Privacy Policy

Faivv Limited ("Faivv", "we", "us", or "our"), a company incorporated in Hong Kong, operates the SiYou service, including the website at siyou.app and related applications and services (collectively, the "Service").

This Privacy Policy explains how we collect, use, store, and share your personal data, and your rights under the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO"). By using the Service, you acknowledge that you have read and understood this Privacy Policy.

The Service is operated from Hong Kong and may be accessed in other locations. Laws outside Hong Kong may apply depending on where the Service is offered or used. Nothing in this Policy limits rights or obligations that cannot be limited under applicable law.

The Service is not intended for individuals physically located in the United States or China Mainland. We do not knowingly collect personal data from individuals physically in those regions. If we become aware that a user is physically located in the United States or China Mainland, we will take steps to terminate their access and delete their account.

To enforce this restriction, we estimate your location at sign-up by sending your IP address to a third-party IP geolocation service (IP2Location.io), which returns an approximate country and region. The estimate is based on your IP address at sign-up and may be inaccurate.

SiYou is a sensitive AI companion product. Because the Service is designed around ongoing chats, user profiles, memory-like features, and relationship continuity, privacy boundaries matter more than they do in ordinary utility software.

Depending on how you use SiYou, we may collect and process:

• Account data, such as your email address and authentication-related identifiers.
• Profile data, including your chosen chat name and information you place in My Card, Room Cards, or similar profile settings, such as age group, gender, occupation, interests, biography, languages, region, and time zone.
• Pal configuration data, such as preferences, tone selections, language settings, or related companion setup choices.
• Chat and group data, including messages you send, AI-generated replies, group membership and invitations, read status, message timing, and metadata associated with those exchanges.
• Voice data, including audio recordings you choose to send, their transcripts, duration and language metadata, and storage references needed to make recordings available for playback.
• Submitted-link data. If you include a website address in a message, we may retrieve that public page, extract text, generate a summary, and reuse a cached summary of the same address for other users.
• AI-derived data, such as conversation topics, importance scores, inferred news interests, memory summaries, relationship summaries, and other context generated from your use of the Service.
• Device and notification data, such as push-notification tokens, time zone, basic device or browser information, and notification interactions.
• Authentication and local-storage data, such as session tokens and essential preferences stored on your browser or device to keep you signed in and remember your settings.
• Operational and security data, such as logs, your IP address and other IP-derived request information, timestamps, error reports, and system events needed for reliability, debugging, security, and abuse prevention.
• Approximate location data, meaning the country and region estimated from your IP address at sign-up, used solely to enforce our geographic restrictions.
• Language and preference data, including settings that help the interface and companions behave consistently across sessions.

Some profile or conversation content may reveal sensitive matters about you even when we did not ask for them. Please use the controls available to you and avoid submitting information that is not needed for the Service.

Do not place highly sensitive or regulated information in your personal profile, My Card, pal settings, or any chat with SiYou.

• Do not disclose bank-account numbers, credit-card details, payment credentials, investment instructions, tax identifiers, or any other financial information.
• Do not disclose passwords, one-time passcodes, recovery codes, or security answers.
• Do not disclose government identification numbers, passport details, or highly sensitive identity documents unless a clearly separate, formal process expressly asks for them.
• Do not disclose confidential information belonging to another person, employer, client, school, or institution.

Even if a chat feels personal or emotionally familiar, SiYou is not a private human confidant, fiduciary, therapist, banker, or lawyer.

We may use data we collect to:

• provide and maintain the service;
• authenticate users and administer accounts;
• deliver text and voice chat, group features, link summaries, profile-driven behavior, memory-like features, and companion settings;
• generate, personalize, and evaluate AI replies and proactive messages;
• send service and chat notifications where you enable them;
• improve safety, moderation, and abuse-prevention systems;
• enforce geographic restrictions on access to the Service;
• debug technical issues, monitor performance, and maintain service quality; and
• comply with legal obligations and protect users, the service, and Faivv Limited.

