Privacy Policy

Privacy Policy

Effective date: [TO COMPLETE: EFFECTIVE_DATE]. This draft describes Halowe: Build A Fantasy World, its account services and these public information pages.

01 · Who is responsible

Halowe is operated by Skyhigh Technology Group Inc. (the “operator”, “we” or “us”). The operator is responsible for the personal data handled by this service.

• Support email: delaneyc@skyhightech.homes
• Privacy contact / Data Protection Officer: [TO COMPLETE: PRIVACY_CONTACT_AND_DPO]
• Postal contact: [TO COMPLETE: PUBLIC_POSTAL_ADDRESS]

02 · Information the service handles

• Account and profile: email address, account identifier, profile name, selected gender option (including “prefer not to say”), account creation and profile-completion timestamps. Password accounts store a password hash, not the original password. Sign in with Apple, when enabled, uses Apple's user identifier and any email address Apple supplies.
• Characters and conversations: character names, descriptions, selected avatar identifiers, world-setting snapshots, messages, AI replies, chosen response language and conversation timestamps. The server also records request identifiers, generation status and usage counts needed to deliver, troubleshoot and limit requests.
• Security and connection data: authentication/session information and the connecting IP address for rate limiting. Hosting or reverse-proxy logging, including any additional connection metadata: [TO COMPLETE: SECURITY_LOG_RETENTION].
• Device-local data: generated maps, app preferences and cached characters/conversations are stored on the device. Login credentials for the session are stored in iOS Keychain. Relevant world information is also sent to our server when you save a character or use an AI feature; “local maps” does not mean that every world detail remains on the device.
• Support requests: information you choose to send, such as a description of a problem and a redacted screenshot, once the contact channel is published.

The current default portraits are bundled app assets; choosing one does not upload a photograph or send it to R2. If an existing character uses a network image URL, loading it contacts that image's host and exposes ordinary network request information to that host.

03 · Why information is used

Information is used to operate accounts, maintain character and conversation history, generate the AI response you request, keep language preferences consistent, prevent abuse, diagnose failures and handle support or legal obligations. The initial release is free and has no advertising. These information pages contain no advertising, analytics scripts, tracking cookies or third-party fonts.

We do not operate a model-training pipeline in the current app. This is not a promise of zero retention by infrastructure or AI providers.

04 · AI processing and other providers

Manually saving a character does not itself call the AI provider. Do not include passwords, payment details, identity documents or sensitive information about yourself or others in prompts.

API access does not mean local-only processing, zero retention or no training by a provider. Providers may change. Before publication, the following disclosures must reflect the actual provider contracts and settings. Material changes to providers or data uses require updated disclosures and renewed permission where necessary:

• Contracting entity, processing locations and relevant subprocessors: [TO COMPLETE: AI_CONTRACT_ENTITY_AND_PROCESSING_REGIONS]
• Inference/audit logging and retention: [TO COMPLETE: AI_LOGGING_AND_RETENTION]
• Application hosting and database provider: [TO COMPLETE: HOSTING_PROVIDER]

Apple processes Sign in with Apple requests under its own privacy terms when that login option is available. Disclosures may also be required by valid legal obligations. No blanket permission to sell conversations, publish them, or use them for unrelated advertising is requested by this draft.

Your choice: before first using AI, the app presents a data-sharing notice with “Agree and continue” and “Not now” choices. Declining does not prevent manual character creation or local maps. Withdraw permission under Account → AI data permission to stop new requests and cancel active generation where possible. Already transmitted data cannot be recalled by this action, and saved conversations are not deleted. Your account records the accepted notice version and time. Changing the AI endpoint, model or notice revision requires a new grant. Reading this page does not grant permission.

05 · Where data is processed

The operator has confirmed that the application servers and database are in Singapore. This does not establish that every AI-provider operation, image host, backup or support system is in Singapore.

Applicable overseas processing locations and transfer safeguards, including how a user may obtain information about those safeguards: [TO COMPLETE: INTERNATIONAL_TRANSFER_SAFEGUARDS]. These must be verified for the final release territories; this draft does not claim that transfer agreements or an EU/UK representative have already been appointed.

06 · Retention, deletion and security

While your account is active, we retain the data needed for your account, saved characters and conversation history. We do not currently delete an account merely because it is inactive. Signing out or uninstalling does not delete server records.

Select Delete account in the account page and confirm to submit a request. The account and all existing sign-in sessions are disabled immediately. Records are retained for 30 days from the first request for deletion processing; signing in cannot restore the account, and retries do not extend the deadline. After that period, a background task permanently deletes the account details, permission records, characters and chats from the production database. It checks every minute, catches up after service interruptions and retries failed deletions. A submission confirmation means the request is recorded, not that deletion has already finished.

The requesting device clears that account's credentials, character cache and chat cache. Access from other devices is disabled, but offline copies cannot be guaranteed to be remotely erased. Device-local worlds and maps are outside server deletion and can be removed through device app-data controls. Deleted data cannot be recovered; registering again does not restore the old account.

• Infrastructure/security log retention: [TO COMPLETE: SECURITY_LOG_RETENTION]
• Backup rotation and deletion completion period, including any lawful exceptions: [TO COMPLETE: BACKUP_ERASURE_TIMELINE]

The 30-day automatic deletion scope is this service's production database, not a blanket promise about backups, third-party AI logs or independent systems. Their actual retention and erasure mechanisms must be confirmed separately before publication.

The current code uses password hashing, account-scoped data access and session controls. No system can guarantee absolute security. HTTPS for the app API, operational access controls, backups and an incident-response process must be verified before publication; this draft does not claim end-to-end encryption.

07 · Your choices and rights

Depending on the law that applies, you may request access, correction or deletion, withdraw consent, object to or restrict some processing, request portability where available, or complain to your local privacy regulator. In Singapore, you may contact the Personal Data Protection Commission. These rights may have legal conditions and exceptions.

Request account deletion or withdraw AI permission directly from the account page; no email is required. If profile setup is incomplete, use Account & privacy on that screen. For access, correction or other privacy requests, use the contact above. Proportionate account verification may be needed, but do not send passwords or sign-in codes.

For EEA/UK availability, the purpose-by-purpose lawful basis (and any legitimate interests), applicable rights, response periods and supervisory-authority information must be finalized: [TO COMPLETE: EU_UK_LEGAL_BASES]. Representative details or the assessed basis for any exemption: [TO COMPLETE: EU_UK_REPRESENTATIVE_AS_APPLICABLE].

08 · Adults only

Halowe is intended only for people aged 18 or older. We do not intend to collect children's personal data. If you believe an under-18 account exists, notify the privacy contact once available. Age screening, the reporting route and a process to restrict the account and handle its data must be in place before launch; this policy does not itself verify a user's age.

09 · Changes and questions

The final policy will show its effective date. Material changes to data use require appropriate notice and, where necessary, fresh consent before the new use. Questions and requests can be sent to delaneyc@skyhightech.homes. All marked fields must be completed and reviewed against actual operations before this draft becomes a published policy.