Privacy Policy for YourAvatar.ai

Effective Date: 01/05/2025

1. Who We Are

YourAvatar.ai is a trading name of Your Avatar Ltd, a UK-based company creating emotionally intelligent, AI-powered avatars for social connection, business, healthcare, and legacy purposes. We are committed to protecting your personal data and upholding your rights under UK data protection law.
Company Registration Number: 15231817
Registered in England & Wales Email: [email protected]

2. What Data We Collect

We may collect and process the following types of personal data:

a. Directly Provided by You:

Name, contact details (email, phone), and organisation (if applicable)
Voice, image, or video data for avatar creation
Written content (e.g. stories, memories, scripts) for avatar training
Written content (e.g. stories, memories, scripts) for avatar training
Newsletter sign-up information

b. Automatically Collected:

Device, browser, and IP address information
Usage data (site visits, click patterns) via cookies or analytics tools

c. Special Category Data (with explicit consent):

Biometric data (facial likeness, voiceprints)
Health-related data (heart rate, medication reminders, mood detection)
Emotional and behavioural cues (tone, expression, user preferences)

3. How We Use Your Data

We process your data to:

Create and personalise avatars as requested
Enable avatars to engage in meaningful, context-aware conversations
Enable avatars to engage in meaningful, context-aware conversations
Facilitate legacy experiences and family interactions
Respond to contact form requests or demo bookings
Send launch or service updates (if opted in)
Improve and secure our platform

4. Improve and secure our platform

We rely on the following lawful bases under UK GDPR:

Consent – for biometric, health-related, or legacy use cases
Contract – to deliver services you've requested
Legitimate interests – for R&D, platform improvement, and security
Legal obligation – where necessary to comply with laws

5. Sharing of Your Data

We may share your data with:

Technology partners (e.g. Microsoft Azure) for secure hosting and processing
Healthcare or academic collaborators (with consent)
Payment or analytics providers (e.g. Stripe, Google Analytics)
Law enforcement or regulators where legally required

We never sell your data.

6. International Transfers

Data may be processed outside the UK/EEA using secure cloud providers (e.g. Microsoft Azure). Where applicable, Standard Contractual Clauses or UK adequacy regulations are used to protect your data.

7. Data Retention

Contact and sign-up data: retained until the user unsubscribes or requests deletion
Avatar-related data: retained for the period of active use plus [12 months] unless deleted earlier
Health/biometric data: only stored with explicit consent and deleted upon request

8. Your Rights

You have rights under UK GDPR to:

Access, correct, or delete your data
Object to or restrict certain types of processing
Withdraw consent at any time
Request data portability
Lodge a complaint with the UK Information Commissioner’s Office (ICO)

To exercise your rights, email us at [email protected]

9. Children

Our services are not intended for children under 13 unless provided with verified parental consent. If you believe we have collected data in error, contact us immediately.

10. Security

We use state-of-the-art encryption, secure hosting, and access controls to protect your data. While no system is 100% secure, we actively monitor and mitigate risks.

11. Cookies

We use essential and analytics cookies to improve site performance. You can manage preferences through your browser or via our cookie notice.

12. Updates

We may revise this Privacy Policy from time to time. Any significant changes will be communicated on our website or via email where appropriate.