Privacy Policy
Last updated: September 16, 2026
1. Who we are
ringchat is operated by HeartAI Inc. We are the controller of the personal data described here. This policy explains what we collect, why, who we share it with, and what you can do about it.
2. What we collect
| Category | Data | Why | Kept for |
|---|---|---|---|
| Account | Email address, password (stored one-way hashed), display nickname, language preference | To create and secure your account | Until you close your account |
| Conversations | The messages you send and the replies generated; a rolling summary of each conversation; a short list of facts drawn from it; the name you ask a character to call you; relationship progress | So a character can remember you across sessions — this memory is the core of the Service | Until you delete the conversation or close your account |
| Boyfriends you create | The name, bio and personality description you write, and images generated from them | To create and display the character | Until you delete him or close your account |
| Ring activity | Balance, and a record of each grant and deduction | To run the Ring balance and show your history | Until you close your account, or longer where accounting law requires |
| AI usage | For each AI request: purpose, model, token counts and estimated cost, linked to your account and conversation | To measure and control our operating cost | Until you close your account |
| Contact | The email address and message you submit through the contact form, and the IP address it came from | To reply to you and to prevent abuse of the form | Up to 3 years |
| Automatic | IP address, request logs, session cookie | To keep you signed in, protect against abuse, and diagnose faults | Session cookie expires after 24 hours; server logs are rotated |
We do not collect your real name, date of birth, phone number, address or payment card details. We do not run advertising trackers and we do not sell personal data.
3. AI providers — and what leaves our servers
This is the most important section of this policy. Please read it.
To generate replies and images, we send parts of your data to AI providers outside our company:
| Provider | What we send | Why |
|---|---|---|
| Anthropic (United States) | Your recent messages in the conversation, the stored summary and fact list, the character's description, and the nickname the character uses for you | To generate the character's reply, to update the conversation summary, and to screen a public boyfriend before listing |
| OpenAI (United States) | A generated description of the character's appearance and the scene to be drawn | To generate character images |
Your email address, password and Ring history are never sent to either provider. What is sent is the conversation content needed to produce the next reply or image.
These providers are located in the United States, so using ringchat involves an international transfer of the data described above. We rely on your agreement to this policy and on the providers' own contractual commitments. If you are not comfortable with this transfer, do not use the conversation features.
4. Where your data is stored
Our servers are hosted with Amazon Web Services in Seoul, Republic of Korea. Data at rest stays there, except for the transfers to AI providers described above.
5. Cookies
We use two cookies and no others:
- Session cookie — keeps you signed in. Expires after 24 hours.
- CSRF token — protects forms against cross-site request forgery.
Both are strictly necessary for the Service to work. We use no analytics, advertising or third-party tracking cookies. Blocking these two cookies will prevent you from signing in.
6. Your rights
You can, at any time:
- Access the data we hold about you.
- Correct your nickname and account details from your profile.
- Delete a conversation, a boyfriend you created, or your whole account.
- Withdraw consent by closing your account. Note that this ends the Service for you.
- Object to or restrict processing, and request a copy of your data in a portable form.
Use our contact form to make a request. We will respond without undue delay and within 30 days. We will not charge you for making a request, and we will not treat you differently for making one.
Depending on where you live you may also have the right to lodge a complaint with your local data protection authority.
7. Deletion
When you close your account we delete your account record, conversations, stored summaries and fact lists, and the boyfriends you created, within 5 days. Copies in routine backups are overwritten as those backups rotate.
We keep records for longer only where law requires it — for example transaction records once paid purchases are available.
Requests already sent to an AI provider are handled under that provider's own retention terms; we cannot delete them on your behalf.
8. Security
- Passwords are stored one-way hashed and are never readable by us.
- All traffic is served over HTTPS.
- Milestone photos are stored outside the public web root and are served only after a permission check on each request.
- Access to production systems is restricted to a small number of people and to specific network addresses.
No service can promise perfect security. If a breach affects your data we will notify you and the relevant authority as required by law.
9. Children
ringchat is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, tell us through the contact form and we will close it and delete the data.
10. Changes
We will post any update here and change the “last updated” date. If a change materially affects what we collect or why, we will give notice at least 30 days in advance and, where required, ask for your agreement again.
11. Contact
For any privacy question or request, use our contact form.