Privacy Policy

1. Who we are

AIM ("AIM," "we," "us," or "our") is an AI assistant built for African users, available on the web at aim.empireunion.xyz and as a Telegram bot. AIM is operated by Empire AI, registered in the Federal Republic of Nigeria, with a registered address at Lagos, Nigeria.

This policy explains what information we collect when you use AIM, why we collect it, who we share it with, and the choices you have. It applies to the AIM web app, the AIM Telegram bot, and the AIM developer API.

2. Information we collect

2.1 Account information

To use AIM you need an account ("Empire ID"), handled through our identity provider, Logto. When you sign up or sign in, we receive and store your email address, display name/username, and a unique account identifier. If you use AIM through Telegram, we also store your Telegram user ID and username, and link it to the same account if you connect both.

2.2 Conversations and content you provide

We store the messages you send AIM and the responses you receive, so that your chat history is available across sessions and devices. This includes any files, images, or documents you upload for AIM to read, summarize, or act on, and any documents, images, audio, or other files AIM generates for you.

If you ask AIM to remember something about you (a preference, a fact, a standing instruction), it's saved to your personal memory profile so future conversations can use it. You can view, edit, and delete these saved facts at any time from Settings, and clearing them removes them from what AIM uses going forward.

2.3 Medical Mode

AIM offers an optional "Medical Mode" for informational support about symptoms and health questions. AIM is not a medical provider, does not diagnose conditions, and Medical Mode is not a substitute for professional medical care — this is stated to you at the start of every Medical Mode conversation. Anything you share in Medical Mode (symptoms, medications, history you volunteer) is treated as sensitive personal data: it's stored only to keep that conversation coherent and to let you pick it back up later, it is never used for advertising, and it is included in full when you delete your account. We recommend not sharing government ID numbers, insurance details, or other identifiers beyond what's needed to describe how you're feeling.

2.4 Connected third-party accounts

AIM can connect to other services at your request, to carry out actions you explicitly ask for:

• Google (Calendar, Contacts, Sheets, YouTube, Gmail) — connected via our integration partner, eConnect. We receive an authorization token that lets AIM take the specific actions you request (e.g. reading upcoming events, sending an email you asked it to send). We do not browse your Google account beyond what a given request needs.
• GitHub — connected via AIM's own GitHub App, scoped only to the repositories you explicitly grant access to. We store an installation reference (not your GitHub password or a broad token) and use it to read files, open pull requests, or comment on issues only when you ask AIM to.

You can disconnect any connected account at any time from Settings; doing so revokes AIM's access on our side and, for GitHub, you can also remove the AIM App installation directly from your GitHub account settings.

2.5 Payment information

Paid plans are billed through Stripe and Flutterwave. We never receive or store your full card number — Stripe's and Flutterwave's own checkout pages collect that directly. We store your subscription plan, renewal date, and a customer reference ID from each processor so we can show your billing status and process renewals or cancellations.

2.6 Usage & technical information

We keep basic logs of feature usage (for example, how many messages or GitHub actions you've used against your plan's limit, so we can enforce fair-use caps), error logs for debugging, and feedback you submit about specific responses. If you use the AIM developer API, we log API requests against your API key for billing and abuse-prevention purposes.

3. How we use your information

• To operate AIM and generate responses to your messages
• To keep your chat history, memories, and preferences available across sessions
• To carry out actions you explicitly request through a connected account (send an email, create a GitHub PR, generate a document, etc.)
• To process payments, manage subscriptions, and enforce plan limits
• To send you transactional notifications (billing receipts, task reminders, plan-expiry warnings) based on your notification preferences
• To detect abuse, enforce our Terms of Service, and keep the service secure
• To improve AIM's features and reliability

We do not sell your personal information, and we do not use your conversations to serve you third-party advertising.

4. AI models & message processing

To generate a response, your message (and relevant context, like recent chat history or a document you uploaded) is sent to the AI model powering that response. Depending on the model or mode you're using, this may be one of several providers:

These providers process your message to return a result to AIM; they act as our service providers for this purpose and are contractually restricted from using your data to train their own models on our traffic, to the extent each provider's own terms allow us to set that restriction. A short on-device classifier (not a third-party call) also looks at your message locally to decide whether a web search is needed — this runs on our own servers, not a third party's.

5. Connected accounts & automated actions

AIM can run multi-step tasks on your behalf — for example, searching for information, then drafting an email, then sending it, possibly minutes, hours, or days after you asked, on a schedule you set. When you set up a task like this, you are directing AIM to take those actions using whichever connected accounts the task needs (Google, GitHub, etc.). We log what a task did (which steps ran, whether they succeeded) so you can review it from the Tasks page, but we do not use this access for anything beyond completing the task you defined. See our Terms of Service for more on your responsibility for tasks you set up.

6. Who we share information with

We share information only as needed to run AIM, with these categories of service providers:

We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of AIM, our users, or others. If AIM is ever involved in a merger, acquisition, or sale of assets, we will notify you before your information becomes subject to a different privacy policy.

7. Data retention

We keep your account, conversations, and saved memories for as long as your account is active. If you delete your account from Settings, we immediately delete your conversations, chat memory, projects, and saved memories from our database. Billing records may be retained separately by Stripe and Flutterwave for as long as they are legally required to keep them, independent of your AIM account. Aggregated or de-identified usage data that can no longer be linked back to you may be kept for product analytics.

8. Your rights & choices

Depending on where you live, you may have the right to:

• Access a copy of the personal information we hold about you
• Correct inaccurate information (most of this you can edit directly in Settings)
• Delete your account and associated data
• Withdraw consent for a connected account by disconnecting it
• Object to or restrict certain processing
• Opt out of non-essential notifications from Settings > Notifications

You can delete your saved memories individually or all at once from the Memory page in Settings, and you can permanently delete your account and its data at any time from Settings > Account. To exercise any other right, contact us using the details in section 14.

9. Children's privacy

AIM is not directed at children under 13, and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact us and we will delete it.

10. International data transfers

AIM is operated from the Federal Republic of Nigeria, and several of the service providers listed above are based outside your home country (including the United States). Where we transfer personal information across borders, we rely on the service providers' own safeguards (such as standard contractual clauses) and take reasonable steps to ensure your information continues to receive an appropriate level of protection.

11. Security

We use industry-standard measures to protect your information, including encryption in transit, access controls on our database, and never storing full payment card numbers ourselves. No system is completely secure, and we can't guarantee absolute security of information you transmit to us.

12. Cookies & similar technologies

The AIM web app uses your browser's local storage to remember interface preferences (like light/dark theme and text size) on your device — this data stays on your device and isn't sent to our servers. Our sign-in provider, Logto, may set cookies or similar tokens needed to keep you signed in securely. We don't use cookies for third-party advertising.

13. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the "Effective" date at the top of this page and, where appropriate, notify you directly (for example, by email or an in-app notice).

14. Contact us