Dokidoki Officetel한국어

Privacy Policy

Takes effect the day the app is publicly released

This English version is a translation for convenience; the Korean version prevails.

1. Personal information we process and why

  • Membership: email or mobile number, nickname, sign-in records, consent records — and, for a Google sign-up, the name and profile photo of that account
  • The Service: your conversations with characters, story progress, heart history
  • In-app purchases: the purchase details the App Store or Google Play sends us — transaction number, product, amount and currency, purchase and refund times, whether it was a test purchase. Card numbers and other payment details are handled by the store and never reach us.
  • Notifications — users who allow them (guests included): the device’s notification token
  • Running the service: device type (iOS, Android) and app version
  • Reports: the conversation you report and your report
  • Abuse prevention: a hash of your IP address (the address itself is not stored)

2. Retention

  • When you delete your account (in the app: Me → Delete account), your account and member information — sign-in details, nickname and persona, conversations with the characters, story progress, favorites and collected art, notification settings — are deleted without delay.
  • As the Korean E-Commerce Act requires, records of contracts and withdrawals and of payments and supply (purchases, hearts granted and used) are kept for 5 years, and complaint, dispute and report records for 3 years. For a deleted account, the purchase and heart records are kept pseudonymised — the email and mobile number removed, so they can't be tied to anyone without other information — and are deleted automatically when the period ends.
  • The conversations, progress and notification token of a guest who has not agreed to the terms of service carry into the account on sign-up; otherwise they are deleted 90 days after the last use. You can ask for their deletion sooner by email to support@hyperitycorp.com.
  • A guest account that has agreed to the terms of service is kept like a member's until it is deleted (in the app: Me → Delete account), and is then deleted as above.
  • Copies in our data backups (made daily, kept for 7 days) are gone when that period ends.

3. Processors

  • Google LLC (Firebase, Google Cloud) — authentication, data storage, hosting and servers, notifications

4. Transfer of personal information abroad

  • What goes abroad, and on what basis:

(a) AI conversation

  • Basis: Korea’s Personal Information Protection Act, Article 28-8(1)(3) — processing and storage needed to provide the Service (the guests’ free trial included), disclosed in this policy instead of being asked as a separate consent.
  • To write the replies, the messages you send (guests included) and the conversation's context go to the AI providers below. The conversation model is DeepSeek V4 Flash (an open model run on the servers of the US providers below; nothing goes to DeepSeek itself).
  • Recipient: OpenRouter, Inc. (contact: privacy@openrouter.ai) — country: United States · what: conversation content, character settings and story context · why: passing requests for AI dialogue on · when and how: each time you chat, over an encrypted connection · kept: requests and replies not logged (the default) and not used for training
  • Recipient: Deep Infra Inc. (contact: policy@deepinfra.com) — country: United States · what: conversation content, character settings and story context · why: writing AI dialogue (reached through OpenRouter) · when and how: each time you chat, over an encrypted connection · kept: sent only to providers OpenRouter classifies as not collecting user data (its data-collection opt-out — OpenRouter’s classification; retention follows the provider’s own policy)
  • Recipient: Together Computer, Inc. (contact: privacy@together.ai) — country: United States · what: conversation content, character settings and story context · why: writing AI dialogue (reached through OpenRouter) · when and how: each time you chat, over an encrypted connection · kept: sent only to providers OpenRouter classifies as not collecting user data (its data-collection opt-out — OpenRouter’s classification; retention follows the provider’s own policy)
  • Recipient: Baseten Labs, Inc. (contact: privacy@baseten.co) — country: United States · what: conversation content, character settings and story context · why: writing AI dialogue (reached through OpenRouter) · when and how: each time you chat, over an encrypted connection · kept: sent only to providers OpenRouter classifies as not collecting user data (its data-collection opt-out — OpenRouter’s classification; retention follows the provider’s own policy)
  • Recipient: CoreWeave, Inc. (contact: privacy@coreweave.com) — country: United States · what: conversation content, character settings and story context · why: writing AI dialogue (reached through OpenRouter) · when and how: each time you chat, over an encrypted connection · kept: sent only to providers OpenRouter classifies as not collecting user data (its data-collection opt-out — OpenRouter’s classification; retention follows the provider’s own policy)
  • Recipient: Parasail, Inc. (contact: hello@parasail.io) — country: United States · what: conversation content, character settings and story context · why: writing AI dialogue (reached through OpenRouter) · when and how: each time you chat, over an encrypted connection · kept: sent only to providers OpenRouter classifies as not collecting user data (its data-collection opt-out — OpenRouter’s classification; retention follows the provider’s own policy)
  • Recipient: Fireworks.ai, Inc. (contact: privacy@fireworks.ai) — country: United States · what: conversation content, character settings and story context · why: writing AI dialogue (reached through OpenRouter) · when and how: each time you chat, over an encrypted connection · kept: sent only to providers OpenRouter classifies as not collecting user data (its data-collection opt-out — OpenRouter’s classification; retention follows the provider’s own policy)
  • Refusing and its effect: sending to the AI providers is needed to write the replies, so to refuse it, stop chatting — nothing is transferred while you send no message. The conversations you had are deleted when a member deletes the account in the app (Me → Delete account), or when a guest asks by email to support@hyperitycorp.com.

