Hushee Privacy Policy
Version Effective Date: October 29, 2026
Hushee values and respects your privacy. We want to help you understand how we process your Personal Information. The following highlights key information on the data processing of Hushee:
- Hushee is an AI-powered companion application with a curated character catalog, text chat, interactive text stories, AI-generated pictures and voice read-aloud, and community features that let you create, publish and comment on characters. You can use Hushee with a guest account or sign in with Apple or Google. Optional in-app purchases of Sparks and auto-renewing memberships are processed by Apple.
- Your conversations, preferences and conversation memories are used to generate the responses and story passages you request and keep those conversations coherent.
- We use analytics, attribution and push-notification services to operate, measure and improve Hushee. On iOS we access your device's advertising identifier (IDFA) only if you allow tracking in Apple's App Tracking Transparency prompt.
- Your Personal Information is processed mainly for the provision of the Services, to process purchases, to communicate with you, to help us understand and improve the product and our marketing, or to enhance information security.
- Your Personal Information is protected by appropriate security measures, following applicable privacy and data protection laws and industry standards.
To know how we process your Personal Information when using Hushee, please refer to the privacy policy.
This Privacy Policy explains how we collect, process, and use your Personal Information through the Hushee App. This Privacy Policy may change over time, and the last modifications to this Privacy Policy were made on October 29, 2026.
1. Who is Responsible for Processing Your Personal Information?
RIVEROLL LIMITED ("RIVEROLL", "we", "us" or "our") is responsible for the processing of Personal Information in the Hushee app. RIVEROLL is a technology company incorporated in Hong Kong (Company No. 3018164) with its registered office at Room 2914C, 29/F, Ho King Commercial Centre, 2-16 Fa Yuen Street, Mong Kok, Kowloon, Hong Kong, and you can contact us via [email protected].
2. What Kind of Personal Information Do We Process?
When you use Hushee, we process:
- Account information. The account identifier of your guest or signed-in account, authentication session records and account preferences, including your selected language. If you sign in with Apple or Google, we receive through Firebase Authentication the identifier of that Apple or Google account and the email address it provides (Apple may provide a private relay address), and Google may also share basic profile information such as your name. We do not receive your Apple or Google password.
- Profile information you choose to provide. Your display name, avatar, banner, bio, gender, birth year or age band, interest tags, who you would like to meet, and persona cards you create. Your preference about who you would like to meet (for example, female or male characters) may be considered sensitive personal information; we use it only to recommend characters to you, and you can change it or leave it blank in your profile.
- Content. Your prompts, conversations, generated text, pictures and voice audio, conversation summaries and memories used for continuity, pinned memories and feedback on replies; characters you create, including their text and images; comments, likes and follows; images you upload; and search queries.
- Purchase and wallet information. Product identifiers, transaction identifiers, price and currency, purchase, renewal, cancellation and refund status, your membership tier and period, and your Sparks balance and history (purchased Sparks, membership allowances, check-in, invitation and task rewards, and spending). Payments are processed by Apple; we do not receive your card number or other payment card details.
- Device information and identifiers. Device identifiers such as the identifier for vendor (IDFV), identifiers generated by our analytics and attribution software, push-notification tokens (Apple Push Notification service and Firebase Cloud Messaging tokens) and notification permission status, App version, operating-system version, device model, language and time zone. We collect the advertising identifier (IDFA) only if you allow tracking through App Tracking Transparency.
- Approximate location. The country or region inferred from your IP address. We do not collect your precise location.
- Usage and analytics information. Events describing how you use the App (for example, screens viewed, features used, sessions, App starts and exits, purchase steps and notification interactions), crash and performance information, experiment and configuration groups, and attribution information about the advertising campaign, network or creative that led to your installation.
- Technical request information. IP address, timestamps, request identifiers, usage counters, generation status, errors and security logs used to enforce usage limits, prevent duplicate requests and investigate failures.
- Reports and communications. Reports you submit about characters, replies, comments or users, block lists, feedback and communications you send to customer support.
