Hoshii Privacy Policy
Notice date: 2026-10-08 · Effective date: 2026-11-07 (for users who accept this version, from the time they accept) · Version 2026-10-08-v7
This is an English translation of the Korean original. If the two differ, the Korean original prevails, except that Section 9 ("Additional information for users in the United States, the EU/EEA and the UK") and any mandatory rules of the law where you live continue to apply to you.
1. Who we are (controller)
Service: Hoshii (호시) · Operator: 리얼사인 (a sole proprietorship registered in the Republic of Korea; representative: 서유안; business registration no. 631-44-01544; mail-order business report no. 2026-서울관악-1212) · Address: 서울특별시 관악구 남부순환로131길 21-4 (Seoul, Republic of Korea) · Phone: 050-6522-5512 (Korean number) · Privacy officer: 서유안 (privacy@realsign.net) · General inquiries: support@realsign.net
The operator's trade name and the representative's name are given in Korean as registered; we do not use an unofficial romanization.
2. What we collect, why, and for how long
| Data | How it is collected | Purpose | Retention |
|---|---|---|---|
| Your messages (text), your voice when you use voice features, memories you save, and chat settings (name, tone, etc.) | Entered by you while using the app | Generating AI replies, speech recognition and voice replies, personalization | If you have not signed up, stored only on your device. Our server uses it only temporarily while the AI processes it and does not store it. Kept on our server only as part of the backup below if you sign up (link an email) |
| Memories picked out automatically from your conversations (things you like, pets, names and dates of upcoming plans, etc.) | Picked out by AI from what you say in chat (health, sexual content, crisis, financial and identity information are excluded) | Remembering them in later conversations and checking in after a plan has passed | Stored on your device (included in the backup below for signed-up accounts). While they are picked out, part of the recent conversation is sent to OpenAI, but our server does not store the result. You can turn this off in Settings › Memory, and edit or delete memories in "Our memories" |
| Anonymous account identifier (random ID) | Created automatically the first time you open the app without signing up | Telling users apart, counting free messages, linking subscriptions, compiling service statistics (only aggregate figures that cannot identify anyone) | Until the account is deleted. Accounts that have not been signed up (no linked email) and have no purchase history are deleted automatically 180 days after last use (including the account on the authentication server, notification device data and the account's operating data on our server) |
| Signed-up (email-linked) accounts only: full chat history (message ID, role, text, time), saved memories, mood check-ins, companion name, look and outfits, chat settings, hidden-reply flags | Backed up automatically while you use the app after signing up | Continuing on another device or after reinstalling | Stored encrypted with a server key. Deleted immediately when you delete your account or use "Delete all chats and memories". Not uploaded if you have not signed up |
| Access credential hash, consent version and time | Created automatically when you use the service | Verifying the user, keeping a record of consent | 180 days after last use, or on withdrawal or account deletion |
| Hash of your IP address (the raw IP is not stored), hash of your email address when you request authentication, hash of your account identifier when you contact us in the app | Created automatically when you use the service | Abuse prevention (limiting mass sign-ups, authentication requests and support messages in a short time) | Up to 24 hours (deleted when the limit window ends; up to 1 hour for sign-up and authentication limits, 24 hours for the daily per-account limit on support messages). Hosting and authentication providers' access logs may record IP addresses under their own policies |
| Daily usage and cost totals (token counts, voice time) | Created automatically | Managing usage limits, billing reconciliation, compiling service statistics (only aggregate figures that cannot identify anyone) | 31 days |
| A reply you report, the message right before it, and your reason | Submitted by you when reporting | Reviewing and improving inappropriate replies, compiling service statistics (only aggregate figures that cannot identify anyone) | 90 days |
| Purchase information: store transaction ID, subscription product ID, subscription start and end dates, renewal/cancellation/refund status, whether it is a sandbox purchase | Collected automatically from the Apple App Store via RevenueCat when you make an in-app purchase | Checking subscription eligibility, granting paid usage, checking refunds and duplicate charges, compiling service statistics (only aggregate figures that cannot identify anyone) | Until the account is deleted. Payment and fraud-prevention records are kept for the period required by law (5 years under the Korean e-commerce act that applies to the operator) |