(b) Sign-in and notifications

  • Basis: the same paragraph, item 3 — processing and storage needed to perform the service contract, disclosed in this policy.
  • Recipient: Google LLC (Firebase Authentication, Cloud Messaging; contact: googlekrsupport@google.com) — country: United States · what: sign-in data (the email address, mobile number or Google account used), the notification token and the notification text · why: sign-in and sending notifications (Android devices — an iOS device’s notifications go through Apple, below) · when and how: at sign-in and whenever a notification is sent, over an encrypted connection · kept: until the account is deleted — the notification token until notifications are turned off or the account is deleted
  • Recipient: Apple Inc. (Apple Push Notification service, APNs; contact: https://www.apple.com/legal/privacy/contact/) — country: United States · what: the iOS device’s notification token and the notification text · why: sending notifications to iOS devices — our server sends them to Apple directly · when and how: whenever a notification is sent, over an encrypted connection · kept: under Apple’s privacy policy — we delete the notification token when notifications are turned off or the account is deleted
  • Refusing and its effect: turn notifications off in your device settings and none arrive. The transfer for sign-in is needed to use the app at all: to refuse it, stop using the app and delete your account, or ask us by email to support@hyperitycorp.com. Nothing more is transferred once the account is deleted.

(c) In-app purchases — a pseudonymous id sent to the store

  • Basis: the same paragraph, item 3. At purchase, a pseudonymous id derived from the member number goes to the store you pay in, to tie the purchase to you.
  • Recipient: Apple Inc. (App Store; contact: https://www.apple.com/legal/privacy/contact/) — country: United States · what: a pseudonymous id derived from the member number · why: tying an App Store purchase to the member · when and how: at purchase, with the App Store payment · kept: under Apple’s privacy policy
  • Recipient: Google LLC (Google Play; contact: googlekrsupport@google.com) — country: United States · what: a pseudonymous id derived from the member number · why: tying a Google Play purchase to the member · when and how: at purchase, with the Google Play payment · kept: under Google’s privacy policy
  • Refusing and its effect: it is needed to buy in the app; to refuse it, don’t buy in the app.

(d) Consumption information for Apple — optional consent

  • Recipient: Apple Inc. (United States, contact: https://www.apple.com/legal/privacy/contact/)
  • What: for the purchase (its transaction id) you asked Apple to refund — whether the hearts were delivered, the share used, whether sample content was provided, and the Company's refund preference. Nothing beyond these four fields Apple defines (no account tenure or the like).
  • When and how: within 12 hours of Apple’s request, through the App Store Server API, encrypted
  • Kept: under Apple’s privacy policy; you can see and delete what Apple holds at privacy.apple.com.
  • This consent is optional. Refusing it costs you nothing — Apple then decides without the Company's information. You can withdraw it at any time in the app's settings.

5. App permissions

  • Required permissions: none.
  • Optional permissions: Notifications — alerts for new messages and story news. You can use the Service without allowing them and change them at any time in your device settings.

6. Destruction

  • Information whose retention period has ended or whose purpose is fulfilled is deleted irrecoverably.

7. Your rights

  • You may ask to access, correct, delete or stop the processing of your information; contact us below and we will act without delay.
  • You can delete your account in the app (Me → Delete account). If you can't use the app, email support@hyperitycorp.com from the address you signed up with and say "delete my account"; if you signed up with a mobile number, include that number. We delete it once we have checked it is yours.

8. Security measures

  • Encryption in transit, least-privilege access (separate admin rights), data handled on the server only, access logging

9. Storage on your device

  • The app uses its storage on your device to keep you signed in, remember your language and remember your screen settings. It is removed with the app.

10. Privacy officer

  • 전광하 · support@hyperitycorp.com

11. Remedies

  • For a report or advice on a privacy infringement: the Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr), the Personal Information Infringement Report Center (118, privacy.kisa.or.kr), the Supreme Prosecutors’ Office (1301, www.spo.go.kr), the Korean National Police Agency (182, ecrm.police.go.kr).

12. Changes to this policy

  • Changes are announced in the app and on this page 7 days before they take effect; changes against users 30 days before, and members are also told by email or similar.

Addendum

  • This policy takes effect on the day the app is publicly released.