Privacy policy

Your account. A display name, your email address, and your phone number. The display name is generated for you — something like Quiet Fox — and stays that way unless you change it. We ask once whether you want to pick your own, and it is skippable. A real name is never required.

Your wallet and payments. Your balance and a ledger entry for every top-up and every charge. Card and UPI details are handled by our payment provider and never reach Ampathe's servers — we see that a payment succeeded, not the instrument that made it.

Your conversations. When a conversation happened, who it was with, how long it lasted and what it cost. For chat, the message text itself, so a conversation survives a dropped connection. Voice and video are not recorded — no audio or video of a call is stored anywhere.

Safety records. Reports made about conduct, and an audit log of privileged staff actions. These exist so that a suspended account cannot quietly come back, and so that any staff access to your data leaves a trace.

There are two different questions here, and most platforms answer the easy one.

Anonymous to your companion: yes. They see the display name you are using and whatever you choose to tell them. They do not see your email, phone number, payment details, wallet balance, real name, or any other conversation you have had. There is no seeker profile for them to look at, and they cannot search for you.

Anonymous to Ampathe: no. We hold the email you sign in with and the phone number you registered, because a one-time code has to go somewhere and a payment has to be attached to an account. Anyone offering both real anonymity and card payments should be asked how that works.

Anonymous to people you know: yes. Ampathe has no social graph, no contact import, no public seeker profile and no way to search for a person. Nobody can discover that you have an account. One practical exception worth knowing: your card or bank statement will show Ampathe, which matters if the card or the device is shared.

• Your companion — display name only, plus what you say in the conversation.
• Ampathe staff — account and billing records where a job requires it. Conversation content is reachable only when investigating a safety report, and that access is written to an audit log.
• Our payment provider — enough to process a payment, which they do rather than us.
• Nobody else. We do not sell personal data, and we do not share it with data brokers, advertisers or other users.

We will disclose data if a valid legal order requires it. We will not do so on an informal request.

Companions are verified, and verification means we hold more about you than about a seeker: your legal name, your date of birth, and a government ID.

• Your ID number is never stored as plain text. We keep the last four digits so you can recognise which document it is, plus a one-way hash and an encrypted copy that only an administrator can decrypt, with every decryption written to the audit log.
• Your legal name and your ID are visible only to you and to Ampathe administrators. They never appear on your public profile, in the directory, or in any public API response.
• Your public profile shows what you chose to put there — your display name, photographs, languages, interests and what you are comfortable talking about.
• Seekers see your public profile. They do not see your legal name, your documents, your address or your earnings.

Ampathe uses a session token to keep you signed in — remove it and you are signed out. We also use Google Analytics and the Meta pixel to understand aggregate traffic: how many people arrive, from where, and which pages they read.

These are used for measurement, not for building profiles of individuals, and we do not send them the content of conversations. Any standard content blocker will stop them, and nothing about Ampathe stops working if you do.

• Account and profile data: while your account exists.
• Conversation records and messages: while your account exists, so your own history is available to you.
• Financial ledger entries: retained after deletion, because we are required to keep them.
• Safety reports: retained after deletion, because a record that disappears with the account defeats its purpose.
• Companion verification documents: while the companion is active, and for the period we are required to retain them afterwards.

You can ask us for a copy of the personal data we hold about you, ask us to correct something that is wrong, or ask us to delete your account.

Write to info@claponn.com. We will confirm within a few days and complete a deletion within thirty. The two exceptions are the ones above: financial ledger entries and safety reports survive, and we will tell you plainly if either applies to you.

Ampathe is for adults. You must be 18 or older to hold an account, as a seeker or a companion. If we learn that an account belongs to someone under 18 we close it and delete the data.

For anything about privacy, or to raise a complaint about how your data has been handled, write to info@claponn.com. For anything about conduct or safety, write to info@claponn.com — see the safety and verification page for what happens next. The Ampathe terms of use set out the rest of the agreement.

India's Information Technology Rules, 2021 require us to name a Grievance Officer and publish how to reach them. A role with no name attached does not satisfy that, so:

Write to the Grievance Officer about anything to do with your data, this policy, or how a complaint was handled. We will acknowledge within 24 hours and resolve within 15 days, which is what the rules require of us.