{"id":988237,"date":"2026-03-26T23:58:16","date_gmt":"2026-03-26T23:58:16","guid":{"rendered":"https:\/\/croncodestudio.com\/en\/?page_id=988237"},"modified":"2026-08-11T23:20:34","modified_gmt":"2026-08-11T23:20:34","slug":"heyya-privacy-policy","status":"publish","type":"page","link":"https:\/\/croncodestudio.com\/en\/heyya-privacy-policy\/","title":{"rendered":"Heyya \u2014 Privacy Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"988237\" class=\"elementor elementor-988237\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-687c783 e-flex e-con-boxed e-con e-parent\" data-id=\"687c783\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a639661 e-flex e-con-boxed e-con e-parent\" data-id=\"a639661\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9ca95a2 elementor-widget elementor-widget-heading\" data-id=\"9ca95a2\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<p class=\"elementor-heading-title elementor-size-default\"><!--\nHeyya \u2014 Privacy Policy\nPublish at: https:\/\/croncode.com\/privacy\nCopy everything BELOW this comment into your site raw HTML block.\nLast updated: August 12, 2026\n-->\n\n<h1>Privacy Policy \u2014 Heyya<\/h1>\n\n<p><strong>Effective date:<\/strong> August 12, 2026<br>\n<strong>Last updated:<\/strong> August 12, 2026<br>\n<strong>Controller \/ Operator:<\/strong> CRONCODE LLC (\u201cCroncode\u201d, \u201cwe\u201d, \u201cus\u201d, or \u201cour\u201d)<br>\n<strong>App:<\/strong> Heyya (iOS mobile application) and related websites, APIs, and services (collectively, the \u201cService\u201d)<\/p>\n\n<p><strong>Contact<\/strong><br>\nEmail: <a href=\"mailto:hello@croncodestudio.com\">hello@croncodestudio.com<\/a><br>\nPhone: <a href=\"tel:+15054604765\">+1 (505) 460-4765<\/a><br>\nHead Office (USA): CRONCODE LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA<\/p>\n\n<p>This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you use Heyya. It is designed to support transparency expectations under Apple App Store Review Guidelines (including Guideline 5.1 Privacy), applicable U.S. state privacy laws (including CCPA\/CPRA where applicable), and GDPR\/UK GDPR where those laws apply.<\/p>\n\n<p>By downloading, accessing, or using the Service, you acknowledge this Privacy Policy. If you do not agree, do not use the Service.<\/p>\n\n<hr>\n\n<h2>1. Important summary<\/h2>\n\n<ul>\n<li><strong>Heyya is an adult (18+) AI entertainment app<\/strong> featuring fictional AI characters \/ companions. Characters are not real people.<\/li>\n<li>We process account\/profile data, chat content, voice audio for realtime calls, photos you upload or capture, AI-generated outputs, purchase records (via Apple), device\/usage data, reports, and advertising\/measurement data where permitted.<\/li>\n<li><strong>User-generated content (UGC)<\/strong> and photos you provide may be sent to AI processors (including <strong>Google Gemini<\/strong> for image generation\/processing and <strong>OpenAI<\/strong> for chat\/voice-related processing) so we can return AI-generated text, voice, and images to you.<\/li>\n<li>We do <strong>not sell<\/strong> your personal information for money. We may use advertising and analytics partners as described below, subject to your device settings and consent choices (including App Tracking Transparency where required).<\/li>\n<li>You can request access\/deletion and delete your account as described in Section 12.<\/li>\n<\/ul>\n\n<hr>\n\n<h2>2. Scope<\/h2>\n\n<p>This Policy applies to personal information processed in connection with:<\/p>\n<ul>\n<li>the Heyya iOS app;<\/li>\n<li>our websites and support channels (including email);<\/li>\n<li>backend infrastructure used to operate Heyya (authentication, databases, file storage, edge functions \/ proxies);<\/li>\n<li>AI model providers and other subprocessors engaged to deliver features you request.<\/li>\n<\/ul>\n\n<p>This Policy does not apply to third-party websites, apps, or services that we do not control (for example, Apple App Store pages, Apple ID settings, or third-party privacy choices screens).<\/p>\n\n<hr>\n\n<h2>3. Who we are<\/h2>\n\n<p>The data controller for Heyya is:<\/p>\n<p>\n<strong>CRONCODE LLC<\/strong><br>\n1209 Mountain Road Pl NE, Ste N<br>\nAlbuquerque, NM 87110, USA<br>\nEmail: <a href=\"mailto:hello@croncodestudio.com\">hello@croncodestudio.com<\/a><br>\nPhone: +1 (505) 460-4765\n<\/p>\n\n<hr>\n\n<h2>4. Categories of information we collect<\/h2>\n\n<h3>4.1 Information you provide<\/h3>\n<ul>\n<li><strong>Account &amp; authentication data:<\/strong> email\/credentials (if used), Sign in with Apple identifiers\/tokens (when enabled), session tokens, account IDs.