Callove — Privacy Policy

Last updated: October 3, 2026

Overview

Callove (컬러브) is an AI companion app. You chat one-on-one with a fictional character whose personality, replies, diary entries, and photos are generated by AI. The characters are not real people, and every photo in the app is a synthetic image.

Callove is operated by Hyun, an individual business based in Busan, Republic of Korea ("we", "us"). This policy explains what we collect, why, where it goes, and how you can delete it. In short: we collect what the service needs to work, we never sell your data, and your conversations are never used to train AI models.

Data we collect

• Account — the identifier returned by Sign in with Apple or Google Sign-In, and the email address those services share with us (you may use Apple's Hide My Email). At sign-up you also provide a nickname (how your character addresses you), your date of birth (used only to confirm you are 19 or older), your gender, and three interests. Sign-up is refused if the date of birth shows you are under 19.
• Conversations — the messages you send, the character's replies, your chosen relationship type (friend, partner, mentor), character settings, and the chat mode (basic or advanced) used for each turn.
• Memories — short fact cards that the app extracts automatically from your conversations after a session ends (about you, people you mention, plans, preferences, and things that happened between you and the character). Each card links back to the message it came from. You can review, edit, and delete every card in the character's profile.
• Diaries — a short diary entry written from the character's point of view after a day in which you talked.
• Generated photos and prompts — the place, outfit, and mood you choose when requesting a photo, the appearance prompt you write when creating a custom character, and the resulting AI-generated images. Callove does not accept uploads of your own photos or photos of real people, and does not access your photo library or camera. Generated images carry an invisible watermark.
• Purchases and ledger — your subscription status, spark balance, allowance counters, and a ledger of rewards, purchases, consumption, and refunds with a job ID per row. Purchases are processed by Apple; we never see your payment card or billing address.
• Settings and notifications — your in-app preferences (response length, language, description style, theme, and the daily time window for the character's message) and, if you allow notifications, a push token.
• Device and app information — device model, iOS version, app version, language, and an app-generated identifier.
• Analytics events — basic product events such as app opens, screens viewed, chat turns sent, memory cards confirmed, and purchases, sent to Amplitude. These events never contain the text of your messages, memories, or diaries.
• Reports and support requests — if you report a message, we keep the reported message with its surrounding context and the reason you selected. If you email us, we keep your email and message.
• Not collected — contacts, location, photo library, microphone, camera, or your face. Callove includes no advertising SDK, does not request App Tracking Transparency permission, and does not collect Apple's advertising identifier (IDFA).

How we use data

• Generate the character's replies, diary entries, and photos, and personalize them using your nickname, settings, and memory cards.
• Confirm you are old enough to use the app.
• Track allowances, sparks, and purchases so you are charged correctly and refunded automatically when a job fails on our side.
• Run automated safety filters on what you send and what the character produces, and apply a restricted mode when the filters detect prohibited content or signals that a user may be a minor.
• Understand how the app is used and improve it. This relies on aggregate metrics and, during the early stage of the service, on limited sample review of conversations by the operator (see Operator access below).
• Respond to your reports, support requests, and privacy rights requests.
• Prevent abuse and comply with the law.

We do not use your conversations, memories, diaries, or photos to train AI models, and we require the same of our AI providers.

AI processing and transfer outside Korea

To generate replies, Callove sends your conversation to AI model providers whose servers are located in the United States. Under Article 28-8(1)(3) of the Korean Personal Information Protection Act, this is a cross-border transfer for outsourced processing that is necessary to provide the service you have requested. It is disclosed here instead of through a separate consent prompt. The details required by law are as follows.

