To opt out of sale or sharing for targeted advertising, select Your Privacy Choices, then Essential only. No account is required. We honor Global Privacy Control.
This Privacy Policy explains how Koro Interactive Pte. Ltd. (UEN 202525340Z), a private company limited by shares incorporated in Singapore, with its registered office at 60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051 (“Koro Interactive”, “we”, “our”, or “us”), collects, uses, and discloses personal data in connection with the NariYume mobile application for iOS and the NariYume web app at nariyume.com/app (together, the “App”).
We comply with the Singapore Personal Data Protection Act 2012 (“PDPA”). Where applicable, we also observe the EU General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”) for users in those jurisdictions.
When you sign in using one of the methods we offer (for example Apple, Google, X, or email and password), our authentication provider gives us a stable account identifier. We store it alongside your chosen display name, the birth date you enter during setup (used for the age gate and birthday features; only the month/day and a coarse age range are sent to AI providers, see §4), and your email address when you or your sign-in provider supplies it. We do not receive or store your plaintext password. We also use a per-device identifier to manage which sessions are signed in to your account.
Your messages, the AI’s replies, saved memories (facts, entities and relationships extracted from conversations), and metadata about your character’s mood and affection state are saved so the App can continue a conversation across launches and devices. This content may be stored on your device, in your browser, and with our cloud storage providers under your account identifier. Guest activity remains local. Your account profile and subscription entitlement are stored with our cloud providers. Section 5 describes how content may be reviewed.
When you use voice features, audio is captured by your device’s microphone and converted to text, either on your device or by our speech-to-text service providers. We do not store these recordings in our application database. Providers may retain limited data under their own terms for reliability and abuse monitoring. The resulting transcript is handled like a typed message (see §4). You can use typed input instead.
For signed-in accounts, we keep content-free service records of account access, generation requests and outcomes, usage limits, checkout creation and completion, and payment status. These records use protected account references and help us reconcile usage, billing and service failures. They do not depend on browser measurement. Retention depends on the category and collection date, as described in section 8. They contain no conversation text, audio, memories or raw account ID. Recording a service event does not enable advertising or grant permission to share it with advertising services.
Our apps and website use first-party and service-provider analytics to record bounded usage steps, errors and timings so we can keep the service working and improve it. Product measurement is part of the service in every region and is not an optional setting: by using the App you agree to it under our Terms of Service. If you do not want it, please stop using the App and request deletion. It excludes conversation text, voice recordings, memories, names and email addresses. Random browser identifiers and protected account references link permitted steps across sign-in and checkout. Section 8 describes event storage and deletion. Our infrastructure providers may create ordinary security, performance and request logs. We do not fingerprint your device.
Advertising and social media partners. A separate advertising setting lets us share limited data with the advertising and social media platforms we use to promote NariYume (“advertising partners”). When advertising measurement is enabled, we may share: events (visits, sign-ups, engagement milestones such as reaching the daily free limit or opening our plans page, checkout starts, and purchases with their value and currency); and identifiers (browser and device information, network addresses, advertising click identifiers, protected account references, and a one-way hashed version of your email address that partners use only to match you with your account on their platform). A hash is a matching identifier, not anonymous data. Partners use this data to measure our advertising, improve which people see our ads, and build or exclude audiences, including audiences of similar people. Some partners’ website scripts run on our site and may set advertising cookies; they receive only the product events described here, not conversations or form fields. We never share conversations, voice recordings, memories, or your plain-text email address with advertising partners, and we do not build audiences from your conversations. Advertising click identifiers are kept in your browser for up to 30 days and are encrypted on our servers for the same period. We receive campaign reports from our advertising partners. A current list of our advertising partners is available on request (see §15). Our Data Usage Policy summarises this sharing.
Advertising measurement is enabled by default, including before you sign in, subject to opt-out and Global Privacy Control, except in the European Economic Area, the United Kingdom (including Gibraltar and the Crown Dependencies), Switzerland and Quebec. There, it is enabled only after you choose to allow advertising, and we will ask again before relying on that choice for a new kind of advertising use. Advertising measurement uses browser identifiers and is not anonymous. Refusing it does not restrict app access. Use the Your Privacy Choices button on this page, accessible from Settings or the site footer, and select Essential only to opt out of all optional advertising. Opting out or withdrawing consent stops our future advertising data sharing, removes advertising scripts and clears known advertising cookies; audience lists are updated on the next refresh. Financial records may be retained separately where needed for billing and legal obligations.
