Privacy Policy

1. Information We Collect

When you use DeerLight, we collect:

• Account data — name, email address, hashed password
• Story content — conversations you have with the AI biographer
• Photos — images you upload, with any captions and dates you add
• Generated biography — the written memoir produced from your data
• Social connections — usernames for linked Instagram, Facebook, and album accounts (we don't store OAuth tokens without your explicit permission)
• Usage data — basic logs (IP address, request times) for security and abuse prevention

2. How We Use Information

• Generate your personal biography via Anthropic's Claude API
• Store your content so you can come back to it
• Send you essential emails (verification, password reset, account changes)
• Protect the service from abuse via rate limiting

We do not sell your data or use it for advertising.

3. Third Parties

Your data is processed by:

• Amazon Web Services — hosting (EC2, RDS, S3) and email delivery (SES)
• Anthropic — Claude AI for chat and biography generation. Messages are sent to Anthropic's API to generate responses. See Anthropic's privacy policy.

4. Your Rights

• Access — view all your data in the app at any time
• Export — download your biography as PDF (coming soon)
• Delete — permanently delete your account and all data from Settings → Delete Account. Deletion is immediate and irreversible.
• Correction — edit captions, stories, and biography content directly

5. Data Security

We use bcrypt for password hashing, JWT for authentication, TLS/HTTPS in transit, and RDS encryption at rest. Passwords are never stored in plain text.

6. Children

DeerLight is not intended for children under 13. Do not create an account if you're under 13.

7. Contact

Questions or data requests: privacy@deerlight.app