Please do not include sensitive personal information in your messages, public content or support requests.
3. How Do We Use Your Personal Information?
- To create and authenticate your guest or signed-in account, let you sign in with Apple or Google, and provide private access to your conversations.
- To generate responses, interactive story passages, pictures, voice read-aloud and suggested replies, and maintain conversation memories.
- To process purchases and subscriptions, verify App Store transactions, deliver Sparks and membership benefits, handle renewals, cancellations and refunds, and respond to refund-related requests from Apple.
- To operate community features, including displaying your public profile, public characters, comments, likes and follows to other users, and sending in-app and push notifications about activity, rewards and characters. You can turn off push notifications in your device settings.
- To store your settings and history, provide support and process deletion requests.
- To review and moderate characters, images and comments, enforce usage limits, prevent abuse and fraud (including duplicate claims of rewards and invitation codes), handle reports, secure the Services and troubleshoot failures.
- To analyze usage, run experiments and remote configuration, and improve the Services.
- To measure and attribute our own marketing campaigns, such as understanding which advertisements led to installations, subscriptions or purchases.
- To comply with applicable legal obligations.
Your private conversations are not published. Content you choose to make public, such as public characters, comments, your profile name, avatar, banner and bio, likes and follows, can be seen by other users. Hushee does not display third-party advertising in the App.
4. Who Do We Share Personal Information with?
Service providers and partners process information needed to operate, measure and secure Hushee (see Section 10 regarding "sale" and "sharing" under California law). Their own privacy policies, which are available on their websites, describe how they handle information:
- Apple (Sign in with Apple, App Store purchases, subscriptions and refunds, and Apple Push Notification service). When you request a refund for an in-app purchase, we may provide Apple with information about the purchase and your use of it, such as account age and account status, delivery and consumption status, ranges of lifetime purchase and refund amounts, and our preference regarding the refund request, so that Apple can decide the request. Apple's privacy policy: apple.com/legal/privacy.
- Google (Firebase Authentication for account sign-in, Google Sign-In, Firebase Cloud Messaging for push notifications, and Google Analytics for Firebase for analytics and measurement of selected engagement and purchase events). Google receives your account identifier, the email and profile information of a linked Google account, push tokens, device information and those events. Our attribution integration also includes Google's on-device conversion measurement library, which is used to measure advertising conversions, not to display ads. Google's privacy policy: policies.google.com/privacy.
- Adjust (install attribution and campaign measurement). Adjust receives device identifiers (including IDFA only if you allow tracking), an Adjust device identifier, IP address, your Hushee account identifier, selected App events, purchase information such as product identifier, revenue and currency, and your push notification token, which Adjust uses to measure uninstalls. Adjust's privacy policy: adjust.com/terms/privacy-policy.
- Meta (the Facebook SDK for App Events, used for install and campaign measurement). Meta receives automatically logged App events, such as installations and App launches, and, where enabled, in-app purchase events (product, price and currency), device information, your Hushee account identifier and, only if you allow tracking, IDFA. Meta's privacy policy: facebook.com/privacy/policy.
- ThinkingData and Sensors Data (product analytics software). They process usage events, device information, analytics identifiers, your Hushee account identifier and the identifier of a linked Apple or Google account, approximate location derived from IP address, and crash and performance information. This data is sent to collection endpoints under the hushee.chat domain operated for us.
- AI model providers. OpenRouter, Novita, Amazon Bedrock, Microsoft Azure AI Foundry and the AI model providers these services route requests to, as well as models we host on our cloud infrastructure, process the prompts, relevant conversation context and memories needed to generate a response, and generate pictures, using reference images such as character artwork. MiniMax processes the text of replies you choose to have read aloud. The provider used may vary by conversation mode and configuration. These are external processing services; do not submit information you do not want processed by them. OpenRouter's privacy policy: openrouter.ai/privacy.
- Hosting, database, network delivery and security providers, including Alibaba Cloud and Cloudflare, process stored data, uploaded images and network requests as needed for their services, including image moderation.
