Privacy Policy

Effective October 21, 2026

aro is an AI companion for Minecraft: Java Edition, made up of this website, the aro Desktop app for Windows and our cloud service. It is operated by RedQuest Inc., a Delaware corporation ("we", "us"). This policy explains what we collect, why, who we share it with and the choices you have. Contact us at ceo@redquest.ai.

Who can use aro

aro is only for people aged 18 or older. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

Information we collect

• Account. Your email address. If you sign in with Google or Discord, we receive your account ID with that provider and your verified email address; we store the provider ID only as a one-way hash. We never receive your passwords.
• Desktop app. When the app registers, we derive a pseudonymous device ID from a random installation identifier and store it with the app version and your age confirmation. We do not store the raw installation identifier. Your app preferences (appearance, LAN discovery) and confirmations (age, world backup) are saved with your account.
• Conversations. Messages you write to your companion in the app, photos you attach and the companion's replies. The app converts photos to small JPEG images before sending them, which removes their original file details such as location tags.
• Gameplay. While your companion is in your world, it receives game information it needs to play, such as in-game chat messages (including the names and messages of other players in that world), world coordinates, the items it holds, things near it and gameplay events such as the blocks it breaks or places.
• Session traces. For each play session we keep a technical record of how your companion decided and acted: the prompts sent to the AI model and its responses, the game information each decision used, world coordinates, its actions and their results, and gameplay events. We use these records only to diagnose problems and improve the service.
• Companion memory. Your companion keeps memories built from your conversations and play so it can remember you between sessions.
• Plan and usage. Your plan status and how much play time you have used. If you subscribe, Stripe handles the payment; we store only Stripe's customer and subscription IDs and never see your card number.
• Technical data. We use your IP address briefly to prevent abuse and limit repeated requests. We keep only short-lived or keyed one-way hashes of it, never the address itself. We do not keep web access logs. Our service logs contain counters and pseudonymous device IDs, not your messages.

How we use information

We use this information to run your companion, let it remember you, manage your account, free play time and plan, enforce usage and spending limits, keep the service secure and respond to you. We do not sell your personal information, share it for targeted advertising or use third-party analytics or advertising trackers.

Service providers we share information with

• OpenAI generates your companion's replies and gameplay decisions. It receives the prompts with the conversation text, attached photos and game information needed for each request, together with a pseudonymous identifier, and processes them under its API data policies. OpenAI keeps its own logs of these requests for up to 30 days.
• Amazon Web Services hosts our servers in the United States.
• Resend delivers sign-in emails and receives your email address and the sign-in link.
• Stripe processes subscription payments and receives your email address and payment details.
• Google and Discord handle sign-in if you choose them.

We may also disclose information when the law requires it, to protect the rights and safety of users or others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply.

Where information is stored

We store information on servers in the United States.

How long we keep information

We keep your account, conversations, photos, companion memory and app preferences until you delete your account. Session traces are deleted automatically after 30 days, sooner if their storage fills up, and are not kept in backups. Sign-in sessions last 7 days and sign-in links expire after 10 minutes.

When you delete your account, we stop your companion and delete your account record, conversations, photos, companion memory, preferences and session traces. We keep only what we need to run the service safely: an internal marker that the account was deleted (so late payment notices cannot recreate it), pseudonymous device records and counters used for usage limits, and overall cost totals. Stripe keeps its own payment records as payment rules require.

Your choices and rights

You can see your plan and usage on your account page and delete your account there at any time. To ask for a copy of your information, a correction or deletion, email us. Depending on where you live, including California, you may have rights to know, access, correct and delete your personal information, and not to be treated differently for using them. We will not discriminate against you for exercising them, and we may need to confirm your identity before acting on a request.

Cookies

The website uses two strictly necessary cookies: one keeps you signed in for up to 7 days, and one links a sign-in to the browser that started it for up to 10 minutes. We do not use advertising or analytics cookies.

Security

We use HTTPS, restrict access to our servers, store sign-in tokens only as hashes and keep conversations and photos in private storage. No system is perfectly secure, so please contact us if you suspect a problem.

Changes

We will post changes to this policy here with a new effective date and, for significant changes, let you know through the service or by email.

Contact

RedQuest Inc.
28 Geary St., Suite 650 PMB 5474, San Francisco, CA 94108, USA
ceo@redquest.ai

Not an official Minecraft product. Not approved by or associated with Mojang or Microsoft.