LERUNI — Privacy Policy

Effective: May 26, 2026 · Last updated: September 23, 2026

1. Introduction

LERUNI ("we", "our", "the app") is an AI companion chat application. We protect your privacy and explain what data we collect, how we use it, and your rights.

2. Data We Collect

• Account Information: Email address and display name from Google OAuth. Your Google password is never shared with us.
• Chat Messages: Your conversations with AI characters are stored on our servers for continuity between sessions. All chat data is private and only accessible by you.
• Optional Image Attachments: If you choose to attach a photo to a chat message, the selected image is sent with that message so the AI can respond to it. We do not access your photo library unless you choose an image.
• Optional Camera and Voice Features: Camera access is requested when you choose to take a photo; only a photo you send is uploaded with your chat. On supported Android devices, dictation uses on-device speech recognition. LERUNI does not record or upload microphone audio for these features. Recognized text stays in the composer until you send it, after which it is processed as a chat message. When you request reply playback or enable automatic reading, the assistant reply text and selected voice are sent to the configured AI voice service to generate speech. The returned WAV audio is played from app memory and released after playback or cancellation; the service marks audio responses as not to be cached. Voice playback requires a connection to an available AI voice service. Voice choices and the automatic-reading preference are stored on this device separately for each account. Dictation may require device support and language packs.
• Persona Memory: Facts and emotional cues the AI remembers about you to personalize replies. You can reset memory at any time via Settings → Memory → Reset.
• Gift & Daily Joy History: Records of gifts you sent, free Daily Joy gifts received from characters, milestone unlocks, intimacy progress, and the secret memories you have unlocked.
• Purchase Data: Subscription tier, expiry, in-app purchase receipt metadata. Payment card numbers are never received by us — Apple/Google handle billing.
• Analytics Events: Aggregated, anonymized usage signals — app opens, screen views, gift sent counts, free Daily Joy claims, purchase completions, A/B test exposures. We never log chat content, email, IP, or device identifiers in analytics. See §5 for the full whitelist.
• Push Token: Expo / FCM token, only if you grant notification permission.
• Approximate Location & Local Weather: used only so your companion can naturally weave the weather into conversation. GPS coordinates are not stored on LERUNI servers or in LERUNI analytics; they are sent transiently from the app to Open-Meteo to look up the current weather.
• Device & Crash Info: App version, OS version, error logs — used for stability.

3. How We Use Your Data

• Provide and improve the AI chat experience
• Remember conversation context, persona facts, and unlocked secrets across sessions
• Provide free Daily Joy companion gifts and relationship milestones
• Manage your subscription, credit balances, and milestones
• Send push notifications (only if you opt in)
• Detect abuse, prevent fraud, and respond to outages
• Run anonymous A/B experiments to improve pricing, copy, and game balance

4. Optional Rewarded Ads

LERUNI may offer optional rewarded ads in non-chat features, such as an extra Keycap session. Rewarded ads do not extend the one-time chat preview and do not replace a subscription. We do not sell personal data. Ad requests may involve Google processing ad-related identifiers for delivery and measurement, subject to consent controls and platform settings where required.

5. Analytics Data — Strict Whitelist

We collect anonymous usage signals to improve the product. Every property is on a strict whitelist; the following data is never collected in LERUNI's own analytics:

• Chat message content (raw text)
• Email, raw nickname, IP address
• Device identifier, advertising identifier
• Geolocation coordinates
• Payment card number, full transaction ID, receipt body

Whitelisted events include: app_opened, paywall_viewed, purchase_completed, gift_sent, daily_joy_received, milestone_reached, mood_state_changed, experiment_exposed. Each event includes only the specific properties listed in our analytics SDK source code.

6. Data Storage and Security

Your data is stored on Supabase (PostgreSQL, region: AWS ap-northeast-2 Seoul). All transit is TLS-encrypted. Storage is encrypted at rest. Row-Level Security ensures only you can read or modify your own data. No other user — and no LERUNI staff acting in a normal role — can read your chats.

7. Third-Party Services

8. Data Retention

• Account & chat data: kept until you delete your account.
• Purchase log: kept 5 years to comply with consumer-protection laws.
• Analytics events: raw rows cleared after 90 days; aggregates retained for product analytics.
• Push token: deleted immediately when you revoke notification permission or delete the account.

9. Your Rights

• Access: request a copy of your data via Settings or email.
• Deletion: Settings → Account → Delete Account removes your LERUNI account data within 30 days. If you cannot access the app, visit delete-account.html on LERUNI's current public Play support host to request deletion.
• Portability: request your data in JSON.
• Correction: request correction of inaccurate data.
• Withdrawal of consent: revoke push permission or delete the account at any time.

10. Children

LERUNI is not directed to children under 13 (US) or 14 (Korea). We do not knowingly collect data from such users. If a parent or guardian learns that a child has created an account, please contact us — we will delete the account and all associated data.

11. Changes

We will notify you of material changes through in-app announcement at least 7 days before they take effect (30 days for changes adverse to users).

12. Contact

Privacy contact: use the Google Play developer contact listed for LERUNI.