Effective Date: August 5, 2026
Last Updated: August 5, 2026
EUROPEAN UNION (EU) RESIDENTS NOTICE: If you are a resident of the European Union, the European Economic Area (EEA), or the United Kingdom, specific statutory rights and disclosures under the General Data Protection Regulation (GDPR) apply to your processing. Please see Section 9 for your dedicated provisions.
CALIFORNIA NOTICE AT COLLECTION: If you are a California resident, you have a right to receive notice of our practices, including how we collect, use, share, sell/share, and retain personal information. You can find those details in Section 10 ("State-Specific US Resident Rights").
Welcome to Himly World. This Privacy Policy ("Policy") describes the ways Himly World ("we," "us," or "our") collects, stores, uses, and manages the information, including personal data, that you provide or we and others collect in connection with our mobile applications, including the "Himly World App" (the "App"), our websites located at https://www.himlyworld.com(collectively, the "Sites"), or any related game, application, sales, marketing, or events (collectively, the "Service").
Please note that the scope of this Policy is limited to information collected or received by us through your use of the Service. We are not responsible for the actions of third-party people or companies, the content of their sites, or the use of information you provide to them.
We may update this Policy from time to time. You are responsible for periodically reading this Policy. We will post all changes on this page, and the modified policy will specify its revised effective date. If we make material changes to the Policy, we will provide a prominent notice within the App or obtain consent regarding such changes as may be required by law.
1.AI-Powered Features and Content Disclaimer
Himly World provides AI-powered interactive entertainment experiences through virtual characters. The characters you interact with are artificial intelligence systems and are not real persons.
The Service is designed solely for entertainment purposes. AI-generated responses are created automatically and may not always be accurate, appropriate, or reflect human opinions.Users should avoid sharing unnecessary sensitive personal information through AI conversations.
Himly World does not provide medical, psychological, mental health, professional counseling, or therapeutic services. Users should not rely on AI-generated responses as a substitute for professional advice or human relationships.
The Service is not intended to encourage emotional dependency or replace real-world relationships.
2. INFORMATION WE COLLECT
The information we collect depends on how you interact with us, the features you use, and the choices you make. We collect data from three primary vectors: information you provide directly, information collected automatically, and information from third-party sources.We collect personal information only from users who are eligible to use the Service in accordance with this Privacy Policy and our Terms of Service.
A. Information You Provide Directly
Contact & Account Data:Credentials including your email address, username, or alias, and encrypted passwords.
Role, Character & Model Configurations: User-defined parameters, role types, chat model adjustments, and customized character settings used to tailor your interactive experience.
AI Chat Content and Conversation Processing:The Service allows you to interact with AI-generated characters through conversations, prompts, and other user-provided content. We collect and process your chat content, conversation history, character preferences, and related interaction data to provide AI-generated responses, maintain conversation continuity, improve the reliability and performance of the Service, prevent abuse, and enhance the security of the Service.
You are responsible for ensuring that any content you submit through the Service, including personal information relating to another individual, is provided with all necessary rights, permissions, and consents required under applicable laws.
Your conversations with AI characters are processed through our systems and may be transmitted to authorized third-party artificial intelligence service providers, including large language model (LLM) providers or AI infrastructure providers, for the purpose of generating AI responses and providing AI-powered features. These providers process such information only on our behalf and are subject to appropriate contractual and security safeguards.
We do not use your private conversations to train publicly available AI models or for unrelated model training purposes unless we obtain your consent or provide additional notice as required by applicable laws.
You may delete your chat history through available functions within the App. When deletion is requested, we will delete or anonymize related personal information within a reasonable period, subject to technical limitations, backup requirements, security obligations, and applicable legal requirements.
Customer Support Communications: If you contact us directly via email or customer feedback dialogs, we collect and retain the contents of those communications and attachments.