- Other users can see content you choose to make public, as described in Section 3.
- Support providers process communications you choose to send us. We may disclose information when required by law or necessary to protect rights and safety, or in connection with a merger, acquisition or sale of assets.
Links to external websites are governed by those websites' own policies. This policy does not assert that a third-party provider has zero retention or that every provider processes data in the same location.
5. Tracking, Attribution and Your Choices
On iOS, Hushee asks for your permission through Apple's App Tracking Transparency prompt before accessing your device's advertising identifier (IDFA). If you allow tracking, the IDFA may be stored with your device record and shared with Adjust and Meta, and through Adjust with advertising networks such as Google, to attribute installations and purchases to our advertising campaigns and to measure their effectiveness. If you decline tracking, the App does not read the IDFA. An IDFA that has already been recorded is not removed automatically when you later turn off tracking in iOS Settings under Privacy & Security > Tracking; you can ask us to delete it by contacting us as described in Section 9. Declining tracking does not stop your account identifiers and usage events from being sent to the attribution and analytics partners described in Section 4.
You can turn off push notifications in iOS Settings, and you can contact us at [email protected] to opt out of the use of your information for advertising measurement where applicable law gives you that right.
6. Where Do We Store Your Personal Information? How Do We Transfer Your Personal Information?
Data collected by us is stored in the United States. Our service providers and partners, including those described in Section 4, may process data in other countries. We provide services worldwide, so your Personal Information may be processed outside your country or jurisdiction. Some countries that are not members of the European Economic Area (EEA) are recognized by the European Commission as providing an adequate level of data protection according to EEA standards. For transfers from the EEA to countries not considered adequate by the European Commission, we take appropriate safeguards to require that your Personal Information remain protected in accordance with applicable law.
7. How Long Do We Retain Your Personal Information?
We retain personal information for as long as needed or permitted for the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include:
- The length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you have an account with us or continue to use the Services). Your conversations, preferences and conversation memories are retained to let you continue your chats. Search history is kept for up to 90 days. You can request account deletion from Settings or by contacting Support.
- Whether there is a legal obligation to which we are subject (for example, applicable laws may require preservation of particular records); or
- Whether retention is advisable in light of our legal position (for example, in light of applicable statutes of limitations, litigation or regulatory investigations).
Applying these criteria, we retain information by category as follows:
- Account and profile information: for as long as your account exists; when your account is deleted, as described below.
- Conversations, memories and content you create: for as long as your account exists, unless you delete them earlier.
- Purchase and wallet records: for as long as your account exists; after deletion, App Store transaction records and Sparks delivery records are retained for refunds, accounting, fraud prevention and legal compliance.
- Device identifiers and push tokens: for as long as your account exists; they are deleted when an account signed in with Apple or Google is deleted.
- Usage events and attribution data: usage events and attribution information stored with your account are deleted when your account is deleted; otherwise we keep them for as long as needed for the purposes described in this policy, and no longer than required by law. Our analytics and attribution partners retain data under their own retention policies.
- Search history: up to 90 days.
- Reports and moderation logs: retained after account deletion as described below.
- Technical and security logs: for as long as needed for security, troubleshooting and legal compliance.
If you delete an account that is signed in with Apple or Google, the account is scheduled for deletion and deleted after 7 days; signing in again during that period cancels the deletion. Deletion then removes your conversations and memories, profile, preferences, wallet and membership records, device records and authentication sessions, and the sign-in record held by Firebase Authentication, and characters you created are taken down and no longer visible to anyone. If you delete a guest account, your conversations, memories, profile and preferences are removed right away and characters you created are taken down and no longer visible to anyone, while the guest account identifier, device record and its Sparks, membership and reward records stay with that guest account so that rewards cannot be claimed again.
