Development notice · launch conditions pending
Privacy Policy
This is a pre-launch draft. Processors, international transfers, retention periods and the effective date are not final.
Scope and operator
Hi Jisoo is operated by Gatepop (게이트팝) for adults aged 18 and over. Updated September 29, 2026. This is a development notice. The effective date, processing locations, retention periods and vendor transfer details must be finalized before launch. Contact admin@hijisoo.com.
On your device
Messages, chosen friend names, manual and extracted memories, friend notes, settings and pending requests are kept in an encrypted local database. Settings offers deletion of conversations and memories. Suppression records that prevent deleted memories from returning are removed by the full conversations-and-memories deletion action.
AI data transfer
To generate replies, your input, selected recent and past context, friend settings, names and relevant memories are sent through our gateway to the configured AI provider. Local encryption does not mean offline AI. Development connections support DeepSeek, OpenAI, Anthropic, Google Gemini, xAI and OpenRouter; OpenRouter forwards requests to a model provider. Locations, retention and training use depend on provider contracts and settings and are not finalized for launch. Avoid entering sensitive information.
Gateway
The development gateway temporarily processes conversation content in memory to deliver a reply. It records operational request status and usage rather than persistently storing conversation text. This does not mean providers retain no data.
Optional analytics
Google Analytics/Firebase analytics are enabled only with your permission. Approved screen and action names, device/app information and analytics identifiers may be processed. Conversation text, memories and chosen names are not sent in analytics events. You can withdraw permission in Settings or on the website. Hosting and security providers may process IP addresses and request metadata. No advertising SDK is added.
Support and reports
In-app reports store your account identifier, reason, comment, app version and only the reply you explicitly select for attachment. Entire conversations are not automatically attached. Authorized staff review reports and status changes are recorded. Email passes through Cloudflare Email Routing to the operator’s Google Gmail. Never include passwords, API keys or backup keys in messages. Retention periods and legal exceptions remain to be finalized.
Backups
You may export an encrypted backup to a location you choose. Keep its recovery key separately; the operator cannot recover it. Cloud storage providers have their own policies. Backups include conversations, memories and friend settings, but exclude balances, API keys, login and development connection tokens. Automatic cloud synchronization is not provided.
Accounts and deletion
When enabled, accounts use Supabase authentication. Consent version, star balances and request status are stored on the server. Request account deletion in the app or on our web deletion page after password verification. Access stops while deletion is pending. Local conversations, separately saved backups and email copies must be deleted separately. Withdraw AI-transfer or analytics permission in Settings. Store transaction identifiers are designed to remain without an account link to prevent duplicate credits; their retention periods and legal basis must be finalized before launch.
Before launch
We still need final retention schedules, responsible privacy contact, processor and international-transfer details, legal grounds and rights procedures, and transaction-retention exceptions. This notice is not a completed launch compliance review.