<\/li>\n<li><strong>Profile data:<\/strong> display name, age\/birthday (for 18+ age gate), gender or preferences you select, bio\/about text, language settings, interest preferences, and similar profile fields.<\/li>\n<li><strong>User content (UGC):<\/strong> text messages\/prompts you send to AI characters; photos or images you upload or capture (including profile photos and couple\/selfie inputs); captions\/instructions for \u201ctake\/create a photo\u201d style requests; reports, feedback, and support messages.<\/li>\n<li><strong>Voice inputs:<\/strong> microphone audio streamed for realtime AI voice conversations while a call feature is active.<\/li>\n<li><strong>Communications:<\/strong> emails or messages you send to <a href=\"mailto:hello@croncodestudio.com\">hello@croncodestudio.com<\/a> or other support channels.<\/li>\n<\/ul>\n\n<h3>4.2 Information created by the Service (including AI outputs)<\/h3>\n<ul>\n<li>AI-generated character replies (text).<\/li>\n<li>AI-generated or AI-processed images (including character photos, requested scenes, and composite\/couple-style outputs).<\/li>\n<li>Transcripts or derived text used to operate voice features (where applicable).<\/li>\n<li>Relationship\/progress metadata (for example match status, relationship level, in-app economy balances) needed to run the experience.<\/li>\n<\/ul>\n\n<p><strong>AI image processing disclosure:<\/strong> When you use photo-related features, we may transmit your uploaded\/captured image(s), prompt text, and necessary context to AI image systems (including <strong>Google Gemini<\/strong>) so the Service can generate, transform, combine, or return an image output to you. That processing is performed to provide the feature you requested.<\/p>\n\n<h3>4.3 Information collected automatically<\/h3>\n<ul>\n<li>Device and app information (device model, OS version, app version, language\/locale, time zone).<\/li>\n<li>Identifiers used for security, anti-abuse, analytics, and (where allowed) advertising (for example device\/install identifiers; IDFA only if you authorize tracking via ATT).<\/li>\n<li>Usage and diagnostics (feature usage, screen views, crash logs, performance metrics, approximate network info needed to deliver the Service).<\/li>\n<li>Log data related to authentication, API calls, moderation\/report tooling, and fraud prevention.<\/li>\n<\/ul>\n\n<h3>4.4 Purchases and subscriptions<\/h3>\n<p>In-app purchases and subscriptions are processed by <strong>Apple<\/strong>. We typically receive transaction identifiers, product identifiers, purchase\/restore status, and entitlement information needed to unlock VIP, gems\/virtual currency, or other paid features. We do <strong>not<\/strong> receive your full payment card number from Apple.<\/p>\n\n<h3>4.5 Advertising \/ measurement (if enabled)<\/h3>\n<p>Where the app includes ads (for example rewarded ads via Google AdMob) or measurement SDKs, those partners may collect device\/ad identifiers, coarse location (if provided by the platform), interaction data, and similar signals according to your consent and OS settings. You can limit ad tracking via iOS settings and ATT prompts.<\/p>\n\n<hr>\n\n<h2>5. AI providers and how your content is processed<\/h2>\n\n<p>Heyya uses artificial intelligence to generate conversational replies, realtime voice interactions, and images. To operate these features, relevant inputs are sent to trusted processors acting on our instructions, including:<\/p>\n\n<ul>\n<li><strong>Google (Gemini)<\/strong> \u2014 primarily for AI image generation and image processing\/transformation features (including generating character\/scene images and processing user-provided images when you request photo creation\/editing\/composite outputs).<\/li>\n<li><strong>OpenAI<\/strong> \u2014 primarily for AI chat\/completions and realtime voice conversation features.<\/li>\n<li><strong>Our backend \/ hosting providers<\/strong> (including infrastructure such as Supabase for authentication, database, storage, and server-side proxying of AI requests) so API keys can be kept server-side and requests can be authenticated, rate-limited, logged for security, and moderated.