Once an account deletion is completed, any remaining Sparks balance and membership benefits of that account are forfeited and cannot be restored. Deleting your account does not cancel an App Store subscription; you must cancel it in your Apple ID subscription settings, otherwise Apple may continue to charge you. Comments, likes and follows you made may remain visible without your profile name or avatar unless you remove them before deleting your account.
Limited records are retained after deletion for abuse prevention, legal compliance, accounting and dispute handling, including account-deletion markers, usage and security records, reports and moderation logs, App Store transaction records and notifications, Sparks delivery records, attribution reporting records, and invitation and device reward records. Backups and operational logs are not necessarily erased immediately when an account is deleted. We do not promise a fixed deletion deadline that our retention systems have not established.
Guest accounts are tied to the device and its stored credentials. Unless you sign in with Apple or Google, changing devices or losing stored credentials may prevent recovery. Providing an old user ID or device ID alone does not authorize access to that account.
8. How Do We Protect Your Personal Information?
When you send prompts or messages to Hushee, we ensure that such data is transferred securely and encrypted to our server. We take technical and organizational measures to ensure that information is processed in a manner that ensures appropriate security of information, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage. For example, we use verified service providers that might have access to Personal Information with which the relevant data processing agreements are signed. We also guide and train our personnel to process your data securely according to our internal data protection policies.
9. Your Rights Relating to Your Personal Information
You may have certain rights relating to your Personal Information subject to applicable data protection laws. These rights may include the right to:
- access to and get a copy of your Personal Information that we hold;
- ask us to send your data to another party in a commonly used, machine readable format;
- update or correct your Personal Information in order to make it accurate;
- delete your Personal Information from our records in certain circumstances;
- restrict the processing of your Personal Information in certain circumstances;
- object to us processing your Personal Information in certain circumstances, including for advertising measurement.
If you are a California resident, the following information applies to you. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CPRA), California residents have the following rights related to personal information:
- The right to know (request disclosure of) personal information collected, sold or shared.
- The right to deletion of personal information collected from the consumer.
- The right to correct inaccurate personal information.
- The right to nondiscriminatory treatment for exercising any rights.
- The right to opt out of the sale or sharing of personal information.
To exercise your rights, please contact us by using the information in Section 1. You can also delete your data from our records by sending us a data request via email [email protected].
10. Additional Information for California Residents
The information categories processed by Hushee are identifiers (such as account, device and advertising identifiers and email address), commercial information (purchase and subscription records), internet or other electronic network activity (usage events and technical information), approximate geolocation derived from IP address, conversation and community content, inferences stored as conversation memories, profile characteristics you choose to provide, and support or safety reports. Sources include your use of the App, the Apple or Google account you sign in with, Apple's App Store, our attribution partners and communications you send us. The purposes and recipients are described in Sections 3 and 4, and retention periods for each category are described in Section 7. The only sensitive personal information we may process is your preference about who you would like to meet, described in Section 2, which we use only to recommend characters to you.
We do not sell your personal information for money, but providing identifiers, usage information and purchase events to Adjust, Meta and Google for advertising attribution and measurement, as described in Sections 4 and 5, may be considered a "sale" or "sharing" for cross-context behavioral advertising under California law. The App Tracking Transparency setting controls only the IDFA. To opt out of the sale or sharing of your personal information, contact us at [email protected]; we will then stop providing data associated with your account to our attribution and advertising partners and ask them to delete it. Applicable access, correction, deletion and other rights can be requested using the contact details in Section 1. We may need to verify ownership without exposing another user's data.
11. Age Requirement
Hushee is intended for users aged 18 and above. We do not knowingly collect personal information from users under the age of 18. If we learn that a user is under the age of 18, we will take reasonable steps to delete any processed data and close the associated account. If you are a parent or guardian and become aware that a user under 18 has provided us with personal information, please contact us at [email protected] and we will take reasonable steps to delete the processed data.
12. Changes to This Privacy Policy
We may update this Privacy Policy according to changes in our service functions and measures concerning the protection of Personal Information. If we make changes to this Privacy Policy, we will update it through our App. Thus, you are advised to review this page periodically for any changes.