Privacy Policy

Last updated: 2026-09-27

HeyAck uses your account details, messages, uploads, and information derived from them to run your chats, characters, memory, and requested features. Model providers receive the content needed for a request.

Data is encrypted in transit and at rest. HeyAck holds the keys needed to read and process it to provide the service.

Our main application and database run on Hetzner in Germany. Today, model, image-reading, speech, and embedding requests may be processed outside the EU/EEA/Switzerland. EU-only chat routing for residents of those regions is planned for launch; it is not active yet. Image reading, speech, and embeddings will still use non-EU providers until their EU move is completed.

Current service providers include Hetzner (hosting and database), Cloudflare R2 (files and encrypted backups), DeepInfra (model and image processing), OpenRouter and its selected model hosts (model routing), Google Workspace (service email), and self-hosted LiveKit on Hetzner (calls). The selected OpenRouter host can vary by request.

Mistral and Scaleway are planned EU chat hosts. The optional TypeSafe Jev service may read eligible plan-chat text to help choose a reply route, but only after a privacy review and activation. These planned paths are not used for chat processing now.

If you connect your own API key or endpoint, your chosen provider processes requests sent through it under its own terms. Check its location, retention, and training rules before connecting it.

You can request an account data export or delete your account in your account settings. Export download links are single-use and expire after 15 minutes. After a deletion request, there is a seven-day cancellation window before the scheduled purge. Some billing and security records must be kept where required by law. After deletion, your internal user ID remains in a pseudonymised account record and can still be linked to billing records we must keep.

We do not sell your conversations or use them to train a shared model. Questions or privacy requests: hello@heyack.com.

Uploading a file does not grant permission to use it for character training. Training consent is separate and optional in Privacy & permissions. Other AI permissions depend on the feature and can be changed in its settings where a control is offered.

Adult mode uses one account switch, off by default. The first time you turn it on, confirm your date of birth to show you are 18 or older. You confirm it once per account, ever. Turning the switch off and on, using another device or changing characters never asks again. The switch covers adult text, voice calls, video calls, images and all characters. Groups require every human member to be a verified adult with adult mode on. No further consent screens or per-character permissions are required. Turning adult mode off does not erase earlier adult messages. Adult content is sensitive, and you can request deletion; some adult-specific cleanup controls are still being developed. If you request removal of adult content, information saved in Memory without a recorded source may need manual review because we may not be able to find it automatically.

A character’s main conversation is intended to be one ongoing chat; previews are separate. Earlier duplicate chats may still exist while that change is completed.

Account deletion removes related data and files in stages. Backups and legally retained records follow their applicable retention periods. Copies held by model providers follow those providers' retention terms. HeyAck uses this staged process for deletion.