before sending a message, and rewarded videos started voluntarily. An interstitial does not interrupt a reply in progress. The advertising SDK may process IP addresses, advertising or device identifiers, technical information, ad interactions and consent choices. Where required by law, a consent form is shown before any ad request; GPZ may request personalized ads when the necessary consents are granted. Otherwise, Google adapts ads to the permitted choices. You can change your choices in Wallet → Manage my ad choices. A video adds credits only after server validation of the reward. Ad-free subscriptions hide native ads and interstitials; rewarded videos remain optional.
Subscriptions and credit top-ups offered on Android are processed by the device’s distribution platform. GPZ receives the information needed to verify the product, status and transaction identifier, but not full payment card details.
The web version uses a necessary session cookie and stores language preferences. Mobile sessions use secure system storage. Drafts and media may remain on the device. Images exported to your gallery stay under your control and are not removed from the gallery by GPZ account deletion.
10. Security, adulthood and updates
GPZ uses HTTPS, access controls and password hashing; no system guarantees absolute security. The service is for people aged 18 or over. Contact support if you believe a minor has created an account so it can be reviewed. Significant changes to processing, features or recipients will result in an updated policy and date; changes requiring separate information or consent will be presented to users.