← Back to Home

Privacy Policy

Last updated: March 28, 2026

Yumekai ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the Yumekai platform ("the Platform").

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address, display name, and authentication credentials (via OAuth providers such as Google or Discord). We do not store your OAuth provider passwords.

1.2 Conversation Data

We store your conversations with AI characters to provide memory and continuity features. This includes message content, timestamps, and associated character/session metadata.

1.3 User-Created Content

If you create custom characters, we store the character details you provide (name, description, personality, backstory) and any AI-generated portraits associated with them.

1.4 Usage Data

We automatically collect technical information including IP address, browser type, device information, pages visited, and interaction patterns. This data helps us improve the Platform and diagnose technical issues.

1.5 Payment Information

Payment processing is handled by Stripe. We do not store your full credit card number. We receive and store transaction identifiers, subscription status, and billing history from Stripe.

2. How We Use Your Information

We use your information to:

  • Provide and maintain the Platform's features, including AI character conversations and memory
  • Process payments and manage subscriptions
  • Improve the Platform through analytics and usage patterns
  • Communicate with you about service updates, changes, or issues
  • Enforce our Terms & Conditions and protect against misuse
  • Comply with legal obligations

3. Third-Party Services

We share limited data with the following third-party services:

  • AI providers (e.g., OpenAI) — receive conversation context to generate character responses. Conversations are sent via API and are subject to the provider's data policies.
  • Stripe — processes payment information for subscriptions and purchases.
  • OAuth providers (Google, Discord) — handle authentication. We receive only the information you authorize.
  • Image generation services (Replicate) — receive character descriptions to generate AI portraits.
  • CDN & Security (Cloudflare) — provides content delivery, DDoS protection, and captcha verification (Turnstile).

We do not sell your personal information to third parties.

4. Data Storage & Security

Your data is stored on secure servers with encryption at rest and in transit. We implement industry-standard security measures including access controls, regular security audits, and encrypted backups. Despite our efforts, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

4.1 Data Retention

We retain your data for as long as your account is active. You may delete your conversation history at any time. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

5. Your Rights

5.1 All Users

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Delete your account and associated data
  • Export your conversation data
  • Opt out of non-essential communications

5.2 EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability, the right to restrict processing, and the right to object to processing. Our legal basis for processing your data includes contractual necessity, legitimate interest, and consent. To exercise your GDPR rights, contact us at hello@yumekai.gg.

5.3 California Residents (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at hello@yumekai.gg.

5.4 Japanese Residents (APPI)

If you are located in Japan, you have rights under the Act on the Protection of Personal Information (APPI), including the right to request disclosure, correction, or deletion of your personal information. We comply with APPI requirements for the handling of personal data of Japanese residents. To exercise your rights, contact us at hello@yumekai.gg.

6. Cookies & Tracking

We use essential cookies to maintain your session and preferences. We may use analytics cookies to understand usage patterns. You can control cookie preferences through your browser settings.

7. Children's Privacy

Yumekai is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected data from a child under 13, we will delete it promptly.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last updated" date. Your continued use of the Platform after changes constitutes acceptance of the revised policy.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at hello@yumekai.gg.