B. Information We Collect Automatically
We collect information from users in compliance with applicable laws and age-gating requirements, and apply additional protections for minors.When you access or use the Service, we log specific device, performance, and usage data automatically:
lIdentifiers & Device Technical Information: Cookie identifiers, mobile advertising IDs (Apple's IDFA), vendor identifiers (IDFV), MAC address, hardware type, operating system (iOS) version, Internet Protocol (IP) address, browser type, system language, and mobile network configurations (including PLMN).
lGeolocation Data: We may collect approximate location information derived from your IP address for security, fraud prevention, and service optimization purposes.Precise location data is only collected if you explicitly grant permission through the iOS system settings. You may disable location access at any time.
lUsage Data: We automatically log your direct activities within the App, including in-app purchases (IAP) frequency, screens/characters viewed, session duration, navigation paths, feature interactions, and the referral URL that brought you to our Service.
C. Information We Create or Generate (Inferences)
We may analyze aggregated or de-identified usage data, such as interaction patterns and feature preferences, to operate, maintain, and improve the Service and user experience.
D. Information From Third Parties & Marketplaces
lPlatforms / Third-Party Marketplaces: When you download or purchase subscriptions through Apple’s App Store, Apple may share transaction tokens, regional data, or subscription status metrics with us. Apple may also collect diagnostics independently according to their own privacy frameworks.
lThird-Party Sign-Ons (SSO): If you sign into the Service using Google or Apple Connect, we collect information made available via their respective APIs, including your profile name, verified email, user ID, and profile picture URL.
lMarketing & Co-Branding Partners: We may receive acquisition data or campaign metrics from joint marketing partners with whom we offer cross-promotional rewards.
3. COOKIES & TRACKING TECHNOLOGIES
We utilize cookies, pixel tags, web beacons, mobile analytics tracking tools, and local storage (HTML5) to operate the Service, analyze usage trends, and manage our user acquisition.
lEssential Cookies: Necessary to preserve login status, security validations, and baseline app settings (e.g., UI language).
lAnalytical & Performance Tools: Track engagement metrics across single or multiple device sessions to troubleshoot bugs, monitor system stability, and evaluate feature performance.
lAdvertising Adjustments: Measure the effectiveness of our advertising campaigns displayed across external networks.
lControl Mechanisms: You may adjust or disable tracking technologies via your iOS browser or native privacy settings (e.g., "Allow Apps to Request to Track"), though doing so may degrade specific features of the App.
4. USE OF INFORMATION WE COLLECT
Our primary objective in collecting data is to provide, protect, and enhance your user experience. We combine data from all sources to achieve the following business and operational objectives:
lProduct & Service Delivery: Administering accounts, rendering real-time AI responses, personalizing narrative experiences.
lBusiness Operations: Managing internal accounting, executing billing validation via Apple Pay/IAP, detecting and preventing fraudulent installations, software piracy, or policy violations.
lProduct Improvement:We use your chat interactions solely to provide AI responses requested by you, improve the quality and reliability of the Service, detect abuse, and enhance safety systems. We do not use your private conversations to train third-party AI models or publicly available AI systems unless we obtain your consent or provide notice as required by applicable laws.
lCommunications & Support:Delivering in-game technical notices, security alerts, administrative alerts, and responding to customer support inquiries.
lPromotions & Third-Party Advertising: We may display advertising or promotional content through third-party advertising partners. These partners may use device-level identifiers to measure ad performance and deliver non-personalized or limited personalized content where permitted.We do not share sensitive personal data with advertising partners.We comply with Apple’s App Tracking Transparency (ATT) framework where applicable, and user consent is required before any tracking occurs.
5. DISCLOSURE OF YOUR INFORMATION
We may share personal information in the following instances:
lService Providers & Vendors: We share data with third-party vendors who perform operational services on our behalf (e.g., cloud hosting, email delivery systems, billing management, and diagnostic monitoring tools).
lLegal, Safety, and Law Enforcement:We may release your personal information when we believe disclosure is appropriate to comply with statutory legal mandates, respond to court orders, enforce our legal agreements, or protect the rights, property, and safety of our company, our users, or the general public.
lCorporate Transactions: We may share or transfer your data, including personal data, in connection with or during negotiations of any merger, sale of corporate assets, financing,divestiture, bankruptcy, or acquisition of all or a portion of our business to another enterprise.
lAI Service Providers:We may share information with authorized AI service providers, including large language model providers and AI infrastructure providers, solely to provide AI-generated responses and AI-powered features.