| Mood check-ins (one of five emoji levels, a note of up to 60 characters) | Entered by you | Looking back on yourself; one line of your latest check-in is used as context in the next conversation | If you have not signed up, stored only on your device (included in the backup above if you have). While check-ins are on, one line of your latest check-in is sent to OpenAI with your chat request (Section 3); our server does not store it. Turning check-ins off in Settings stops sending it to the AI |
| Only if you turn on notifications: the notification device token (APNs device token, an identifier Apple issues per device), the token environment (production/test), device operating system type, your device's time-zone offset, notification language (the app's display language), the notification time you chose, and the last time a notification was sent and the app was opened | Created automatically when you turn on notifications in Settings (the notification language is updated to the app's display language each time you open the app) | Sending one notification a day at the time you set, writing it in the language you use, adjusting frequency (reduced to once a week after 7 or more days without opening the app) | Until you turn notifications off, delete your account or delete the app. Deleted immediately if Apple reports the token as invalid |
| Apple ad attribution information: the ad attribution token (AdServices) that Apple issues on your device, and the Apple Ads campaign, ad group and keyword information Apple returns for it | Passed automatically from your device to RevenueCat by the RevenueCat SDK when you open the subscription screen | Checking whether you installed the app after seeing an Apple ad on the App Store, and measuring ad performance. We do not track your activity in other companies' apps or websites and do not collect the advertising identifier (IDFA) (we do not ask for App Tracking Transparency permission) | Until the account is deleted (kept in RevenueCat's subscriber record) |
| In-app support: your message and its category, the reply email you choose to enter, account identifier, app build, device type, OS version and display language | Submitted by you through the in-app contact form (Settings › Help & contact) or by email | Reviewing and answering your message, fixing problems | 3 years after the matter is resolved (records of consumer complaints and dispute handling under the Korean e-commerce act). Our server does not store support messages; it forwards them straight to the operator's mailbox, without your chats or memories. The reply email is optional and is used only to answer that message |
| If you sign up (link an email): email address, subscription status | Entered when you sign up or subscribe | Sign-in, checking your subscription | Until the account is deleted. Payment and fraud-prevention records are kept for the period required by law (5 years under the Korean e-commerce act) |
Service statistics. We compile aggregate, non-identifying service statistics (for example, daily users, number of subscribers and costs) from the daily usage and cost totals, purchase information, report reasons and account creation times in the table above, and use them only to operate the service, manage costs and improve quality. Chat content is not used, and the results contain no account identifiers. This is a use reasonably related to the original purposes of collection; we assess it by (1) its relation to the original purpose, (2) whether users can expect it, (3) whether it unfairly harms users' interests, and (4) whether data is processed only as totals that cannot identify anyone, and our privacy officer reviews it (Article 15(3) of the Korean Personal Information Protection Act).
Information stored only on your device. If you use rhythm-based reminders, the app learns the times you usually chat (day of week and time of day) only on your device to choose when to remind you. This information is not sent to our server and the operator does not collect it. It is erased when you delete the app.
We do not collect payment-method information. Card numbers, bank accounts and other payment details are handled by Apple and are not passed to the operator. We only check the purchase information above (transaction ID and subscription status).
We do not collect personal information from children under 14, and users under 14 may not use the service's AI chat. If you use the service outside Korea or in a language other than Korean (including this English version), you must be 18 or older to use AI chat and paid subscriptions.
