Privacy at Aesthetico

Aesthetico Limited, an Ontario, Canada corporation ("we"), makes PASSING and The Koan Epoch ("the apps") and runs aesthetico.cloud and aesthetico.art. This page says what the apps collect, who else sees it, how long we keep it and how to have it deleted. Last updated: 6 November 2026.

The short version

• The apps are for adults: you must be 18 or older.
• Everything you say or type in a game goes to our server and to AI services that write the replies and the voices. Don't tell the apps anything you wouldn't want processed that way.
• Our server never receives your voice, only the text your phone makes from it.
• We don't sell your data and we don't show ads. No analytics, no tracking, no advertising IDs.
• In PASSING, data you leave untouched for six months is deleted automatically. In either app you can have it deleted: in PASSING, Settings → Delete my data; for either app, email admin@aesthetico.cloud.

1. What we collect

In both apps

• An access code we give you, which is how you sign in. No email, password or payment details.
• What you say and type in the game, as text: your lines, the characters' replies, and the game's record of the story.
• Usage and cost records: for each request to an AI service, which service, how long it took, how many tokens and what it cost. Not what was said.

PASSING also keeps

• A display name, when you confirmed you're 18+ and agreed to the "fiction, not therapy" notice, and your settings (pronouns, voice on or off).
• Each call's and text thread's outcome, scores and debrief; the claims you made in character; the texts, voicemails and missed calls on your in-game phone; the worlds you deal and what the story remembers about them.
• When the safety check stepped in, and what you chose next.
• Only if you tap them: "Send a report" (your note, plus the app's recent log: timings, audio route, errors, device and build) and 👍/👎 on a call.

The Koan Epoch also keeps

• A reading of how you play: the game builds a picture of your choices and disposition to shape the story. It's kept with your run.
• Reflections on a run: at the end of a chapter, an AI writes about the run, which can describe you and quote you; the letter written to you at the end; your notes and your answers to end-of-run questions.
• Microphone log: when listening fails, the app sends state changes, word counts and the audio route (for example Bluetooth). Not the words.
• Shared story moments: we may hand-pick short excerpts from runs to help the storyteller write for other players, never with anything that identifies you.

What we don't collect: contacts, location, photos, camera, advertising IDs, analytics or crash SDKs, IP addresses or device identifiers (our code doesn't record them; our host may see IP addresses at its edge).

2. Who else sees it (service providers)

We send the text of your lines, and the game's instructions around them, to these services so the apps work. Requests carry no access code or account ID, though your words themselves may identify you.

These services may process data outside Canada, including in the United States and China (DeepSeek). Each service handles your words under its own terms. Our API keys for these services live only on our servers, never in the apps.

3. How long we keep it

• PASSING: six months after your last activity (signing in, playing, dealing a world), everything tied to your code is deleted automatically.
• The Koan Epoch: we keep your runs until you, or we on your request, delete them.
• Usage and cost records are kept longer.
• In PASSING, deleting (by you or by the six-month rule) removes your account data, transcripts, story, messages, worlds and reports from our database; your access code stays, so you can start fresh.
• We don't run scheduled backups. If we make a one-off copy before maintenance, we delete it within six months, so something you delete can survive in such a copy for up to six months.

4. Your choices

• Delete your data: PASSING: Settings → Delete my data, at once, for every run on your code. Koan: you can delete a short unfinished run in the app. Either app: email admin@aesthetico.cloud and we'll delete it within 30 days.
• See or correct your data: email admin@aesthetico.cloud.
• Optional collection: reports and ratings are sent only when you tap them.
• Depending on where you live (for example Canada's PIPEDA, the EU and UK GDPR, California), you have rights to access, correct and delete your data; email us and we'll respond within the time the law sets.

5. Who can reach your data

Your access code is the key to your runs: another player can't open them without it. We can, for support and safety; and the AI services above receive your words as described. Keep your code to yourself. Codes can be turned off, and each has a spending cap.

6. Safety

If something you say suggests you might be in real distress, PASSING steps out of the fiction and checks in. This is automated and is not a substitute for help. In Canada or the US, call or text 988, any time; elsewhere, call your local emergency number. The apps are play and practice, not therapy, advice, or a way to deceive real people.

7. Children

The apps are for adults (18+). We don't knowingly collect data from anyone under 18; if we learn we have, we delete it.

8. Security

Connections to our servers are encrypted; our databases aren't open to the public internet; keys stay on our servers. No system is perfectly secure. If a breach affects you, we'll tell you and the authorities as the law requires.

9. Our websites

aesthetico.cloud and aesthetico.art have no accounts, cookies, forms or analytics. Pages that use your microphone process it in your browser only. Our hosts keep standard visitor logs.

10. Changes and contact

We'll post changes here and update the date. Aesthetico Limited, Ontario, Canada. admin@aesthetico.cloud.