Privacy Policy
Flagsay Waifu separates account, companion data and model inference so you can see what syncs and what stays local. This policy explains what personal data we collect, how we use and protect it, and the rights you can exercise.
01Who we are and what this policy covers
In this policy, "we" means SK Studio (the "Operator"), which is the data controller for the service.
This policy applies to the Flagsay Waifu website, desktop client, mobile clients and related services (together, the "Service").
If you have any question about how we process personal data, contact us at support@flagsaywaifu.com.
02Personal data we collect
Account data: the email address you register or sign in with, a cryptographic hash of your password, and profile details such as your display name.
Registration and sign-in security records: the time and outcome of registration and sign-in, your IP address, and the approximate country/region, city, network provider and client information derived from a local IP database. That location is not your real-time device location; we do not read GPS and do not send your IP to third-party lookup services.
Usage data: your conversations with characters, long-term memory entries, character and relationship settings, model preferences you save, and your cloud-sync setting.
Device and diagnostic data: device model, operating system version, client version, interface language, network type, and operational logs and crash records used to diagnose faults.
Subscription and transaction data: when you subscribe through an app store, we receive the transaction status, subscription receipt and expiry date from Apple or Google. We never receive or store your card or payment account details.
Data collected after you grant permission: microphone audio (for voice conversation and voice input), photo library images (for avatars or shared images), and screen content (only while you actively start screen sharing).
03How we use this data
To provide and maintain the Service: create and manage accounts, store and sync your characters, conversations and memories, and generate replies.
Identity verification and security: verify sign-in identity, detect anomalous sign-ins, prevent fraud and abuse, and protect account security.
To deliver features: use the microphone, photo library and other capabilities you have authorized to provide voice and image features.
Customer support and improvement: answer your questions and requests, diagnose faults, and improve product quality and experience.
To meet legal obligations: comply with legally required security management and dispute handling, and respond to lawful requests from judicial or administrative authorities.
04Device permissions
Microphone: used for voice input and real-time voice conversation, active only during a conversation, never for continuous recording.
Photo library: used to select or save avatars and images, accessing only the items you choose.
Notifications: used for proactive companion messages and service notices; can be turned off in system settings.
Storage: used to keep companion data and cache on your device.
All of these permissions are optional. You can withdraw them at any time in your operating system or in-product settings; withdrawing a permission disables only the corresponding feature.
05Third-party SDKs and service providers
We use third-party services for sign-in, payment, model inference and reliable operation. We share only the information necessary for the relevant function and require processors to protect it in line with our agreements and applicable law.
Identity and accounts: Apple (Sign in with Apple), Google (Google Sign-In). Shared: sign-in identifier and email address.
Payment and subscriptions: Apple App Store, Google Play. Shared: order and subscription status. We do not receive your payment card details.
Model services: providers used for reply generation, speech synthesis and speech recognition. Shared: the conversation context or audio data necessary for that request.
Infrastructure: cloud hosting, object storage and database providers. Stored: the business data necessary to operate the Service.
The specific provider list and shared data categories change as features evolve. You may request the current version at support@flagsaywaifu.com.
06Where and how long we store data
Personal data generated by the Service is stored on servers located in the People's Republic of China. If cross-border transfer becomes necessary in future, we will follow the required legal procedures and update this policy.
We retain personal data only as long as necessary for the purposes described here. Specifically: security records are kept for 90 days; account, character, conversation and memory data are kept until you delete your account; transaction records are kept for the period required by law.
Data beyond its retention period, or data you have asked us to delete, is deleted or anonymized. Because of backups, complete erasure may take one backup cycle.
07Sharing, transfer and public disclosure
We do not sell your personal data.
We do not share your personal data with third parties except: with your separate consent; with processors where necessary to deliver the features described in this policy; or where required by law or by a lawful request from a judicial or administrative authority.
If a merger, acquisition or insolvency requires transferring personal data, we will inform you of the recipient's identity and contact details and require the recipient to remain bound by this policy.
08Your rights
You have the right to access and copy your personal data, correct and complete it, delete it, withdraw consent, delete your account, and obtain a portable copy to transfer to another controller you designate.
You can complete most of these actions directly in the product — reviewing and deleting memories, editing your profile, turning off cloud sync, deleting your account — or by contacting support@flagsaywaifu.com.
We respond within 15 working days after verifying your identity. If you are not satisfied, you may complain to a supervisory authority or bring a legal claim.
09Deleting your account
You can request deletion at any time in the client under Settings → Account → Delete account, or by emailing support@flagsaywaifu.com.
After deletion we remove or anonymize your account data, characters, conversations, long-term memories and cloud-sync data. This action cannot be undone, so please proceed carefully.
Information we must retain under law (such as transaction and security records) is kept for the statutory period and used only for compliance purposes.
10Protection of minors
The Service is not directed to minors and we do not knowingly collect their personal data. You may use the Service only if you meet the minimum age required by your jurisdiction and by the app store you downloaded it from.
If we learn that we collected a minor's personal data without verifiable guardian consent, we will delete it as soon as possible.
If you are a guardian and believe we hold a minor's personal data, contact support@flagsaywaifu.com.
11How we protect data
We protect personal data with encrypted transport, access controls, least-privilege rules and audit logging, and we restrict which personnel may access personal data.
Despite our efforts, no internet environment is perfectly secure. If a personal data breach occurs, we will notify you in accordance with law, describing the incident, its possible impact and the measures we have taken.
12Local storage and cookies
The website uses browser local storage only to remember your interface language and, in the admin console, your sign-in credential. It is not used for advertising or cross-site tracking.
You can remove this local data by clearing your browser data. You will then need to choose a language and sign in again.
13Changes to this policy
We may update this policy to reflect service or legal changes. When we do, we revise the effective date shown at the top of this page.
If a change materially affects your rights, we will highlight it prominently in the product. Continuing to use the Service means you accept the updated policy.
14Contact us
For questions, requests or complaints about personal data protection, email support@flagsaywaifu.com and we will respond as soon as possible.
If you believe our processing has harmed your lawful rights, you may complain to a competent supervisory authority or bring a claim before a competent court.