HK HeyKira
Privacy Policy Mobile App + Website Effective April 23, 2026

Trust, plainly stated

Your conversations deserve clear rules, not vague promises.

This Privacy Policy explains what information HeyKira collects, how it is collected and used, when it is shared, how long it is kept, and the choices available to you when using the HeyKira mobile app, public website, and support services.

iPhone Android Public Website
01

Scope

This Privacy Policy applies to personal information processed by HeyKira in connection with our iOS and Android applications, our public informational website, communications, and support services. HeyKira is the operator responsible for this policy.

A browser-based HeyKira chat service is currently in development and is not yet available. This policy does not describe data processing for an unreleased web chat service; we will update it before that service begins processing user conversations or media.

Third-party websites, app stores, identity providers, and services linked from HeyKira may process information under their own privacy policies as independent controllers.

02

Information We Collect

Account and profile information

We collect information you provide when creating or updating an account, such as your email address, nickname, gender, zodiac sign, hobbies, AI preferences, and information supplied through Apple or Google sign-in. We also collect support messages and feedback that you send to us.

Chats and generated content

We process your chat messages, prompts, AI responses, conversation history, selected characters, and requests for generated images, video, or other media. This content is sent directly by you through the app or created in response to your requests.

Voice, camera, and photos

If you choose these features, the app requests microphone, camera, or photo-library access to record and process voice, take or select photos, save media, or provide reference images for generation. Voice recordings and generation reference images may be uploaded for processing. Photos selected only as an in-app background remain on your device.

Device, usage, and diagnostics

We may collect an app-generated device identifier, internal user identifier, IP address, operating system, app version, language, screen and feature interactions, login and signup events, call direction and duration ranges, gem usage, crash reports, error details, and technical diagnostics. Our public website and its hosting or font providers may also receive standard request data such as IP address, browser type, and access time.

Purchases and subscriptions

When you buy subscriptions or digital items, we receive and store transaction, order, product, price, currency, entitlement, and verification information. Apple or Google processes your payment credentials; HeyKira does not receive or store your full bank card number.

Attribution information

We may receive campaign source, referral link, install, first open, login, signup, and purchase events used to measure marketing and prevent fraud. AppsFlyer is configured not to collect iOS advertising identifiers. We do not send raw chat, voice, photo, or generated content to AppsFlyer.

03

How We Use Information

Provide the service

  • Create, authenticate, and manage your account.
  • Deliver chat, voice, call-style, camera, photo, and media-generation features you request.
  • Maintain conversation history and synchronize relevant account information.
  • Process purchases, subscriptions, digital balances, and support requests.

Operate safely

  • Secure accounts, diagnose crashes, and maintain service reliability.
  • Prevent fraud, abuse, unauthorized access, and violations of our terms.
  • Comply with applicable law and valid legal requests.

Understand and improve

  • Measure how screens and features are used.
  • Evaluate engagement, service quality, and product performance.
  • Develop, test, and improve existing and future features.

Measure marketing

  • Attribute installs and conversion events to campaigns.
  • Compare campaign performance and detect attribution fraud.
  • We do not use chat, voice, photo, or generated content for advertising targeting.
04

Sharing and Disclosure

HeyKira does not sell your personal information. We disclose only the information reasonably necessary for the purposes described below:

  1. Supabase provides authentication, database, storage, and server-side functions used to operate HeyKira. Depending on the feature, it may process account details, profiles, conversations, uploaded voice or images, generated media, transaction verification data, and technical metadata.
  2. Google Firebase Analytics processes app usage and event data so we can understand feature performance. Google Firebase Crashlytics processes crash reports, stack traces, and device or app diagnostics so we can find and fix failures. We do not intentionally send raw chat or generated content to these services.
  3. AppsFlyer processes attribution, install, login, signup, and purchase event data to measure campaigns and detect fraud. We do not send raw chat, voice, photo, or generated content to AppsFlyer.
  4. Apple and Google may process sign-in and app store purchase information when you use their authentication or payment services.
  5. AI, voice, and media-processing providers may process the prompts, conversations, recordings, reference images, and other inputs necessary to produce the feature or output you request.
  6. Website infrastructure providers, including our hosting or content-delivery providers and Google Fonts, may process standard web request and security information when you visit our public website.
  7. We may disclose information when required by law or valid legal process; to protect HeyKira, our users, or the public; or in connection with a merger, financing, acquisition, or asset sale subject to appropriate safeguards.

We require service providers acting on our behalf to process personal information only for instructed purposes, use appropriate security and confidentiality measures, and provide the same or an equivalent level of protection described in this policy. They may not use that information for their own unrelated purposes.

05

Retention and Security

Account and service content

We generally retain account and profile information while your account is active. Conversations, uploaded voice or images, generated media, and related records are kept while needed to provide the requested features and maintain your history, unless you delete them or request account deletion.

Operations and transaction records

Usage, analytics, crash, security, and support records are retained only as long as needed for analysis, reliability, fraud prevention, and support. Purchase and transaction records may be kept longer when required for accounting, tax, payment verification, dispute resolution, or legal compliance.

Deletion and backups

When information is no longer needed or a valid deletion request is completed, we delete or de-identify it. Limited copies may remain temporarily in backups or be retained when required by law, to resolve disputes, enforce agreements, or prevent security and fraud risks, after which they are deleted or de-identified under our normal retention process.

Security

We use administrative, technical, and organizational measures designed to reduce unauthorized access, loss, misuse, or alteration. No system can guarantee absolute security, so you should also protect your credentials and devices.

06

Your Rights and Choices

Access and correction

You may review or update available profile information in the app, or ask us to provide access to or correct personal information we hold about you.

Deletion

You may use the account deletion option in the app or email us to request deletion of your account and associated personal information, subject to the limited retention grounds above.

Permissions and consent

Camera, photo, and microphone access can be changed in your device settings. Where processing relies on your consent, you may withdraw it at any time through the available setting or by contacting us. Withdrawal does not affect earlier lawful processing, and disabling a permission may make the related feature unavailable.

Objection and regional rights

Depending on your location, you may request portability, restriction, or objection, and may have a right to appeal or complain to your local data-protection authority. You may also opt out of non-essential promotional communications.

To exercise a right or ask about a choice not available in the app, email support@heykira.me. We may need to verify your identity before completing a request.

07

Children

HeyKira is not intended for children under the age required by applicable law to consent independently to data processing. If you believe a child has provided personal information without proper authorization, contact us so we can review and take appropriate action.

08

Policy Updates

We may revise this Privacy Policy to reflect product, provider, or legal changes. If changes are material, we may provide notice through the app, public website, or another appropriate channel. We will update this policy before a browser-based HeyKira chat service begins processing user conversations or media. The version displayed here reflects the effective date shown above.

09

Contact Us

HeyKira is the operator responsible for this policy. For privacy questions, consent withdrawal, access, correction, or deletion requests, contact:

support@heykira.me

For general account, purchase, or app assistance, visit the HeyKira Support Center.