We do not sell personal data to third parties. We may, however, use service providers and infrastructure partners to process data on our behalf where reasonably necessary to operate SiYou.

Where applicable law requires a legal basis for processing, we rely on the performance of our agreement with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where we specifically request it. Where processing is based on consent, you may withdraw that consent, but withdrawal does not affect processing already carried out.

Group chats are shared spaces. Other human participants in a group can see the messages, voice messages, profile or Room Card details, and other content you make available in that room. They may copy, record, or disclose that content outside SiYou. Do not share information in a group unless you are comfortable sharing it with every participant.

Group invitations may use account identifiers or email addresses to locate the intended participant. AI pals in a group use the content and profiles available within that group to generate replies and group-scoped memory.

SiYou may rely on third-party infrastructure and service providers, including cloud hosting, authentication, database and file storage, email and push communications, security, IP geolocation, transcription, and AI-model providers. Data you submit may be transmitted to and processed by those providers as needed to operate the Service.

Third-Party AI Providers

Because SiYou is built around AI companions, generating every Pal reply requires transmitting your chat data to third-party AI model providers. Specifically:

• Alibaba Cloud Model Studio — DashScope (Qwen models) (dashscope-intl.aliyuncs.com) is the AI that generates Pal replies. It receives your chat messages together with conversation context — including profile information from your My Card or Room Card, memory and life-arc summaries, and shared-link summaries that help a Pal reply — your voice recordings for speech transcription, your text for semantic analysis (embeddings, used to find relevant memories), and the appearance and profile fields of a Pal when generating that Pal's sketch or scene image. Alibaba Cloud states that it will never use your data for model training, and data is transmitted encrypted.
• OpenRouter (openrouter.ai) is used only to fetch public news stories that Pals can bring into conversation. These requests contain a news topic and a language; they do not contain your chat messages, your profile, your email address, or anything else that identifies you.

These providers process your data only to deliver the Service on our behalf; they are not sold your data and do not use it for their own marketing. The full list of providers, the data categories each receives, and their purposes is published on our Subprocessors page. Before an account is created, we display this processing on an on-screen notice in the app and on this website (our AI Data Processing Notice) and ask for your explicit agreement; existing users are shown the same notice before they can continue. You can withdraw consent at any time by deleting your account.

We may also disclose personal data:

• when required by law, legal process, or a competent authority;
• to investigate fraud, abuse, security incidents, or threats to safety;
• to protect the rights, property, or safety of users, Faivv Limited, or others; or
• as part of a merger, financing, reorganization, sale of assets, or similar business transaction, subject to appropriate safeguards.

We aim to limit data exposure and use service providers that are appropriate for the product, but no internet service should be treated as risk-free.

The specific providers and integrations we use may change over time. Where a material change affects how personal data is handled, we may update this Privacy Policy accordingly.

A current list of the providers that process data on our behalf, with the data categories and purposes involved, is available on our Subprocessors page.

SiYou and its service providers may process data outside Hong Kong, including in the United States, mainland China, Singapore, and other jurisdictions with different data-protection laws. For example, cloud hosting and authentication infrastructure may be located in the United States, AI-model providers may process data in mainland China or Singapore, and IP geolocation is used to enforce our geographic restrictions. By using SiYou, you understand that personal data may be transferred to and processed in those jurisdictions as reasonably necessary to operate the service.

We aim to use contractual, organizational, and technical measures that are appropriate to the product and its stage of development, but we cannot promise that every jurisdiction will offer data protections identical to those of Hong Kong.

We retain each category of personal data only for as long as reasonably necessary to provide the service, enforce safety and abuse controls, comply with legal obligations, resolve disputes, or maintain legitimate business records. The table below summarises the retention periods we apply.

