Announced: 2026-11-06 · Effective: 2026-11-19 (previous revision: 2025-09-08)
Hey Ai Co., Ltd. (the “Company”) protects your personal data under the Personal Information Protection Act of the Republic of Korea and other applicable laws. This Policy explains what we process, why, for how long, and with whom. It applies to The Hey Ai (mobile app), The Hey Ai PC (PC app) and the servers and web pages connected to them.
a. Account (at sign-up and sign-in)
Email, name or nickname, sign-in method (email, Google, Naver, Kakao), user identifier, profile photo (when provided by a social sign-in)
Mobile app: phone number (if you enter it)
b. Service content (entered by you or generated while you use the Service)
Text conversations and the text transcribed from your voice commands
Voice: voice commands are processed to convert them to text; the original recordings are not stored.
Images: photos you upload (mobile) are deleted after analysis and kept only if you turn on the save feature.
PC app “My Space”: notes, calendar entries and categories you write — stored in your Account.
c. PC-control information in the PC app (only when you turn the feature on)
Running programs and window titles, the list of installed programs: used only on your PC to carry out commands; not sent to our servers.
Screen images (“See the screen”): sent for AI processing only while a command that you asked to be handled by looking at the screen is being carried out; not stored after processing.
PC notifications (“Read notifications”): kept only on your PC for up to 30 days; not stored on our servers.
Voice signature (“Register my voice”): only numeric features used to tell your voice apart are stored, on your PC; no recording is made and nothing is sent to our servers.
PC identifier: an irreversible (hashed) form of your PC’s unique number and the PC name, used to count the PCs allowed by your plan.
d. Payment information
Mobile app: Google Play subscription and purchase records (purchase tokens and the like). Card details are handled by Google and never reach the Company.
PC app: the payer’s name and mobile phone number (passed to the payment provider when recurring billing is set up), payment identifiers issued by the payment provider (billing key, payment number), plan, amount, currency and time of payment. Card numbers, bank account numbers and other payment-instrument details are handled by the payment provider and financial institutions and are not stored by the Company.
e. Device and usage records (collected automatically)
App version, operating system version, language setting, error and crash records, time of access, diagnostic logs you save and send to us yourself
Website visit records: pages visited, time of visit, traffic source, country, browser and device type (collected through Google Analytics; see section 8)
Location: only for certain mobile-app features (maps and the like) and only if you grant the permission
Identifying members, sign-in, account management, handling your requests
Providing the Service: voice and text conversation, carrying out PC commands, translation, notes and calendar
Billing for Paid Services, setting up recurring billing, checking subscription status, refunds, tax records
Managing plan limits (Credits, number of PCs)
Error analysis, stability improvement, prevention of abuse, customer support
Analysing website visits and improving the website
Compliance with legal obligations
We do not use personal data for advertising and do not sell it.
Use for improving the Service
The Company may use pseudonymised and aggregated usage information that cannot identify you (how often features are used, command-recognition success rates, error types and the like) to measure quality and improve features.
Your actual input (conversations, transcribed voice, images) is used to improve the AI’s recognition and responses only if you have separately agreed by turning on “Help improve the app” in Settings (default: off). Even then, names, contact details, payment information and account identifiers are separated from the input, data of users under 14 and sensitive data are not used, and the data is kept for at most 2 years from collection. You can turn it off at any time; collection stops from then on and already-collected data is deleted on request without delay. This data is never sold or used for advertising. Where the GDPR or UK GDPR applies, this processing rests on your consent (Art. 6(1)(a)), which you may withdraw at any time.
Account information — Until you delete your Account (then deleted without delay)
Conversations, notes, calendar — Until you delete them or your Account
Original voice — Not stored (discarded right after real-time processing)
Screen images — Not stored (discarded right after the command is handled)
PC notifications — Only on your PC, up to 30 days
PC identifier and PC name — Until the PC is released or the Account deleted
Payment and refund records (including the payer’s name and mobile phone number) — 5 years (Korean Act on Consumer Protection in Electronic Commerce)
Consumer complaint and dispute records — 3 years (same Act)
Access records — 3 months (Korean Protection of Communications Secrets Act)
Error and crash records — Up to 1 year from collection
Website visit records — As set in Google Analytics data retention (up to 14 months)
The Company entrusts processing to the following providers, some of which operate servers abroad.