<\/li>\n<\/ul>\n\n<p>Depending on the feature, processors may receive:<\/p>\n<ul>\n<li>your prompt \/ message text;<\/li>\n<li>character\/system context needed for consistent roleplay;<\/li>\n<li>language preference;<\/li>\n<li>reference or user photos you upload\/capture for image features;<\/li>\n<li>short-lived audio streams for voice calls;<\/li>\n<li>safety\/moderation signals.<\/li>\n<\/ul>\n\n<p>We configure providers as service providers\/processors to the extent practicable. Provider processing is also subject to their terms and privacy policies. Do not submit content you are not allowed to share (for example, others\u2019 intimate images without consent, illegal content, or personal data of minors).<\/p>\n\n<p><strong>No guarantee of perfect safety filters:<\/strong> We apply technical and policy safeguards, but AI systems can produce unexpected, inaccurate, or undesired outputs. See also our Terms of Use.<\/p>\n\n<hr>\n\n<h2>6. Why we use personal information (purposes)<\/h2>\n\n<p>We process personal information to:<\/p>\n<ul>\n<li>create and manage accounts and sessions;<\/li>\n<li>provide core features (onboarding, swipe\/explore, matching, chat, voice calls, photo request\/generation, couple selfie, store, VIP\/gems);<\/li>\n<li>personalize language and experience settings;<\/li>\n<li>process payments\/entitlements through Apple;<\/li>\n<li>operate AI features you request and return outputs to you;<\/li>\n<li>host, cache, and deliver media (including generated images) as part of the Service;<\/li>\n<li>enable safety tooling: content reporting, abuse prevention, spam\/fraud reduction, rate limiting;<\/li>\n<li>send service-related notices (security, account, legal);<\/li>\n<li>send optional push notifications if you enable them;<\/li>\n<li>measure performance, debug, and improve the Service;<\/li>\n<li>show ads or offer rewarded ads where implemented and permitted;<\/li>\n<li>comply with law, enforce Terms, and protect rights, safety, and property;<\/li>\n<li>respond to support and privacy requests.<\/li>\n<\/ul>\n\n<hr>\n\n<h2>7. Legal bases (EEA\/UK and similar regimes)<\/h2>\n\n<p>Where GDPR\/UK GDPR (or similar) applies, we rely on:<\/p>\n<ul>\n<li><strong>Contract<\/strong> \u2014 to provide the Service you request;<\/li>\n<li><strong>Consent<\/strong> \u2014 for optional permissions (microphone, camera, photos, notifications), tracking\/ATT where required, and certain marketing\/analytics uses;<\/li>\n<li><strong>Legitimate interests<\/strong> \u2014 security, fraud prevention, product improvement, service analytics that are not consent-required, and protecting the Service (balanced against your rights);<\/li>\n<li><strong>Legal obligation<\/strong> \u2014 where we must retain or disclose information to comply with law.<\/li>\n<\/ul>\n\n<p>You may withdraw consent at any time in iOS Settings and\/or by contacting us, without affecting the lawfulness of processing before withdrawal.<\/p>\n\n<hr>\n\n<h2>8. How we share information<\/h2>\n\n<p>We share personal information only as needed to operate the Service:<\/p>\n\n<ul>\n<li><strong>Apple<\/strong> \u2014 App Store distribution, In-App Purchases\/subscriptions, Sign in with Apple (if used), push notification infrastructure, and related platform services.<\/li>\n<li><strong>Cloud \/ backend providers<\/strong> \u2014 hosting, authentication, databases, object storage, edge functions (e.g., Supabase and similar infrastructure).<\/li>\n<li><strong>AI subprocessors<\/strong> \u2014 Google Gemini; OpenAI; and any successor\/additional model providers we engage to deliver the same categories of features (we will update this Policy when material provider changes occur).<\/li>\n<li><strong>Advertising \/ measurement partners<\/strong> \u2014 e.g., Google AdMob and related Google advertising services, subject to consent\/ATT and your settings.<\/li>\n<li><strong>Professional advisors<\/strong> \u2014 lawyers, auditors, insurers under confidentiality obligations.<\/li>\n<li><strong>Authorities \/ legal<\/strong> \u2014 if required by law, legal process, or to protect users, the public, or Croncode from harm, fraud, or liability.<\/li>\n<li><strong>Business transfers<\/strong> \u2014 in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate protections.