3. International transfers and processors
| Recipient | Country | Data transferred | Purpose | Retention |
|---|---|---|---|---|
| OpenAI, L.L.C. (privacy@openai.com) | United States | Chat content, voice, selected memories, chat settings (including the companion's name), one line of your latest mood check-in (if check-ins are on) | Generating AI replies, speech recognition and voice replies, picking out what to remember from chats | API responses are not stored (store: false). May be kept for up to 30 days for abuse monitoring |
| Railway Corp. (privacy@railway.com) | United States (California) | Server operating data (access hashes, consent records, usage, report contents), encrypted backups of signed-up accounts | Server hosting | The retention periods in the table above |
| Supabase, Inc. (privacy@supabase.com) | India (Mumbai servers) | Anonymous account identifier, email address if you sign up | Account authentication | Until the account is deleted |
| RevenueCat, Inc. (compliance@revenuecat.com) · when you open the subscription screen or subscribe | United States | Account ID, store transaction ID, subscription product ID, subscription status, Apple ad attribution token | Verifying in-app subscriptions and managing subscription status; measuring Apple Ads performance (RevenueCat uses the token to query Apple's attribution server) | For the legally required period after the subscription ends |
| Apple Inc. · if you make in-app purchases | United States and others | Payment method and billing information (not provided to the operator) | Processing in-app payments and refunds | Under Apple's policies |
| Google LLC (Gmail, Google Apps Script) · when you contact us or when operational alerts are sent | United States | In-app support message, reply email, account identifier, app build, device type, OS version and display language; operational alert emails to the operator (non-identifying statistics and error alerts) | Receiving and keeping support and operational alert emails | The support retention period in Section 2 |
| ImprovMX Inc. · if you email an operator address such as support@realsign.net | United States (may use servers in Europe) | The email you send (sender address, subject, body) | Forwarding email to the operator's mailbox (Gmail) | Until forwarded; forwarding logs under ImprovMX's policies |
| Apple Inc. (Apple Push Notification service) · only if notifications are on | United States | Notification device token, notification text | Delivering notifications | Until delivered (kept for up to 3 hours, then discarded) |
Data is transferred when you use the relevant feature, over an encrypted internet connection. You may refuse consent; if you do, you cannot use AI chat, but you can still use dress-up and the records stored on your device.
4. Deletion
Data is deleted automatically when its retention period ends. Chats, memories and settings stored on your device are erased when you delete them in Settings or delete the app. In account mode you can delete your account in Settings.
Deleting your account does not cancel an active subscription. You must cancel it yourself in iPhone Settings › Apple Account › Subscriptions. Payment and fraud-prevention records that must be kept under the Korean e-commerce act and other laws are kept for that period even after account deletion.
5. Your rights
You may withdraw consent at any time, view, edit and delete information stored on your device, and ask privacy@realsign.net to access, correct, delete or stop processing your information. Additional rights for users in particular regions are described in Section 9. In Korea, you may also contact the Personal Information Dispute Mediation Committee (1833-6972) or the Personal Information Infringement Report Center (118).
6. Security
Encryption in transit (HTTPS/WSS), hashed access credentials, no chat content in server logs, no storage of original chat or voice data on the server, no chat, memory or check-in content in remote push notifications (notifications scheduled on your device may include only the name of a past plan to check in on you, and may appear on the lock screen), and least-privilege access.
7. AI disclosure
Hoshii's replies are generated by artificial intelligence. They are not a substitute for medical or psychological counseling or professional judgment. In an emergency, contact local emergency services (911 in the US, 999 or 112 in the UK, 112 in the EU) or a crisis line (988 in the US). In Korea, call the suicide prevention line 109, the mental health crisis line 1577-0199, or 119.
8. Changes to this policy
If this policy changes, the app asks you to consent to the new version on the consent screen. Earlier versions are recorded below.
This policy is provided in Korean, with English, Japanese, Traditional Chinese and Simplified Chinese translations. Translations are for convenience; if they differ, the Korean original prevails, to the extent the law where you live does not require otherwise.
9. Additional information for users in the United States, the EU/EEA and the UK
9-1. Children (including COPPA)
Hoshii is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Our own minimum age is stricter: you must be 18 or older to use AI chat or subscribe in English or outside Korea. If we learn that we have collected information from a user under 18 in this context, we delete it. Parents or guardians who believe a minor has used Hoshii can contact privacy@realsign.net.
9-2. Legal bases for processing (GDPR / UK GDPR)
- Consent: sending your chats, voice, memories and check-in line to the AI provider; processing sensitive information you choose to share in chat (for example about your health), for which we ask for your explicit consent before any chat is sent; transfers outside your country as listed in Section 3. You can withdraw consent at any time in the app; this does not affect processing that happened before.