Google LLC (Firebase, Google Analytics) — Entrusted work: Sign-in authentication, data storage, error analysis, website analytics / Data transferred: Account information, conversations and notes, error records, website visit records / Country: United States / Retention: Until the contract ends or you request deletion / Contact: https://support.google.com/policies/contact/general_privacy_form
OpenAI, L.L.C. — Entrusted work: Generating AI responses, speech-to-text, image analysis / Data transferred: Conversation content, voice (for transcription), screen images (for “See the screen” commands) / Country: United States / Retention: Discarded right after processing (not used for training) / Contact: privacy@openai.com
Google Play (Google LLC) — Entrusted work: Mobile-app billing / Data transferred: Purchase records / Country: United States / Retention: Per Google’s policy / Contact: https://support.google.com/policies/contact/general_privacy_form
PortOne Korea Corp. and KG Inicis — Entrusted work: PC-app payments, recurring billing, refunds / Data transferred: Payer’s name, mobile phone number, payment identifiers, amount, user identifier, email / Country: Republic of Korea / Retention: As required by law
Time of transfer: whenever you use the relevant feature.
Method of transfer: encrypted transmission while you use the Service. If you do not wish your data to be transferred abroad, the related features (AI responses, social sign-in and others) may be unavailable; you may object by writing to theheyai@heyaicoltd.com.
The Company does not provide personal data to third parties except with your consent or where the law requires it.
You may at any time access, correct or delete your personal data or ask us to stop processing it, through the account settings in the Service or by writing to theheyai@heyaicoltd.com. We act on requests within 10 days.
You can delete your Account in the app settings or by email. Deletion is permanent; records that the law requires us to keep are stored separately for the required period only.
Personal data of children under 14 is processed only with the consent of a legal guardian, who may exercise the child’s rights.
Residents of the EEA, the United Kingdom and other jurisdictions with data-protection laws have the rights those laws grant, including the right to lodge a complaint with a supervisory authority.
The Company applies the safeguards required by law, including encryption in transit, least-privilege access, access logging, not storing payment-instrument details, and training of the staff who handle personal data.
The apps do not use advertising identifiers or tracking cookies. Only the information needed to keep you signed in and to save your settings is stored on your device.
Our website uses Google Analytics to understand visits (number of visits, traffic sources, visitor countries and the like), which may store cookies on your device. This information is not used for advertising. You can refuse cookies in your browser settings; the website remains fully usable if you do.
Name: Yongjoon Park (CEO)
Email: theheyai@heyaicoltd.com
Phone: +82-1522-9293
In the Republic of Korea you may also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).
Changes are announced on this page and in the Service at least 7 days before they take effect (30 days for important changes).
Business Information
Company: Hey Ai Co., Ltd. (주식회사 해이에이아이)
Representative: Yongjoon Park
Business registration number: 157-88-03558
Address: Rm 402-L638, 4/F, 13 Saimdang-ro 8-gil, Seocho-gu, Seoul, 06640, Republic of Korea
Phone: +82-1522-9293 · Email: theheyai@heyaicoltd.com · Website: https://www.heyaicoltd.com
Previous Privacy Policy (in effect 2025-09-08 to 2026-11-18)
Privacy Policy — The Hey AI – Your AI Companion
Last updated: 2025-09-08
1) Information We Collect
Account information: name, email address, phone number, Firebase user ID.
Content you provide: text chats, and images you upload (e.g., camera translation & Q/A). Voice input is sent to an STT (speech-to-text) service for recognition; we do not store raw audio, only the transcript.
Purchases: Google Play purchase / subscription information (e.g., purchase token) to verify and restore entitlements.
App logs: crash logs, diagnostics / performance data, device or app-instance IDs.
Location: precise location may be collected only when you use WebView / third-party map features. It is not required for the core app features.
Contacts / Installed apps: accessed on-device to place calls or open an app you choose; not uploaded to our server.
2) How We Use Information
To provide and improve core features (voice & camera translation, Q/A), manage accounts and logins, verify / restore subscriptions and purchases, and respond to user requests.
To maintain safety, troubleshoot issues, and analyze crashes / performance.
No advertising or marketing use. We do not use your data for targeted ads.
3) Data Retention
Account and purchase records: for the life of your account or as required by law.
Text chats & images: kept until you delete them or delete your account. For images, originals are typically processed and not retained, unless you explicitly save them.
Voice audio: processed in real time for STT and then discarded; transcripts may be stored.
Crash / diagnostics: retained only as long as needed to operate the service.
4) Sharing & Processing by Third Parties
We rely on service providers such as Google Play Billing and Firebase (e.g., Authentication, Crashlytics, Performance) and cloud providers for STT / vision processing. They process data on our behalf and are not permitted to use it for their own marketing.
We do not sell your personal data and we do not share it for advertising or cross-app tracking.
5) Security
We use transport encryption (HTTPS), access controls, and reasonable safeguards to protect your data.
6) Your Rights & Data Deletion
You may request access, correction, or deletion of your account and data.
Submit a request here: https://forms.gle/RD279VQPSsDWGR2j9(If you submit from a different email than the login email, we may verify ownership.)
7) Contact
Email: theheyai@heyaicoltd.com (Korean support available)
8) Changes
We may update this policy. We will post changes here and revise the “Last updated” date above.