Privacy Policy

Updated as of March 2026

Introduction

This Privacy Policy describes how Limeros ("Company," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use the Kuriimu platform, website at kuriimu.com("Website"), mobile application ("App"), and related services (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. This Privacy Policy is incorporated into and subject to our Terms of Service.

Information We Collect

Personal Information

When you create an Account, we collect your email address and display name. If you sign in via Google or Apple authentication providers, we receive your name and email address from the respective provider. We refer to this and similar identifying information collectively as "Personal Information."

Usage Data

We collect information about how you use the Services, including:

• Chat interactions and conversation history with AI characters
• Voice session metadata (duration, message count, session timestamps)
• Character preferences, settings, and customization choices
• Virtual currency transaction history
• Feature usage patterns and interaction logs

Device & Technical Information

We may collect device type, operating system, browser type, IP address, and general geographic location for security, analytics, and service improvement purposes.

Payment Information

Payment processing is handled by Third-Party Payment Processors, including Apple App Store, Google Play Store, and Stripe, Inc. We do not directly store your credit card numbers or bank account details on our servers. You agree that you have read and accepted the privacy policies and terms of service of the applicable Third-Party Payment Processors.

Bluetooth Device Data

If you connect a Bluetooth haptic device, the connection is handled locally on your device (via Web Bluetooth API or the Kuriimu Connect companion app). We do not collect, transmit, or store Bluetooth device identifiers, device usage patterns, or haptic interaction data on our servers.

How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Services
• Personalize your AI companion experience and maintain conversation continuity
• Process transactions, manage subscriptions, and administer virtual currency
• Communicate with you about service updates, security alerts, and support
• Detect, investigate, and prevent fraud, abuse, or unauthorized access
• Comply with legal obligations and enforce our Terms of Service
• Generate aggregated, anonymized analytics to improve the Services

AI Conversations & Chat Data

Your chat messages are stored to maintain conversation history and provide continuity in your AI companion experience. Voice session audio is processed in real-time for speech-to-text conversion by third-party providers and is not permanently stored on our servers.

We do not use your personal conversations to train AI models shared with other users. Your intimate interactions remain private to your Account.

Data Sharing & Third-Party Services

We do not sell your Personal Information. We may share data with the following categories of third-party service providers solely as necessary to provide the Services:

• Hosting & Infrastructure — Supabase (database and authentication), Vercel (website hosting)
• AI Processing — Google (Gemini AI model) via API for generating character responses
• Voice Synthesis — Fish Audio for text-to-speech voice generation
• Payment Processing — Apple, Google, and/or Stripe for transaction processing
• Analytics — aggregated, anonymized usage data for service improvement

We may also disclose your information when required by law, legal process, or governmental request, or to protect the rights, property, or safety of the Company, our users, or others.

Data Retention

We retain your Account data and chat history for as long as your Account is active. You may request deletion of your Account and associated data at any time by contacting us at the email address below. Upon receiving a valid deletion request, we will remove your Personal Information within thirty (30) days, except where retention is required by law or for legitimate business purposes (such as fraud prevention or dispute resolution).

The Company may retain anonymized, aggregated data derived from your usage for internal analytics purposes, but such data will not be personally identifiable.

Data Security

We implement industry-standard security measures, including encryption in transit (TLS/SSL), access controls, secure authentication, and regular security reviews. However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee absolute security.

We will notify you and relevant authorities if we become aware that your Personal Information has been compromised, in accordance with applicable data breach notification laws.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your Personal Information:

• Access — Request a copy of the Personal Information we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Deletion — Request deletion of your Personal Information
• Restriction — Object to or restrict certain processing of your data
• Portability — Request a portable copy of your data
• Withdrawal of Consent — Withdraw consent for data processing where applicable

To exercise any of these rights, please contact us at contact@kuriimu.com. We will respond to your request within a commercially reasonable timeframe, and in any event within the time required by applicable law.

Cookies & Tracking

We use essential cookies for authentication and session management. We may use analytics tools to understand usage patterns and improve the Services. You can control cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Services.

Children's Privacy

The Services are intended for users aged 18 and older. We do not knowingly collect Personal Information from anyone under 18. If we learn that we have collected data from a minor, we will promptly delete it and terminate the associated Account. If you believe a minor has provided us with Personal Information, please contact us immediately.

International Data Transfers

Your data may be processed in countries other than your own, including countries where our third-party service providers operate. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws. By using the Services, you consent to the transfer of your information to these countries.

Third-Party Links

The Services may contain links to third-party websites or services. The Company has no control over, and assumes no responsibility for, the content, privacy policies, or practices of any third-party websites. We encourage you to review the privacy policies of any third-party services you access.

Changes to This Policy

The Company reserves the right to update this Privacy Policy at any time. We will post the updated policy on this page and endeavor to notify you of material changes by email or through the Services. Your continued use of the Services after any changes constitutes your acceptance of the updated Privacy Policy.

Disputes

You are solely responsible for resolving disputes regarding ownership of or access to your data. The Company has no obligation to resolve or intervene in such disputes. For privacy-related complaints, please contact us first to attempt informal resolution.

Contact

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Limeros
Email: contact@kuriimu.com