1. Information we process
- Account information, including your account identifier, optional profile name, age confirmation, language, time zone and notification preferences. A guest account does not require an email address.
- The characters, profile details, messages, saved memories, relationship choices, reports and images you choose to create or send.
- Subscription status and purchase identifiers supplied by Apple, Google and RevenueCat. We do not receive your full payment-card details.
- Device and app version, push token, IP address, request identifiers, crash and diagnostic information needed to operate and troubleshoot the service. Analytics may derive an approximate region from your IP address.
- Support messages and replies you send to us, which may include an email address or other details you choose to share.
2. How we use information
- Provide accounts, character creation, conversations, photo messages, memories and relationship features.
- Generate replies, deliver user-enabled proactive messages and respect quiet hours and notification settings.
- Apply the daily free-message allowance, verify Premium access and restore purchases.
- Keep the service reliable, prevent misuse, investigate reports and meet legal obligations.
- Respond to support, export and deletion requests.
3. Service providers and transfers
We do not sell personal information. We disclose information only as needed to run OshiMuse, comply with law, protect people or complete a business transaction. Providers may process data outside your country under their own security and contractual safeguards.
- Google Cloud Run for application hosting, and Firebase for authentication, notifications, analytics and diagnostics.
- MongoDB Atlas for account, character and conversation records.
- Cloudflare for website delivery and image storage in R2. Character and story images are served through public static URLs; anyone with a file URL can view that image.
- RevenueCat, Apple and Google for subscription processing and entitlement status.
- Model and moderation providers for the text or image content needed to generate and operate a conversation.
4. Retention and deletion
We retain account data while your account is active and for only as long as reasonably needed for the purposes above. Diagnostic and transaction records may be retained for fraud prevention, accounting, dispute resolution or legal compliance. Operational backups are not used to restore deleted accounts.
In the You tab, open Settings → Privacy → Privacy & data to export your account data. To delete your account, open Settings → Delete account from the You tab. Deletion removes access immediately and schedules associated conversation and image data for deletion, except records we must retain by law. See the Data deletion page for another request method.
5. Your choices and rights
- Update profile, language, time zone, proactive-message and notification settings in the app.
- Turn off push notifications in OshiMuse or your device settings.
- Export your account data or delete your account in the app.
- Depending on your location, request access, correction, deletion, restriction, portability or objection by contacting us.
6. Security and age requirement
We use reasonable technical and organizational measures, including authenticated API access and unlisted media URLs. Media files are delivered through public static URLs, so anyone who receives a file URL may access it. No internet service can guarantee absolute security.
OshiMuse is intended only for adults aged 18 or older. We do not knowingly provide the service to or collect personal information from children. Contact us if you believe a minor has created an account.
7. Changes and contact
We may update this policy as OshiMuse changes. We will post the revised date here and provide additional notice when required. Questions or privacy requests can be sent to support@secondwindltd.xyz.