Purchases are handled by app stores (for in-app purchases) and by our payment processors (on the web). They share customer, subscription, payment-status and transaction identifiers with us so we can grant access and manage billing. We do not receive your full payment-card number.
The App can read from several optional sources on your device to make your character feel more aware of your day. Each of these is off by default, requires the relevant iOS permission, and is used only for the feature described below. You can turn any of them on or off at any time in iOS Settings or from within the App, and we do not store the underlying records on our servers.
We collect and use personal data for the following purposes:
By using the App you consent, to the extent required under the PDPA, to the collection, use, and disclosure of your personal data for these purposes.
AI responses, voice and related features are generated using third-party AI model and voice providers, and in some cases our own servers. The App does not contact these providers directly: requests pass through infrastructure we operate or control, which routes them to the providers we use from time to time. On first use the App asks you to agree to AI processing before any of it happens, and nothing is sent until you do. Because AI processing is what the App is, this is an agreement rather than a switch. You can review the notice and acceptance date in the App’s privacy settings.
Depending on the feature you use, a request may include: the text of your messages and the recent conversation context; a photo you have explicitly attached; the first name you chose in the App and any saved name pronunciation; your birthday day (month and day only) and a coarse age range; things your character has learned about you in conversation (memories) and notes you have saved; and, only if you have enabled them, a short summary of optional device context such as weather or your next calendar event. A technical identifier may accompany requests for rate limiting, entitlement enforcement, security and cost measurement. We do not send your email address, sign-in identifiers, full birth date, raw location coordinates or your calendar as a whole to these providers.
We configure our AI routing so that providers do not store or train on your requests where that option is available. Providers process requests to generate replies and may keep limited operational logs under their own retention and security policies. Personalized reply text and generated audio are not intentionally stored in our application cache; shared scripted recordings may be cached for playback.
We and service providers acting on our behalf may review account data, conversations, memories and related records, using automated tools and, where needed, authorized personnel. We do this to keep the App safe, prevent and investigate abuse and fraud, enforce our Terms, investigate reports, bugs and errors, respond to support requests, comply with law, and improve the quality of the App and its characters. Access is limited to people who need it for these purposes.
Every AI-generated message exposes a Report action. When you report a message we keep the message identifier, a copy of the reported content, your account identifier (if signed in) and a timestamp for review. When you use the feedback form or email support, we keep what you send, related account and app details, and your email address if you share it, to investigate and reply.
We disclose personal data to the categories of recipients below. Sharing identifiers and events with advertising partners for cross-context behavioral or targeted advertising may constitute a sale or sharing under applicable US state privacy laws. You can opt out through Your Privacy Choices by selecting Essential only, or by enabling Global Privacy Control in your browser.
A current list of our service providers and advertising partners is available on request (see §15).
Our service providers and partners may store and process personal data in the United States, the European Union, Singapore or other countries. Where we transfer personal data out of Singapore, the EU, or the United Kingdom, we rely on contractual protections (including Standard Contractual Clauses where applicable) and on the security guarantees of our providers.
Web measurement policy v2 applies to observations collected after its September 24, 2026 deployment. Earlier observations keep their original expiry; this update does not extend them. No new mandatory consent screen is required to continue using the app. From September 27, 2026, first-party product measurement applies to all visits; advertising and email choices remain separate.
