Privacy policy
Version 2026-11-04.2
What we keep
- Your account: name, email, and a scrambled (hashed) password. We never see your password itself.
- Your chats, the images you make, and the pictures you upload, so you can come back to them.
- For each reply and image: which model made it, when, how long it took and how many tokens it used, so we can run and pay for the service. These usage records never contain what you wrote.
- When a safety check stops a request, upload or image: a record with your account, the time, the reason and the text of the request. It is kept for 12 months, even if you delete your account, and the person running Alcova can read it.
- Your plan, whether your account is active, when you were last active, and a log of what administrators do to your account.
- When you confirmed your age and accepted the terms, and the results of the automatic safety checks on your uploads.
Who else sees it
The person who runs Alcova can open your account to review it for safety: your plan and usage, the pictures you made or uploaded, and the safety records above. They can’t see your password. Each time they open your account it is logged.
To answer you, Alcova sends your message and the conversation so far to AI model providers through OpenRouter. To make or edit an image, it sends the prompt (and, for edits, the picture) to its image provider. Safety checks send your image requests, a small preview of each image, and each upload to an AI model for review. Those providers handle the data under their own policies. Alcova runs on Railway’s servers.
We don’t sell your data, show ads, or use your content to train models.
How long we keep it
Until you delete it. Deleting a chat or image removes it from Alcova straight away. To delete your whole account, contact the person who invited you. Content stopped by a safety check isn’t kept.
Cookies
One cookie keeps you signed in. There are no tracking or advertising cookies.
Children
Alcova is only for adults. We don’t knowingly collect data from anyone under 18, and close such accounts when we learn of them.
Contact
Questions or requests about your data: the person who invited you. See also the Terms.