• Items transferred — the messages you send, the character's recent replies, your nickname and relationship settings, the memory cards relevant to the conversation, diary inputs, and your photo or custom-character prompts. Your date of birth, email, purchase history, and device identifiers are not sent to AI providers.
• Destination country — United States.
• When and how — in real time, each time you send a message or request a photo, over encrypted (TLS) API connections. Memory extraction and diary generation run shortly after a session ends.
• Recipients — Anthropic, PBC (anthropic.com/privacy); Google LLC (policies.google.com/privacy); OpenRouter, Inc. (openrouter.ai/privacy); Replicate, Inc. (replicate.com/privacy).
• Purpose and retention — generating the character's replies, memory cards, diary entries, and images, and running safety classification. We use each provider's API or enterprise terms, which prohibit using your content to train their models. Providers may hold request data for a limited period for abuse monitoring under those terms; where a zero-retention option is available we use it.
• How to refuse, and the effect — because generating replies is the core function of Callove, this transfer cannot be switched off while you use the app. If you do not agree to it, please do not use Callove, or delete your account in Settings. Deleting your account stops all further transfers.

Other service providers

These providers process data only to run Callove, under contracts that limit their use of it:

• Supabase — hosts our database, authentication, and file storage (accounts, conversations, memories, diaries, generated images, ledger).
• Cloudflare — network and edge infrastructure in front of our servers.
• Amplitude — product analytics for the events described above.
• Apple — Sign in with Apple, In-App Purchases, and push notifications. Google — Google Sign-In.

We do not provide advertising or cross-app matching identifiers to any provider, and we do not share your data with data brokers or advertising networks.

Operator access

We do not read your conversations as a matter of routine. The operator may view specific conversations only to handle a report, resolve a dispute or billing issue, or act on a request you made. During the early stage of the service the operator may also review a limited sample of conversations to improve reply quality and safety filters. Every such access is logged, and we intend to narrow this scope as the service matures.

What we don't do

• We do not sell your data.
• We do not use your conversations or photos to train AI models.
• No advertising SDK, no App Tracking Transparency prompt, no IDFA, and no tracking across other companies' apps or websites.
• No public profiles, feeds, or sharing of your conversations. A share card is created only when you explicitly export one, and it is not stored on our servers.

Age

Callove is rated 18+ on the App Store and is only for people aged 19 or older. We check your date of birth at sign-up and do not collect any further identity documents. If we learn that a user is under 19, we delete the account. If conversations repeatedly suggest that a user may be a minor, romance features are disabled and guidance is shown.

Purchases

Subscriptions, sparks, and extra character slots are sold through Apple In-App Purchase. We receive the transaction and subscription state needed to unlock features and keep your ledger accurate, but we never see your payment details.

Data retention & deletion

• Conversations, memories, diaries, and photos are kept for as long as your account exists. You can delete any single item, or all of them, in the app. Deleted items are hidden immediately (soft delete) and permanently erased 30 days later.
• Export — you can download your memories, diaries, and conversations as JSON or text from Settings.
• Account deletion — request it in Settings. After a 30-day grace period, your account and everything attached to it are permanently deleted. The only exception is purchase and payment records, which we must keep for 5 years under the Korean Act on Consumer Protection in Electronic Commerce; these are stored separately from your other data.
• Analytics events are tied to an app-generated identifier, not your name or email, and never contain message text.
• Reports and support emails are kept as long as needed to resolve the issue and prevent abuse.

Security

Data is encrypted in transit and at rest. Service keys are held only on our servers, never in the app. Access to user data is restricted to the operator and is logged.

Your rights

You can access, correct, export, and delete your data, and withdraw from the service, at any time in the app. For anything the app does not cover, email us at the address below and we will respond within 10 days. You may also contact the Korean Personal Information Protection Commission (privacy.go.kr, 118) if you believe your rights have been infringed.

Changes

We may update this policy, for example when we add a provider. Material changes will be announced in the app at least 7 days before they take effect, and this page always shows the current version.

Contact

Privacy officer: Hyun (operator of Callove, Busan, Republic of Korea).
Questions, rights requests, or deletion requests? Email haeundae96@gmail.com or visit Callove Support.