- Performance of a contract: your account, free-message count, subscription verification, backups for signed-up accounts, notifications you turned on.
- Legitimate interests: abuse prevention (hashed IP, email and account identifier, short-term limits), security, usage and cost totals, reviewing reported replies, aggregate non-identifying service statistics, answering support messages, measuring Apple Ads performance (without tracking).
- Legal obligation: keeping payment and fraud-prevention records for the period required by Korean law.
9-3. Your rights in the EU/EEA and UK
You have the right to access, rectify and erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time. Much of your data is stored only on your device, where you can view and delete it yourself; for data on our servers, email privacy@realsign.net. We will respond within one month (extendable where the law allows). You also have the right to lodge a complaint with the data protection authority in the country where you live or work (in the UK, the Information Commissioner's Office). We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.
9-4. International transfers (EU/EEA and UK)
The operator is located in the Republic of Korea, which is covered by adequacy decisions of the European Commission and the UK. Some of our providers process data in the United States and India (Section 3). For transfers to those countries, we rely on the safeguards offered under each provider's terms and data processing agreements, such as the European Commission's Standard Contractual Clauses (and the UK addendum), or, where a provider is certified, the EU–U.S. Data Privacy Framework and its UK extension. You can ask privacy@realsign.net for more information about these safeguards.
9-5. U.S. state privacy rights (for example, California)
Depending on the state where you live, you may have the right to know what personal information we collect, use and disclose; to access and receive a copy; to correct it; to delete it; and to limit the use of sensitive personal information. To exercise these rights, email privacy@realsign.net. We will verify your request using information linked to your account (such as the account number in Settings › Account) and will not discriminate against you for exercising your rights. You may use an authorized agent; we may ask for proof of the agent's authority.
- Categories we collect (Section 2): identifiers (anonymous account ID, email if you sign up, notification device token, hashed IP); commercial information (subscription and purchase records); internet or app activity (usage totals, notification times, Apple ad attribution information); customer support messages and the diagnostic information sent with them; audio (voice, when you use voice features); your chat content and saved memories; and sensitive personal information only to the extent you choose to share it in chat (for example about your health).
- Sources: you, your device, and Apple via RevenueCat for purchases and ad attribution.
- Purposes and recipients: as described in Sections 2 and 3. We disclose personal information only to the service providers listed in Section 3 to run the service.
- We do not sell your personal information and do not "share" it for cross-context behavioral advertising. We do not use sensitive personal information to infer characteristics about you, so we do not offer a separate "limit" link.
- Retention: as described in Section 2.
2026-10-08-v7: added notification language to notification device data; English, Japanese, Traditional Chinese and Simplified Chinese translations, with the Korean original prevailing (this English translation also adds Section 9); 18+ for use outside Korea or in languages other than Korean; aggregate non-identifying service statistics and the criteria for that use (Section 2); in-app support data and transfers to Google and ImprovMX (Sections 2 and 3); abuse-prevention hashes kept up to 24 hours (daily per-account support limit); Apple ad attribution information passed to RevenueCat (Sections 2 and 3); rhythm information stored only on your device (Section 2) · 2026-10-02-v6: automatic deletion of accounts with no sign-up and no purchases after 180 days of non-use, hashed IP and email for abuse prevention (up to 1 hour), sending one check-in line and the companion's name to OpenAI, clearer description of notification device tokens · 2026-10-02-v5: start without sign-up (anonymous account ID), encrypted backup and immediate deletion for signed-up accounts, automatic memory picking (stored on device, can be turned off), plan follow-up questions and on-device notification text · 2026-10-01-v4: purchase information for in-app subscriptions and transfers to RevenueCat/Apple, notification device tokens and mood check-ins, relationship between account deletion and subscription cancellation · 2026-09-30-v3: confirmation of age 14+, retention of reports, AI disclosure · 2026-09-21-v2: added notice about Hoshii starting conversations