Account Deletion. You can request account deletion through the account controls in the website or mobile app. When you delete your account:

• Your account is disabled immediately (you can no longer log in).
• Your 1-on-1 chat history, memories, bios, relationship reviews, and Room Cards are purged within 30 days of the deletion (voice audio immediately). Any AI Pal still referenced by a group room that another member retains is anonymized at once — its name and basic personality skeleton are kept so that the other member’s group history reads correctly, but all memories, preferences, profile facts, and personal data are cleared; the row is fully purged when that group room is eventually purged.
• Your voice messages are deleted from storage at once (transcripts follow the 30-day room rules below).
• You are removed from every group chat with a system message, which closes each room for all members; the full room (including your messages) is purged within 30 days after every remaining human member has deleted their view. Members who keep their view retain their copy of the history in the meantime.
• Your Firebase Auth record is deleted, and the login identifier on your profile record is cleared.
• An audit record of the deletion (timestamps, deletion counts, legal acceptance snapshot) is retained for 90 days, then deleted. This audit record contains no message content.

Your User row persists as an anonymized “ghost” record to preserve foreign-key integrity for group messages retained in other members’ copies: all personal data (email, SiYou ID, gender, occupation, interests, bio, region, push token, timezone, and the Firebase login identifier) is cleared; your display name (chatName) and language preferences (primaryLanguage, secondaryLanguage) are retained so that other participants’ chat records are not disrupted. No other personal data survives.

Closing and deleting chats. Closing a chat stops messaging and makes the history read-only; deleting a chatroom removes it from your list and schedules its purge (within 30 days, once no other human member retains a view of the room). No action by one user deletes chat history held in another user's copy. You can report a chat or any member of it from the chat itself, from Settings in the mobile app, or from the “Report” link in the website footer; for chat reports we do not read message contents — we email you a menu of remedies (close, delete, hide an AI Pal from your account, or block a user from inviting you) and carry out the ones you choose on your account only.

If you need details about retention for a particular category of data, contact us at contact@siyou.app.

We use reasonable technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse, or alteration. These measures may include access controls, authentication, encryption in transit, restricted provider access, and monitoring appropriate to the nature and stage of the Service. No security measure or internet transmission is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your sign-in credentials and for promptly telling us if you believe your account has been compromised.

We do not use advertising or analytics cookies, and we do not load third-party tracking scripts or engage in cross-site tracking on the Service. We rely only on essential client-side storage that is strictly necessary to operate SiYou.

• Website: your language preference is stored in browser local storage, and Firebase Authentication persists your sign-in session using browser-managed storage so you stay signed in between visits.
• Mobile app: we use on-device storage (AsyncStorage) for your preferences, push-notification tokens, and cached chat and unread-count data used to render the service quickly. This cache remains on your device.

Clearing your browser or device storage may sign you out or reset these local preferences.

Subject to the PDPO and applicable legal limitations, you may have the right to request access to personal data we hold about you and to request correction of inaccurate personal data. Depending on where you live, applicable law may also give you rights to request deletion, restriction, portability, objection, or information about how we process and disclose your personal data.

We may need to verify your identity before responding to a request, and we may refuse or limit a request where the PDPO or another applicable rule permits us to do so.

You can edit certain profile and preference data in the Service, manage notification permission through your device, and delete your account through the available account controls. To exercise another privacy right, contact us using the address below. You may also have the right to complain to the privacy or data-protection authority where you live.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data (Hong Kong) at www.pcpd.org.hk.

SiYou is intended only for people aged 18 or above. We do not knowingly permit minors to create accounts. If you believe a person under 18 has provided personal data to the Service, contact us so we can investigate and take appropriate action.

SiYou uses automated systems to generate replies, summaries, conversation tags, memory-like context, inferred interests, and proactive-message timing. These outputs may be inaccurate or may infer matters you did not intend. They are used to operate and personalize the companion experience, not to make legal or similarly significant decisions about you.

If you have questions about this Privacy Policy or privacy-related concerns, you may contact Faivv Limited at contact@siyou.app.

As SiYou evolves, this Privacy Policy may be updated to reflect product, legal, operational, or safety changes. We will post the revised date and provide additional notice of material changes where required by law.