This Privacy Policy explains how Koro Interactive Pte. Ltd. (UEN 202525340Z), a private company limited by shares incorporated in Singapore (“Koro Interactive”, “we”, “our”, or “us”), collects, uses, and discloses personal data in connection with the NariYume mobile application for iOS (the “App”).
We comply with the Singapore Personal Data Protection Act 2012 (“PDPA”). Where applicable, we also observe the EU General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”) for users in those jurisdictions.
When you sign in with Sign in with Apple or Google, we receive a stable user identifier (your Firebase UID). We store it alongside your chosen display name and, if your Apple/Google account shares it, your email address. We do not receive your Apple or Google password.
Your messages, the AI’s replies, and metadata about your character’s mood and affection state are saved so the App can give you a continuous experience across launches and devices. This content is stored in Google Firebase (Firestore) under a document keyed to your Firebase UID, and locally on your device via Apple’s SwiftData framework.
When you use voice mode, audio is captured by your device’s microphone and transcribed on-device using Apple’s Speech Recognition framework. The transcribed text is then sent to our AI inference proxy (see §4) to generate a reply. We do not store raw audio recordings.
Firebase Analytics is enabled to help us understand aggregate feature usage and stability. We have configured the SDK so that no data is collected for cross-app or cross-site tracking. We do not use your data to build advertising profiles.
If you subscribe to NariYume Premium, Apple handles payment and shares a transaction identifier with us so we can grant your entitlement. We do not receive your payment card details.
We collect and use personal data for the following purposes:
By using the App you consent, to the extent required under the PDPA, to the collection, use, and disclosure of your personal data for these purposes.
AI responses are generated by third-party large-language models
accessed through an inference proxy we operate at
proxy.korointeractive.com. When you send a message,
the App forwards your message, the recent conversation context,
and the character’s system prompt to this proxy, which
routes the request to an underlying model provider (currently
OpenRouter, which in turn fronts various model providers).
We do not share your name, email, or any other direct identifier with the inference provider — only the message text and the conversation context needed to generate a reply. Model providers retain request payloads briefly to monitor for abuse; we have opted out of any provider setting that would permit using your payloads to train their models.
Every AI-generated message in the App exposes a Report action. When you tap Report, we record the message identifier, a truncated copy of the reported text, your Firebase UID (if signed in), and a timestamp in a separate Firestore collection used solely for human moderation review.
We do not sell personal data. We disclose personal data only to:
Your personal data is stored on Google Cloud infrastructure, which may process data in the United States, the European Union, or other countries. Where we transfer personal data out of Singapore, the EU, or the United Kingdom, we rely on contractual protections (including Standard Contractual Clauses where applicable) and on the security guarantees of our underlying providers.
The App is intended for users aged 13 and older, or the minimum digital-consent age applicable in your jurisdiction, whichever is higher. We do not knowingly collect personal data from children below that age. If we learn that we have, we will delete it promptly.
Depending on where you live, you have the following rights:
To exercise any of these rights, email our Data Protection Officer at privacy@nariyume.com. We will respond within 30 days.
We use Apple’s Keychain for on-device credential storage, Firebase’s managed security model for cloud data, and TLS for every network request. No system is perfectly secure; we encourage you to use a strong Apple ID / Google account password and enable two-factor authentication.
If we become aware of a personal-data breach that is likely to result in significant harm to you, we will notify you in accordance with applicable law (including the PDPA’s data breach notification obligation).
We have designated a Data Protection Officer responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO at privacy@nariyume.com.
We may update this Policy from time to time. When we do, we will post the new version here and update the date above. If the change is material, we will notify you inside the App.
Privacy and data requests: privacy@nariyume.com
General support: support@nariyume.com
Data Controller: Koro Interactive Pte. Ltd. (UEN 202525340Z), Singapore.