Privacy Policy

We collect information to provide, maintain, secure, and improve the Service. We collect it for the following purposes:

To create and manage your account: account and profile information such as username, nickname, avatar, gender, birthday, country, city, language, time zone, and your chosen login method. If you sign in through Apple, Google, WeChat, Facebook, Line, Kakao, or other providers, we receive identifiers and profile data (such as a unique subject identifier and, where available, your email) from those providers.

To deliver letters and messages: the letters, chat messages, replies, hints, images, audio, and other content you create, send, or receive, together with contact details such as phone numbers and email addresses — including any you provide in order to reach other people (whether or not they are registered users). Please provide other people’s contact details only where you are permitted to do so.

To process purchases and subscriptions: records of in-app purchases and subscriptions made through Apple, Google, or other payment channels, including transaction identifiers and related metadata. We do not collect your full payment-card number.

To keep the Service safe and support you: device and technical information such as device identifiers, push-notification tokens, IP address, operating system, app version, mobile-network and user-agent data, and diagnostic and crash logs, as well as usage information such as timestamps and feature usage.

Sensitive information: some of the above may be considered sensitive in your jurisdiction (for example, the content of your communications). We process it only for the purposes described here, only with a valid legal basis, and with the additional protections your local law requires. You can choose not to provide certain information, though some features may then be unavailable.

We only collect what is relevant and necessary for these purposes. We may also create de-identified or aggregated data that can no longer reasonably identify you and use it to analyze and improve the Service; we will not attempt to re-identify it except as permitted by law.

Where the GDPR or similar laws apply, we rely on the following legal bases:

Performance of a contract: to provide the Service you request, manage your account, deliver your messages, and process your purchases.

Your consent: for certain processing, such as sending relevant content to AI providers when you use AI-assisted features, optional features, and certain cookies or analytics. You can withdraw consent at any time, without affecting processing already carried out.

Our legitimate interests: to secure the Service, prevent fraud and abuse, understand how the Service is used, and develop and improve our features — balanced against your rights and freedoms.

Legal obligation: to comply with laws applicable to us, such as tax, accounting, and responding to lawful requests.

Vital or public interests: in rare cases, to protect someone’s life or safety, or as otherwise permitted by law.

We and our service providers use cookies, software development kits (SDKs), device identifiers, and similar technologies to operate the Service, keep you signed in, remember your preferences, analyze usage, and improve performance and security. Where required by law, we ask for your consent before using non-essential technologies. You can manage or limit many of these through your device or browser settings, though some features may then not work properly.

The Service includes AI-assisted features that analyze conversation content to generate suggestions, drafts, and other outputs. When you choose to use them, you authorize us to transmit the relevant content — including messages exchanged within a conversation — to third-party AI providers acting as our processors, so they can generate outputs for you.

AI-generated outputs may be inaccurate, incomplete, or unsuitable, are provided "as is", and should not be relied upon as professional advice. Please review outputs before relying on or sending them. We keep limited records of AI generations for security, billing, quality assurance, and to improve the feature.

When you start an AI-assisted feature on a conversation, please make sure you have the necessary rights and permissions for that content to be processed, including with respect to anyone else in the conversation.

We do not sell your personal information. We share it only as follows:

Service providers (processors): vendors who process information on our behalf and under our instructions — such as cloud hosting, data storage, analytics, crash reporting, messaging and SMS delivery, payment verification, and AI processing — bound by contract to protect it and use it only for the purposes we specify.

Other users: content you send (such as letters and messages) is shared with the intended recipients, and certain profile information may be visible to users you interact with.

Legal and safety: where reasonably necessary to comply with law, regulation, legal process, or a valid governmental request, or to protect the rights, property, safety, or security of the Service, our users, or the public, or to detect and prevent fraud or security issues.

Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case we will require the recipient to honor this Policy.

With your consent or at your direction: for any other purpose we describe when we collect the information.

We operate globally, and your information may be stored and processed in countries other than your own, including at our operations connected with Hong Kong SAR and at our service providers. Some of these countries may have different data-protection laws than yours.