| Data and purpose | Retention |
|---|---|
| Content-free web events: diagnose performance, reconcile usage and evaluate changes | 90 days in the active event store, then a private archive subject to the account or visitor period below |
| Account-linked event archives, daily usage facts, experiment exposures and permitted ad-source labels: measure retention and product outcomes | Until the later of 24 months after genuine app activity or 732 days after account creation, so we can measure two-year retention. Email delivery, billing renewals and background jobs do not restart this period. Account deletion still removes account-linked analytics. |
| Visitors who never register: understand acquisition and first-session performance | Up to 13 months after genuine activity |
| Raw ad-click identifiers and advertising matching snapshots: match permitted conversions | Up to 30 days |
| Irreversibly anonymised cohort statistics: compare long-term product outcomes | May be retained indefinitely; small groups are suppressed or merged before indefinite retention |
| Billing and financial records: accounting and legal obligations | For the legally required period; our payment processor’s records remain the payment source of truth |
| Email preferences and consent evidence: honour choices and document eligibility | While the account exists and for up to 24 months after genuine activity; minimal unsubscribe and suppression records remain to prevent unwanted mail |
Account deletion removes associated analytics from active storage, derived account facts and private archives within 30 days. A minimal protected deletion or suppression record prevents delayed jobs from restoring it. Advertising opt-out stops future advertising delivery. Conversations and memories are not copied into the analytics system.
We send occasional NariYume feature updates and invitations to return. Outside the United States, we send them only if you opt in. For accounts in the United States, we may send them unless you opt out; each such email identifies itself as promotional and includes a one-click unsubscribe, and you can turn them off in Settings at any time. Creating an account or paying for Premium never overrides an unsubscribe.
Email choices are independent of Terms acceptance and advertising settings. Outside the United States, the optional sign-up checkbox is unchecked by default. In the United States no checkbox is shown; the Settings switch starts on and you can turn it off at any time. You can change your preference in Settings or unsubscribe from any marketing email. We record the notice and wording version, time, source and country of the choice. Marketing messages are capped at one per day and three in any seven-day period. A randomly assigned comparison group receives none. Account security and purchase receipts are service messages, not marketing. Letters are linked inside the app; private chat or letter content is never placed in marketing emails. We do not send daily allowance-reset emails.
The web app is intended only for adults aged 18 or older. The iOS app has a separate minimum age shown during iOS onboarding. We do not knowingly collect personal data from anyone below the applicable minimum age for the service they use. If we learn that we have, we will delete it promptly.
Depending on where you live, you have the following rights:
To exercise any of these rights, email our Data Protection Officer at privacy@nariyume.com. We will respond within 30 days.
We use platform secure storage on your device, managed authentication sessions, access rules and server-side authorization for cloud data, and encryption in transit (TLS) for network requests. To prevent abuse of free allowances (fraud prevention), the web app stores a random device identifier in your browser and sends it with requests to our servers; it is kept for up to 30 days after its last use and is not used for advertising. No system is perfectly secure; we encourage you to use a unique, strong password and enable two-factor authentication with your sign-in provider where available.
If we become aware of a personal-data breach that is likely to result in significant harm to you, we will notify you in accordance with applicable law (including the PDPA’s data breach notification obligation).
We have designated a Data Protection Officer responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO at privacy@nariyume.com.
We operate brand and character social-media accounts and an automated publishing service (the “NariYume Content Engine”) that post NariYume marketing content — text, images, and videos of our fictional characters — to our own accounts on third-party platforms, including YouTube. This automated video publishing uses YouTube API Services.
By viewing or interacting with our YouTube channel and content delivered through the YouTube API, you also agree to be bound by the YouTube Terms of Service. Google’s handling of any data collected through these API Services is described in the Google Privacy Policy.
The NariYume Content Engine authenticates only to our own brand accounts in order to publish our own content, using the minimum API scope required to upload videos to our channel. It does not access, request, collect, or store the personal data, Google account data, or YouTube data of any App user or member of the public. You can revoke this application’s access to our Google account at any time via the Google security settings page.
We may update this Policy from time to time. When we do, we will post the new version here and update the date above. If the change is material, we will notify you inside the App.
Privacy and data requests: privacy@nariyume.com
General support: support@nariyume.com
Data Controller: Koro Interactive Pte. Ltd. (UEN 202525340Z)
Registered office: 60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051.
This section applies if you use NariYume from the European Union, Iceland, Liechtenstein or Norway.
This section applies if you use NariYume from Australia. We handle personal information in line with the Australian Privacy Principles as described in this Policy.