<\/li>\n<\/ul>\n\n<p>We do <strong>not sell<\/strong> personal information as \u201csale\u201d is commonly understood (exchange for money). If a jurisdiction defines \u201csale\u201d or \u201csharing\u201d more broadly for cross-context behavioral advertising, we honor applicable opt-out rights (see Section 12).<\/p>\n\n<hr>\n\n<h2>9. User-generated content, reporting, and safety<\/h2>\n\n<p>Heyya includes interactive AI experiences and may allow users to upload photos\/text (UGC). Consistent with Apple\u2019s expectations for UGC-capable apps:<\/p>\n<ul>\n<li>You are responsible for content you submit.<\/li>\n<li>We provide in-app reporting mechanisms for objectionable content\/conduct.<\/li>\n<li>We may review reports, remove content, restrict features, suspend or terminate accounts, and preserve records needed for safety\/legal compliance.<\/li>\n<li>Illegal content (including any sexual content involving minors) is strictly prohibited and may be reported to authorities.<\/li>\n<\/ul>\n\n<p>See our Terms of Use for acceptable-use rules.<\/p>\n\n<hr>\n\n<h2>10. Retention<\/h2>\n\n<p>We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including:<\/p>\n<ul>\n<li><strong>Account\/profile data:<\/strong> for the life of the account, then deleted or anonymized after account deletion (subject to legal holds and backup cycles).<\/li>\n<li><strong>Chat, prompts, and generated media:<\/strong> while needed to provide the Service, moderation, and restore\/continuity features; deleted or anonymized after account deletion subject to residual backups and legal requirements.<\/li>\n<li><strong>Voice audio:<\/strong> processed to provide realtime calls; we do not intend to permanently store raw call recordings unless a specific feature clearly offers saving\/export and you choose it (in which case retention follows that feature\u2019s notice).<\/li>\n<li><strong>Purchase\/entitlement records:<\/strong> retained as needed for accounting, fraud prevention, chargebacks, and legal compliance.<\/li>\n<li><strong>Security\/report logs:<\/strong> retained for a reasonable period for safety, abuse prevention, and dispute resolution.<\/li>\n<\/ul>\n\n<hr>\n\n<h2>11. Security<\/h2>\n\n<p>We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit (HTTPS\/TLS), access controls, server-side handling of AI API credentials (via backend proxies where implemented), and monitoring for abuse. No method of transmission or storage is 100% secure; you use the Service at your own risk regarding residual security risk.<\/p>\n\n<hr>\n\n<h2>12. Your rights and choices<\/h2>\n\n<h3>12.1 Account controls<\/h3>\n<ul>\n<li>Update profile information in the app where available.<\/li>\n<li>Delete your account via in-app Settings (or contact us if unavailable).<\/li>\n<li>Manage iOS permissions: Microphone, Camera, Photos, Notifications, Tracking.<\/li>\n<li>Manage subscriptions\/purchases in Apple ID \u2192 Subscriptions.<\/li>\n<\/ul>\n\n<h3>12.2 Privacy rights (region-dependent)<\/h3>\n<p>Depending on your location, you may have rights to access, correct, delete, port\/export, restrict or object to certain processing, withdraw consent, and appeal a denial. To exercise rights, email <a href=\"mailto:hello@croncodestudio.com\">hello@croncodestudio.com<\/a> with the subject line \u201cPrivacy Request\u201d and enough information to verify your request.<\/p>\n\n<h3>12.3 California \/ similar U.S. state notices (summary)<\/h3>\n<p>If you are a California resident (or resident of a state with similar laws), you may have rights to know\/access, delete, correct, and opt out of \u201csale\u201d\/\u201csharing\u201d of personal information for cross-context behavioral advertising. We do not knowingly sell personal information for money. To opt out of advertising-related sharing to the extent applicable, use ATT\/iOS Limited Ad Tracking controls and contact us. We will not discriminate against you for exercising privacy rights.<\/p>\n\n<h3>12.4 EEA\/UK<\/h3>\n<p>You may lodge a complaint with your local supervisory authority. You may also contact us first so we can try to resolve your concern.<\/p>\n\n<hr>\n\n<h2>13. Children and age restriction<\/h2>\n\n<p><strong>Heyya is intended solely for users 18 years of age or older.<\/strong> We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a minor, we will delete it promptly. Parents\/guardians who believe a minor has used the Service should contact <a href=\"mailto:hello@croncodestudio.com\">hello@croncodestudio.com<\/a> immediately.