Privacy & cookies

Aidriana.me · Updated 5 October 2026

Who runs Aidriana?

Aidriana.me is operated by Switching Brains, an independently run, one-person business in the Netherlands. Aidriana is a digital AI persona. For account support, privacy requests, payment questions or complaints, email support@aidriana.me.

Chamber of Commerce (KvK): 73879630

VAT identification number (btw-id): NL002082418B69

Visit Switching Brains

Information we process

Switching Brains is responsible for the personal information processed to operate Aidriana.me. We store your email address, permanent account ID, verification status, hashed sign-in credentials, sessions, coin balance, wallet ledger, payment references and statuses, chat requests and replies. We do not ask you to create a password.

Security controls process the connecting IP address and email address to limit abuse. Application rate-limit records use keyed hashes. Hosting logs may also contain IP addresses, request paths and technical error details. Contact-form details (name, email, subject and message), IP address and browser information are emailed to our support mailbox to handle your enquiry and prevent abuse. The contact form uses Resend to deliver this message.

To prevent repeated welcome-coin claims, we keep a keyed recognition value (HMAC) of your normalized email address, separately from your account. This record contains no readable email address and remains after account deletion for as long as we operate the welcome offer. It lets us recognize a previously registered address if you sign up again. This is pseudonymous personal data, not anonymous data, and is used only to prevent offer abuse. You can contact support to object to this processing.

Chat and service providers

Messages and an internal account ID are sent to the Switching Brains chat backend. Your email address is not sent as your chat identity. The backend sends conversation content needed to generate a reply to its AI provider, Venice AI. Chat records exist in both the website database and the Brain backend; the latest eight turns used as model context are not a promise that older records have been deleted.

When you request a selfie or voice message, the Brain backend uses fal.ai to generate it. This involves a conversation-derived scene for selfies or the selected reply text for speech, together with Aidriana's reference image or voice. Your account email is not sent as your generation identity. Selfies are available for seven days and voice messages for three days after completion. Expired media files are cleared on subsequent media API access; request and payment records remain for reconciliation.

Resend receives your email address and email content to deliver login codes and purchase confirmations. Purchase confirmations include the amount, coins, confirmation date and purchase reference. Mollie processes payments and receives the payment information you enter at checkout. The website stores references, amounts and status rather than card details. Hosting and these providers process information under their applicable arrangements. Provider processing may take place outside the European Economic Area; contact us for details of the applicable providers, locations and transfer safeguards.

Why we use this information

Account, chat and payment processing needed to supply the services you request is based on performance of our agreement. Security and abuse prevention serve our legitimate interests in protecting the service and its users. Records required by law are processed to meet those obligations. Reading this notice or signing in does not subscribe you to marketing.

Cookies and external links

Essential first-party cookies support sign-in and security. The temporary login cookie lasts up to 30 minutes; the signed-in session cookie lasts up to 30 days. You can end it earlier with “Goodbye / sign out” on the chat or coins page; signing out revokes that session. These cookies are not used for advertising. The current website does not include analytics or advertising trackers.

Fonts are loaded from Google Fonts, which receives your IP address and browser request information when those resources load. Social and other external links take you to services with their own privacy practices; they are not embedded social feeds on this site.

Storage and deletion

Login codes expire after 10 minutes and are removed on successful use; expired codes and security counters are cleaned during later login activity. Sessions expire after 30 days, with expired records cleaned during later successful logins.

You can request account deletion from your signed-in account and confirm it using a separate email code, valid for ten minutes. After successful deletion, your login email, sessions, conversations and stored media are removed from the active account and chat systems, and remaining coins are forfeited. Pending payments or chat requests must first be resolved. Necessary financial records, including purchase confirmations, payment references and an opaque accounting identity, remain, as does the keyed recognition value used to prevent repeat welcome gifts. Provider records and backups have separate retention arrangements. Contact support for questions or requests concerning these records. Signing out alone does not delete your account or conversations.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or a portable copy of your information, and object to certain processing. Email the support address above; we may need to verify that the request is yours. You can complain to your local data protection authority, including the Dutch Autoriteit Persoonsgegevens.