Privacy Policy

Effective Date: April 5, 2026

Gajami ("we," "us," or "our") operates the Komachi mobile application ("App"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our App.

1. Information We Collect

Account Information

• Email address
• Password (stored only as a cryptographic hash; we never store or have access to your plaintext password)
• Nickname
• Age and gender (optional)
• Bio and profile image (optional)

Preference Data

• Preferred age range for character matching
• Preferred gender
• Preferred languages
• Location (optional)

Usage Data

• Swipe actions (like, pass, superlike)
• Match records and affinity scores

Chat Data

• Messages exchanged between you and AI characters
• Message read status and timestamps

Subscription and Purchase Data

• Subscription plan and status
• Transaction identifiers and purchase history

Device and Technical Data

• Device advertising identifiers (collected by third-party ad SDKs for free-tier users)
• General usage patterns and crash reports

2. How We Use Your Information

• Provide the service: Match you with AI characters based on your preferences, display profiles, and enable chat functionality.
• Generate AI responses: Process your chat messages through third-party AI language models to generate character responses.
• Process payments: Manage subscriptions and in-app purchases through the Apple App Store and Google Play Store.
• Display advertisements: Show relevant ads to free-tier users via Google AdMob.
• Improve the service: Analyze usage patterns to enhance features and fix issues.
• Prevent fraud: Detect and prevent unauthorized access and abuse.

3. AI and Message Processing

All character profiles, images, and responses are generated by AI. No real person is behind any character on Komachi. AI-generated content may occasionally be inaccurate, inconsistent, or unexpected.

4. Third-Party Services

We work with the following third-party services that may receive or process your data:

• Firebase (Google): Cloud infrastructure for hosting our backend services and storing character images. Subject to Google's Privacy Policy.
• Google AdMob: Serves banner and rewarded advertisements to free-tier users. May collect device identifiers, ad interaction data, and usage patterns. Subject to Google's Advertising Policies.
• RevenueCat: Manages subscription and in-app purchase processing. Receives transaction data and subscriber identifiers. Subject to RevenueCat's Privacy Policy.
• OpenRouter: Routes chat messages to LLM providers for AI response generation. Receives message content for real-time processing. Subject to OpenRouter's Privacy Policy.
• Replicate: Used server-side for generating AI character images. No user personal data is sent to this service.

We do not sell your personal information to third parties.

5. Data Retention

• Account data: Retained while your account is active. Deleted upon account deletion request.
• Chat messages: Retained while the associated match exists. Deleted when the match is removed or your account is deleted.
• Swipe and match data: Retained while your account is active.
• Subscription and purchase records: Retained as required by applicable law for transaction record-keeping purposes.

You may request deletion of your account and associated data at any time through the App's profile settings or by contacting us.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Passwords are hashed using bcrypt before storage
• Authentication uses secure JSON Web Tokens (JWT)
• All data in transit is encrypted via HTTPS/TLS
• Access to backend systems is restricted to authorized personnel

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

7. Your Privacy Rights

For European Economic Area (EEA) Residents — GDPR

If you reside in the EEA, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate personal data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Data portability: Receive your data in a structured, commonly used format.
• Restrict processing: Request that we limit how we use your data.
• Object: Object to certain types of data processing.
• Withdraw consent: Withdraw previously given consent at any time.

For California Residents — CCPA

If you are a California resident, you have the following rights:

• Right to know: Learn what personal information is collected and how it is used.
• Right to delete: Request deletion of your personal information.
• Right to opt-out: Opt out of the sale of personal information. (We do not sell your data.)
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to correct: Request correction of inaccurate personal information.

To exercise any of these rights, please contact us at contact@gajami.app. We will respond within 30 days.

8. Children's Privacy

Komachi is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us at contact@gajami.app.

9. Tracking and Advertising

The App itself does not use browser cookies. However, third-party SDKs integrated into the App may use device advertising identifiers and similar technologies:

• Google AdMob may use your device's advertising identifier (IDFA on iOS, Advertising ID on Android) to serve personalized advertisements.
• On iOS, we request your permission via the App Tracking Transparency (ATT) framework before accessing your device's advertising identifier. You may decline this request.

Opting Out of Personalized Ads

• iOS: Go to Settings > Privacy & Security > Tracking, and disable tracking for Komachi.
• Android: Go to Settings > Google > Ads, and enable "Opt out of Ads Personalization."

10. International Data Transfers

Your data may be processed on servers located outside your country of residence, including in the United States (via Google Cloud / Firebase). Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or via email. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Email: contact@gajami.app