6. THIRD-PARTY SERVICES, SDKs AND AI TECHNOLOGIES
A.To enhance core systems, our iOS App integrates third-party Software Development Kits (SDKs). These third parties may have persistent access to device identifiers and usage metrics strictly to perform operational services on our behalf.
lFirebase (Google)
a.Operational Purpose: Crash Diagnostics & Analytics
b.Data Category Collected: System crash logs, device model, OS version
c.Privacy Policy Reference: https://policies.google.com/privacy
lAppsFlyer / Adjust
a.Operational Purpose: Mobile Campaign Attribution
b.Data Category Collected: Installation sources, ad-click tracking, Device IDFA
c.Privacy Policy Reference: AppsFlyer Privacy Policy | AppsFlyer/https://www.adjust.com/terms/privacy-policy/
lApple APNs
a.Operational Purpose: Core Push Notification Delivery
b.Data Category Collected: Secure device tokens, notification state
c.Privacy Policy Reference: Legal - Privacy Policy - Apple
B.Artificial Intelligence Service Providers
Himly World uses third-party artificial intelligence technologies, including large language models (LLMs) and AI infrastructure services, to generate AI responses and provide AI-powered conversational features.
Depending on product requirements, performance, availability, security considerations, and the development of AI technologies, we may use different AI models, versions, configurations, or AI service providers from time to time.
The AI models used by the Service may include, depending on product requirements and technical configurations:
Google Gemini models — Used for generating AI responses and supporting conversational interactions.https://policies.google.com/privacy
DeepSeek models — Used for generating AI responses and supporting language processing capabilities.DeepSeek Privacy Policy
For more information about how these AI service providers process information, please refer to their respective privacy policies.
In order to provide AI functionality, user-provided content, including conversation inputs, prompts, and related interaction data, may be transmitted to and processed by these AI service providers. Such processing is performed solely for the purpose of generating AI responses and enabling related AI features.
As our AI systems evolve, we may implement AI orchestration systems that utilize multiple AI models with different capabilities, including lightweight or advanced models, to perform different processing tasks. The specific models used may vary depending on service requirements and performance considerations.
We may also provide users with options to select or interact with different AI models or AI-powered features in accordance with product functionality. Where applicable, we will provide appropriate disclosures regarding such processing.
Our AI service providers process information on our behalf and are subject to appropriate contractual, confidentiality, and security safeguards. We do not authorize these providers to use your personal information for their own independent advertising purposes or unrelated commercial purposes, or to train their AI models except as permitted under applicable agreements and disclosed to you.
7. DATA SECURITY & RETENTION
A. Technical Safeguards
We implement reasonable technical, organizational, and physical measures designed to protect your personal information against accidental loss, unauthorized access, disclosure, alteration, or destruction.
These measures include access controls, encryption technologies, security monitoring, and internal procedures designed to protect personal information processed through the Service, including information used to provide AI-powered features.
However, no method of transmission over the Internet or electronic storage method can be guaranteed to be completely secure. While we strive to use commercially reasonable measures to protect your information, we cannot guarantee absolute security.
We encourage you to use strong and unique passwords and avoid submitting unnecessary sensitive personal information through unsecured communication channels or AI chat interactions.
B. Retention Thresholds
We retain personal information only for as long as reasonably necessary to provide and maintain the Service, fulfill the purposes described in this Policy, comply with applicable legal and regulatory obligations, resolve disputes, enforce our agreements, and maintain security and fraud prevention measures.
The actual retention period may vary depending on the type of information, the purpose for which it was collected, the nature of the Service feature involved, and applicable legal requirements.
