your data, your rights

privacy policy

last updated: april 2026

who we are

3.2.1 émotion inc. is a company headquartered in new york city, usa. we build technology that puts emotional intelligence at the center of digital communication.

this policy covers all 3.2.1 émotion services, including the émo messenger mobile app, our websites (321emotion.com, emomessenger.com, emopsycho.com), and related services.

for any questions regarding this policy, you can reach us at privacy@321emotion.com.

what we collect

we believe in collecting only what we truly need. here is what we gather:

account information

  • display name — to identify you within the app
  • phone number — for account verification and authentication
  • email address (optional) — for account recovery
  • date of birth — for age verification

content you create

  • emotional messages — the emotions you craft and send to your connections
  • shared files — images, audio, and other media you share
  • connection data — your social graph within the app (who you connect with)

technical data

  • device push notification token — to deliver notifications to your device
  • device type, app version — for compatibility and debugging
  • usage analytics — how you interact with the app (screens visited, features used)

website data

  • email address — when you join our waitlist or use our contact form
  • anonymous site analytics — page views, referral source (no personal identifiers)

how we use it

your data is used exclusively to:

  • deliver the émo messenger service — sending and receiving emotional messages
  • authenticate your identity and secure your account
  • deliver push notifications you have opted into
  • improve our services based on aggregated usage patterns
  • respond to your inquiries and support requests
  • send waitlist updates — only if you opted in

we never use your data for advertising. ever.

ai processing

émo messenger includes ai-powered features that enhance your experience. when you use these features:

  • conversation data may be processed by anthropic (claude ai) for safety filtering and content assistance
  • image generation requests may be processed by replicate (flux ai)

these third-party ai processors receive only the data necessary for the specific feature. they process data under their own data processing agreements and do not use your data to train their models. anthropic retains api data for up to 30 days for safety and abuse monitoring.

you can use émo messenger without engaging ai-powered features.

cookies & tracking

on our websites, we keep things minimal:

  • session analytics — we use a lightweight, privacy-first analytics system to understand site usage. this uses a session identifier stored in your browser's local storage. it resets each session and is not linked to your identity
  • no advertising cookies
  • no third-party tracking cookies

you can decline analytics when visiting our sites via the consent banner. if you decline, no analytics data is collected.

the émo messenger app does not use cookies.

data storage & security

your data is stored and protected as follows:

  • primary database — hosted on supabase (aws infrastructure, us-east-1 region), encrypted at rest
  • website data — hosted on cloudflare (global cdn), encrypted at rest and in transit
  • shared files — encrypted end-to-end with per-file encryption keys
  • all communications — protected by tls 1.2+ encryption in transit
  • authentication — jwt-based tokens, no passwords stored

data retention

we retain your data only as long as needed:

data typeretention period
account profileuntil you delete your account
emotional messages & shared filesuntil you delete your account
usage analyticsup to 2 years (aggregated)
real-time analytics30 days
website analytics90 days
push notification tokensuntil logout or account deletion

when you delete your account, we offer a 30-day cooling-off period during which you can recover your data. after 30 days, all personal data is permanently and irreversibly deleted across all our systems.

third parties

we share data only with the following service providers, solely to operate our service:

  • supabase — database hosting and authentication (usa)
  • cloudflare — website hosting, cdn, and security (global)
  • apple push notification service (apns) — push notification delivery
  • anthropic — ai safety filtering and content assistance (usa)
  • replicate — ai image generation (usa)

we have data processing agreements in place with each of these providers. we do not sell, trade, or otherwise transfer your personal data to any other third party. ever.

international data transfers

3.2.1 émotion inc. is based in the united states. if you are accessing our services from the european union or france, your data may be transferred to and processed in the usa. we ensure appropriate safeguards are in place through data processing agreements with all our service providers, in compliance with gdpr chapter v requirements.

your rights

under the gdpr (eu/france), ccpa (california), and applicable law, you have the right to:

  • access — request a copy of your personal data
  • rectification — correct any inaccuracies in your data
  • deletion — request permanent deletion of your data ("right to be forgotten")
  • portability — receive your data in a machine-readable format
  • restriction — limit how we process your data
  • objection — object to processing based on legitimate interests
  • withdraw consent — revoke any previously given consent at any time
  • complaint — lodge a complaint with a supervisory authority

for eu/french users: the supervisory authority is the cnil (commission nationale de l'informatique et des libertés), 3 place de fontenoy, 75007 paris, france — www.cnil.fr.

for california users: you have additional rights under the ccpa, including the right to know what personal data is collected, the right to delete, and the right to opt out of the sale of personal data. we do not sell personal data.

to exercise any of these rights, contact us at privacy@321emotion.com. we will respond within 30 days.

account deletion

you can delete your account at any time from the app settings. when you request deletion:

  • your account is immediately deactivated
  • you have 30 days to change your mind and recover your data
  • after 30 days, all personal data is permanently deleted across all our systems — including messages, connections, analytics, push tokens, and encryption keys

age requirement

émo messenger is available to users aged 16 and older. we verify age during the sign-up process and do not knowingly collect personal data from anyone under 16.

changes

we may update this privacy policy from time to time. significant changes will be communicated through our website, the app, or via email if you are on our mailing list. continued use of our services after changes constitutes acceptance of the updated policy.

contact

if you have any questions about this privacy policy or your personal data, please reach out:

  • privacy inquiries: privacy@321emotion.com
  • general contact: contact@321emotion.com
  • phone: +1 551 EMOTION

see also: terms of service · FAQ · about us