<\/p>\n\n<p>This Service is not directed to children under 13 and is not intended to be COPPA-covered children\u2019s content.<\/p>\n\n<hr>\n\n<h2>14. International transfers<\/h2>\n\n<p>Croncode is based in the United States. Your information may be processed in the United States and other countries where we or our processors operate. Those countries may have data-protection laws different from your home country. Where required, we use appropriate transfer safeguards (such as standard contractual clauses or equivalent mechanisms offered by processors).<\/p>\n\n<hr>\n\n<h2>15. Device permissions (iOS)<\/h2>\n\n<p>Depending on features you use, the app may request:<\/p>\n<ul>\n<li><strong>Microphone<\/strong> \u2014 realtime AI voice calls;<\/li>\n<li><strong>Camera<\/strong> \u2014 capture photos for profile or couple\/selfie \/ photo-request features;<\/li>\n<li><strong>Photo Library<\/strong> \u2014 select images to upload for those features;<\/li>\n<li><strong>Notifications<\/strong> \u2014 optional alerts (matches, messages, reminders);<\/li>\n<li><strong>App Tracking Transparency<\/strong> \u2014 only if we request permission for cross-app tracking \/ personalized ads.<\/li>\n<\/ul>\n<p>You can deny or later revoke permissions in iOS Settings. Some features will not work without the related permission.<\/p>\n\n<hr>\n\n<h2>16. Do Not Track \/ global privacy controls<\/h2>\n\n<p>Mobile apps do not uniformly support browser \u201cDo Not Track\u201d signals. We respond to applicable platform privacy signals and legal opt-out mechanisms as described above.<\/p>\n\n<hr>\n\n<h2>17. Third-party links and SDKs<\/h2>\n\n<p>The Service may contain links to third-party sites or embed third-party SDKs (Apple, Google, cloud providers). Their privacy practices are governed by their own policies. We encourage you to review them.<\/p>\n\n<hr>\n\n<h2>18. Changes to this Policy<\/h2>\n\n<p>We may update this Privacy Policy from time to time. We will post the updated version with a new \u201cLast updated\u201d date at our privacy URL and\/or provide in-app notice for material changes. Continued use after the effective date constitutes acknowledgment of the updated Policy, except where additional consent is required by law.<\/p>\n\n<hr>\n\n<h2>19. Contact<\/h2>\n\n<p>For privacy questions, requests, or complaints:<\/p>\n<p>\n<strong>CRONCODE LLC<\/strong><br>\n1209 Mountain Road Pl NE, Ste N<br>\nAlbuquerque, NM 87110, USA<br>\nEmail: <a href=\"mailto:hello@croncodestudio.com\">hello@croncodestudio.com<\/a><br>\nPhone: <a href=\"tel:+15054604765\">+1 (505) 460-4765<\/a><br>\nPrivacy URL: <a href=\"https:\/\/croncode.com\/privacy\">https:\/\/croncode.com\/privacy<\/a>\n<\/p>\n\n<p><em>This Privacy Policy is provided for transparency and compliance support. It is not legal advice. You should have counsel review jurisdiction-specific requirements before launch in new markets.<\/em><\/p>\n<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Privacy Policy \u2014 Heyya Effective date: August 12, 2026 Last updated: August 12, 2026 Controller \/ Operator: CRONCODE LLC (\u201cCroncode\u201d, \u201cwe\u201d, \u201cus\u201d, or \u201cour\u201d) App: Heyya (iOS mobile application) and related websites, APIs, and services (collectively, the \u201cService\u201d) Contact Email: hello@croncodestudio.com Phone: +1 (505) 460-4765 Head Office (USA): CRONCODE LLC, 1209 Mountain Road Pl NE,&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-988237","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/croncodestudio.com\/en\/wp-json\/wp\/v2\/pages\/988237","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/croncodestudio.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/croncodestudio.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/croncodestudio.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/croncodestudio.com\/en\/wp-json\/wp\/v2\/comments?post=988237"}],"version-history":[{"count":4,"href":"https:\/\/croncodestudio.com\/en\/wp-json\/wp\/v2\/pages\/988237\/revisions"}],"predecessor-version":[{"id":988242,"href":"https:\/\/croncodestudio.com\/en\/wp-json\/wp\/v2\/pages\/988237\/revisions\/988242"}],"wp:attachment":[{"href":"https:\/\/croncodestudio.com\/en\/wp-json\/wp\/v2\/media?parent=988237"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}