When we transfer personal data from the EEA, the UK, or Switzerland to a country without an adequacy decision, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (with the UK Addendum where relevant), and take additional measures where needed. You may contact us for more information about these safeguards.

Some countries impose additional requirements. Where your local law requires your separate or explicit consent for a cross-border transfer, or requires us to give you specific details about it, we will obtain that consent and provide those details before transferring your information.

We keep your information only for as long as necessary for the purposes described in this Policy, and then delete or anonymize it. To decide how long, we consider the amount, nature, and sensitivity of the information, the purposes for which we process it, whether we can achieve those purposes by other means, and applicable legal, accounting, tax, dispute-resolution, and security requirements.

In general, we keep account information while your account is active and for a reasonable period afterward; backup copies are purged on a rolling schedule. We may keep de-identified or aggregated information for longer, as it can no longer identify you.

We use reasonable technical and organizational measures — such as encryption in transit, access controls, and need-to-know access — designed to protect your information against unauthorized access, disclosure, alteration, or destruction.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please help protect your account by keeping your credentials confidential. If a personal-data breach affecting you occurs, we will take remedial steps and notify you and the relevant authorities where required by law.

Subject to your local law, you can exercise the following rights, free of charge in most cases:

Access and portability: obtain a copy of the personal information we hold about you, and where applicable receive it in a portable format.

Correction: correct inaccurate or incomplete information — you can edit much of it directly in the app.

Deletion: delete content you created and ask us to delete your personal information.

Restriction and objection: ask us to restrict certain processing, or object to processing based on our legitimate interests, and object to direct marketing at any time.

Withdraw consent: where we rely on consent, withdraw it at any time (for example, by changing device permissions such as notifications, contacts, or microphone).

Automated decisions: we do not use your personal information to make decisions producing legal or similarly significant effects about you based solely on automated processing.

To exercise any right, use the in-app controls or email us at privacy@kairtick.com. We may need to verify your identity, and may decline requests where the law permits (for example, if a request is unfounded, excessive, or would harm others’ rights). We will respond within the time your law requires. You also have the right to lodge a complaint with your local data-protection authority.

EEA, UK, and Switzerland: the controller is Pipaguo Tech. Our legal bases are described in Section 2, and our transfer safeguards in Section 6. In addition to the rights in Section 9, you may lodge a complaint with your supervisory authority.

California (CCPA/CPRA): we collect the categories of personal information described in Section 1 for the business purposes described in this Policy. We do not "sell" or "share" (for cross-context behavioral advertising) your personal information as those terms are defined by the CCPA. You have the right to know, access, correct, and delete your personal information, to limit the use of sensitive personal information, and not to be discriminated against for exercising your rights. You may use an authorized agent to submit requests.

Other U.S. states (such as Virginia, Colorado, Connecticut, and Utah): you have similar rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of targeted advertising and sale, where applicable. You may appeal a decision on your request by contacting us.

Singapore (PDPA): you may withdraw consent and request access to and correction of your personal data. You can reach our data-protection contact at privacy@kairtick.com, and we will notify you and the authority of a data breach where required by law.

Middle East (including GCC countries such as Saudi Arabia and the United Arab Emirates): under applicable laws such as the Saudi and UAE Personal Data Protection Laws, you have rights of access, correction, and deletion, and we process, transfer, and obtain consent for your information as those laws require.

Canada, Brazil, and Hong Kong: you have the rights granted by your local law, including under PIPEDA, the LGPD, and the Personal Data (Privacy) Ordinance. Contact us to exercise them.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. In regions where a higher minimum age applies to consent for online services (for example, up to 16 in parts of the EEA), you must meet that age or have the consent of your parent or legal guardian. If you believe a child has provided us with personal information without appropriate consent, please contact us and we will take reasonable steps to delete it.

The Service may rely on or link to third-party services, including login, payment, messaging, and analytics providers. Their handling of your information is governed by their own privacy policies, which we encourage you to review. We are not responsible for their practices.

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide more prominent notice within the Service or by other means. Where required by law, we will seek your consent. We encourage you to review this Policy periodically.