When personal information is no longer required for the purposes described above, we will delete or anonymize such information within a reasonable period, unless retention is required or permitted by applicable laws.
Certain information may be retained in limited circumstances, such as backup systems, security records, financial transaction records, or information necessary to establish, exercise, or defend legal claims.
Aggregated or anonymized information that cannot reasonably identify an individual may be retained for analytical, operational, or service improvement purposes.
8. CHILDREN’S PRIVACY
The Service is intended solely for adults who are at least eighteen (18) years of age.
We do not knowingly collect, use, or disclose personal information from individuals under the age of eighteen (18).
If we become aware that a person under eighteen (18) has created an account or provided personal information, we will take reasonable steps to suspend or terminate the account and delete the associated personal information, unless retention is required by applicable law.
If you believe that an individual under eighteen (18) has provided personal information to us, please contact us at [email protected].
9. EUROPEAN UNION (EU) / EEA RESIDENT RIGHTS
If you are located within the European Union, the European Economic Area, or the United Kingdom, you possess explicit statutory rights under the GDPR:
lLegal Basis for Processing: We process your personal data based on the following legal bases:
a.Contractual Necessity: We process information necessary to provide the Service you request, including processing conversation inputs and related interaction data to generate AI responses, maintain AI-powered features, and provide personalized interactive experiences.
b.Consent: Where required by applicable laws, we obtain your consent before processing certain types of personal data or enabling specific features, such as certain tracking technologies or optional functionalities.
c.Legitimate Interests: We process certain information based on our legitimate interests, including maintaining service security, preventing fraud and abuse, improving service reliability, and protecting the rights and safety of our users and our business.
lYour Core Rights: You have the right to request Access to, Rectification of, or Erasure of your personal data; the right to Restrict Processing or object to specific automated processing; and the right to Data Portability.
lInternational Data Transfers: Your information may be transferred to and maintained on servers located outside of your home country, including the United States, which may have different data protection standards. We utilize Standard Contractual Clauses (SCCs) or verified compliance frameworks to safeguard these cross-border transfers.
lSupervisory Authorities: You retain the legal right to lodge a formal complaint regarding our data handling methods with your local European Data Protection Authority.
10. STATE-SPECIFIC US RESIDENT RIGHTS (CALIFORNIA & VIRGINIA)
If you reside in California or Virginia and your personal data processing is governed by the California Consumer Privacy Act (CCPA/CPRA) or the Virginia Consumer Data Protection Act (VCDPA), you possess the following consumer protections:
lRight to Know & Access: Request comprehensive details regarding the categories, sources, commercial business purposes (including algorithmic model assessments), and third parties associated with your data collection over the preceding 12-month period.
lRight to Delete: Request full erasure of personal information collected directly from you, subject to specific legal exceptions (e.g., financial audit records or security debugging).
lRight to Correct: Request corrections to inaccurate personal records maintained within our active databases.
lOpt-Out of Profiling / Targeted Advertising: You have the right to opt-out of the processing of your data for targeted cross-context advertising or automated consumer profiling.
lExercising Consumer Rights: You may submit a validated request by emailing us at [email protected]. We will verify your identity using your secure account parameters within forty-five (45) days. You may also appoint an authorized agent to file requests on your behalf.
lNon-Discrimination Policy: We will never deny services, degrade App performance, or alter subscription pricing models as a consequence of you exercising your statutory privacy protections.
lShine the Light Law: California users may request an annual disclosure concerning personal data shared with third parties for direct marketing purposes. (We do not disclose data for these purposes).
lDo Not Sell or Share My Personal Information：We do not sell personal information for monetary consideration. We do not share personal information for cross-context behavioral advertising as defined under the California Consumer Privacy Act (CCPA/CPRA).We may use service providers and analytics partners solely to operate, secure, and improve the Service. These third parties are not permitted to use personal information for their own independent advertising or commercial purposes.
11. CONTACTING US
If you have any questions, comments, or formal requests regarding this Privacy Policy or our operational data handling methodologies, please contact us at: [email protected]