Heyyy Privacy Policy

This Privacy Policy explains how Heyyy Development Company ("Heyyy," "we," "us," or "our") collects, uses, stores, shares, and protects personal information when you choose preset goals, generate AI images or videos, interact with original AI characters, submit reports, and use related account features (together, the "Services"). By using the Services, you acknowledge the practices described here. This Policy is intended to reflect applicable requirements under laws such as the GDPR, CCPA, VCDPA, LGPD, and other relevant privacy frameworks.

Data Controller Identification

You may contact the Data Controller or privacy team at any time with questions, concerns, or requests relating to your personal information.

Core Privacy Principles

• Transparency: We describe the information we collect, why we use it, and when it may be shared.
• Data Minimization: We seek to collect only information reasonably needed to operate the Services.
• Security: We apply administrative, technical, and organizational safeguards.
• User Control: Eligible users may access, correct, delete, or object to certain processing.
• Accountability: We remain responsible for personal information processed on our behalf.

1. Information We Collect

1.1 Information You Provide

• Account details, such as your name, email address, birthdate, username, and other information you choose to provide.
• Preset goals you select, generation requests, creation preferences, support requests, reports, and related information you send through the Services.
• Messages exchanged with AI characters and other interaction data needed to provide the character-chat experience.
• AI-generated images, AI-generated videos, and related creation records associated with your account or session.

1.2 Information Collected Automatically

• Device and technical data, including device type, operating system, app version, device identifiers, network information, and diagnostic information.
• Usage and creation data, such as selected goals, generation events, AI character interactions, reports, feature activity, and session duration.
• Log information, including IP address, access time, diagnostics, and pages or features viewed.
• Aggregated analytics used to understand performance and improve the Services.

2. Legal Bases for Processing

Where the GDPR or similar law applies, we process personal information on one or more of the following grounds:

• Consent: You have agreed to optional processing, such as selected creation inputs, AI character interactions, or optional communications.
• Contract: Processing is necessary to create and manage your account or deliver requested Services.
• Legitimate Interests: Processing supports security, fraud prevention, moderation, analytics, and service improvement without overriding your rights.
• Legal Obligations: Processing is required for lawful requests, recordkeeping, tax, safety, or regulatory duties.

3. How We Use Information

• Create, administer, verify, and protect your Heyyy account.
• Process preset goals and generation requests to produce AI images and AI videos.
• Operate AI character chats and deliver character responses during the creation experience.
• Provide support and respond to questions or rights requests.
• Detect misuse, verify identity, prevent fraud, and maintain platform safety.
• Understand feature performance and improve the reliability, safety, and usability of the Services.
• Review reports, moderate prohibited content, and apply available creation and account controls.
• Enforce our policies and satisfy applicable legal requirements.

4. Data Sharing Transparency

Depending on applicable law, you may ask whether, how, and with whom your personal information is shared. We disclose information only as described in this Policy or with your permission.

4.1 Types of Information We May Share

• Preset goals, creation inputs, and necessary technical data with providers that support AI image or video generation.
• AI character messages and necessary interaction data with providers that support character responses and content safety.
• Device and usage data for hosting, security, analytics, and operational support, with de-identification where reasonably possible.
• Aggregated or anonymized information that does not reasonably identify an individual.

4.2 Categories of Recipients

• Vendors supporting cloud hosting, AI generation, character responses, content delivery, moderation, analytics, security, and customer care.
• Authorities or other parties when disclosure is required by law, legal process, or a valid government request.
• Professional advisers and transaction participants in connection with a merger, financing, acquisition, or similar business event.
• Business partners for a clearly disclosed purpose and, where required, with your consent.

5. Sale of Personal Information

Heyyy does not sell personal information for money or other valuable consideration as those terms are defined under applicable privacy laws. If our practices change, we will update this Policy and provide any notice or opt-out method required by law before the change takes effect.

6. Creation, Output, and Character Controls

6.1 Creation and Output Choices

• You decide which preset goal to use and whether to begin another AI image or video generation.
• Review generated output before using, saving, or sharing it outside the Services.
• Use available controls to remove eligible creation records or outputs associated with your account.

6.2 AI Character and Safety Choices

• You choose whether to interact with an AI character, continue the exchange, or stop the interaction.
• The in-app report tool can be used to notify Heyyy about generated content or character behavior that appears unsafe or inappropriate.
• AI-generated images, videos, and character messages may contain errors or unexpected material and should be reviewed before reliance or external use.

6.3 Privacy Requests

Email shamsoonnahar60@gmail.com with the subject "Heyyy Privacy Request" and include the registered email address and user ID associated with your account. We aim to process valid requests within the period required by applicable law.

7. Your Privacy Rights

Your jurisdiction may provide some or all of the following rights:

• Access or obtain a copy of personal information we maintain about you.
• Correct inaccurate or incomplete personal information.
• Request deletion, subject to lawful retention exceptions.
• Receive eligible information in a portable, machine-readable format.
• Object to or restrict certain processing, including some direct marketing.
• Withdraw consent without affecting processing lawfully performed before withdrawal.
• Request information about collection, use, disclosure, sale, or sharing practices.
• Appeal an eligible rights-request decision or complain to a supervisory authority.

To submit a request, contact shamsoonnahar60@gmail.com. We may verify your identity before acting and will respond within the period required by applicable law, generally within 30 days where the GDPR applies.

8. Data Retention

We keep personal information only for the period reasonably necessary to provide the Services, maintain your account, comply with legal and recordkeeping duties, resolve disputes, enforce agreements, and address fraud or security threats. Following a valid account-deletion request, information is deleted or anonymized within a reasonable period unless continued retention is legally permitted or required.

9. Data Security

Our safeguards may include encryption in transit and at rest, access restrictions, protected storage, security reviews, system updates, and incident-response procedures. No internet transmission or storage system can be guaranteed completely secure, so we cannot promise absolute security.

10. Children's Privacy

The Services are not intended for children under 18, and we do not knowingly collect personal information from children under 18. If we learn that a child provided personal information without valid authorization, we will take reasonable steps to remove it. A parent or guardian may contact shamsoonnahar60@gmail.com with a related concern.

11. International Transfers

Information may be processed in countries other than the one where you reside. When required, we use recognized transfer safeguards, such as approved Standard Contractual Clauses or another lawful transfer mechanism.

12. Changes to This Policy

We may revise this Policy to reflect legal, technical, or operational changes. For material revisions, we may provide notice through Heyyy, by email, on our website, or through another prominent method. The date at the top shows when this Policy was last updated.

13. Contact Us

We aim to respond to privacy-related inquiries within 48 business hours.