Privacy Policy

1. Data we collect

• Account details: your name, email address, and sign-in information, if you create an account. If you sign in with Google, Google shares your name, email address and profile picture with us; we don't receive your Google password.
• Your content: the messages you send, files you attach, pictures you create, and the answers you receive. With an account, these are saved to your account (files and pictures in private storage that only you can access) so they appear on all your devices. As a guest, they stay in your browser.
• Usage data: which models answered, how much you use the Service, mana used, response times, and your feedback (such as thumbs up or down, or choosing to regenerate an answer or try another model).
• Technical data: IP address, browser and device type, and similar information, used for security and to prevent abuse.
• Payment data: if you subscribe, your payment is handled by our reseller, Paddle (see the Terms). Paddle processes your payment details under its own privacy policy; we receive your plan, billing country and payment status, never your full card details.

2. How we use it, and why we may

We use your data only for these purposes, each on the legal basis shown:

• To provide the Service, including sending your messages to AI models, showing you their answers, and keeping your chats and settings (to perform our contract with you).
• To choose a suitable model for each message (“Auto”) and improve how it chooses, using usage data and feedback, not the text of your chats (our legitimate interest in a better service).
• To keep the Service secure: preventing abuse and bots, enforcing usage limits, and fixing errors (our legitimate interest, and yours, in a safe service).
• To understand which features are used, through analytics that never see what you write (our legitimate interest).
• To bill paid plans, provide support, and meet legal obligations, such as keeping billing records (contract and legal obligation).

Where the law requires your consent for something, we ask for it first, and you can withdraw it at any time. Auto's choice of model is automated, but it has no legal or similarly significant effect on you: it only decides which AI writes an answer.

We do not sell your personal data or share it for advertising, and we do not use your chats to train AI models. We may use aggregated statistics that don't identify anyone to improve the Service.

3. AI model providers

To answer a message, we send it, the recent conversation, and any attached content to the company that makes the AI model answering it (such as Anthropic, OpenAI or Google). When a message searches the web, a search based on it is also sent to a search provider. These providers process your content to generate answers under their own terms. We set up Himiko so that your messages are only sent to providers that don't use them to train their models. Some providers keep content for a limited time to monitor for abuse.

Please do not include sensitive personal data (such as government ID numbers, health details, or bank and card details) in your messages.

4. International transfers

We and our providers operate in several countries, so your data may be processed outside the country where you live, including in the United States and China. When we transfer personal data internationally, we take steps to make sure it stays protected to the standard the law requires, including through contractual terms with our providers (such as standard contractual clauses).

5. Other service providers

We use trusted providers to run the Service: hosting, databases and file storage, sign-in and email delivery, protection against automated sign-ups, error monitoring, product analytics, and payments. They may only use your data to provide their services to us.

Our product analytics record which pages and features are used (for example, that a message was sent with web search on), never what you write or the answers you get. Signed-in accounts are identified there by an internal ID, not your name or email. Error reports describe what went wrong in the app, without your messages, IP address or cookies.

6. Cookies and local storage

We use essential cookies and your browser's local storage to keep you signed in, remember your preferences (such as theme), keep a guest's chats on this device, and remember beta access. When you sign in by email, a quick automated check may run to confirm you're not a bot. We do not use advertising cookies; our analytics don't use cookies or store anything on your device, and they send nothing if your browser asks sites not to track you (“Do Not Track”).

7. How long we keep data

• Chats, files, pictures and settings: while your account is active, or until you delete them. You can delete individual chats, or all chats, at any time in the app.
• Usage records (mana used, which models answered): while your account is active.
• Server logs and error reports: up to 90 days.
• Analytics events: up to 1 year.
• Billing records: as long as tax and accounting law requires (in Singapore, generally 5 years).

To delete your whole account, email us at privacy@himiko.ai from the email you sign in with: we will permanently delete your account, chats, files, pictures, settings, mana, and usage records, except billing records we must keep. When data is no longer needed, we delete or anonymise it.

8. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you, and get a copy of it in a portable format;
• ask us to correct or delete it;
• object to, or ask us to limit, how we use it, including uses based on our legitimate interests;
• withdraw your consent (which may mean we can no longer provide the Service); and
• complain to your local data protection authority (in Singapore, the Personal Data Protection Commission).

To make a request, contact us at privacy@himiko.ai. We may ask you to confirm your identity. We will respond as soon as reasonably possible, and within the time the law requires (generally within 30 days). We won't treat you differently for using these rights.

9. Security

We use reasonable security measures, including encryption in transit, access controls, and limits on who can reach your data. No method of transmission or storage is completely secure. If a data breach is likely to cause you significant harm, we will notify you and the relevant authorities as required by law.

10. Children

The Service is not intended for children under 13, and we don't knowingly collect their data. If you are under 18, or under the age of digital consent where you live, please use the Service only with the consent of a parent or guardian. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the date above. If the changes are significant, we will let you know in the Service or by email before they take effect.

12. Contact us

Himiko Pte. Ltd. (UEN 202645549G), attention: Data Protection Officer. Email: privacy@himiko.ai.