Hushly Privacy Policy

Last updated: 2026-05-20

Controller: Xiangxiang Tuanmei Trading Co., Ltd.

Contact: welcome@tuanmeitrading.com

Effective date: 2026-05-20

Data controller contact

Data controller: Xiangxiang Tuanmei Trading Co., Ltd.

Registered address: No. 127, Xinjie Community, Maotian Town, Xiangxiang, Xiangtan, Hunan Province, China

Privacy email: welcome@tuanmeitrading.com

Contact channel: Email welcome@tuanmeitrading.com—the published contact path for Hushly on Android distributed through Google Play.

Data Protection Officer (DPO)

**Data Protection Officer, Xiangxiang Tuanmei Trading Co., Ltd.

Scope of this Privacy Policy

This Privacy Policy explains how Xiangxiang Tuanmei Trading Co., Ltd. processes personal data and personal information within Hushly, a Google Play Android companion built around feeling chosen, heard, and steadily cared for through English text chats and immersive voice calls. Ten AI personas span consistency rituals, signal interpretation, boundary coaching, soft reassurance, repair strategy, night grounding, appreciation reflection, gentle reality checks, decision balance, and quiet presence listening. Discover tab offers horizontal super-card browsing; Saved tab hosts waterfall keepsake cards; Me tab surfaces stacked profile cards with avatar and nickname editing. Favorite toggles live exclusively in chat AppBar surfaces (S4), syncing with Saved tab ribbons. Each companion keeps separate histories loaded on entry without a standalone conversation history page. Three complimentary exchanges per companion are shared across qualifying text completions and first qualifying voice completions. Optional Google Play Billing may extend allotments when catalog items appear. Only adults who declare 18+ proceed; Hushly does not rely on continuous technical age scanners beyond that first attestation. In-app AI data-sharing notices plus User Terms unlock the processing below.

Categories we collect and why

Each line mirrors Data safety expectations:

  1. Profile identifiers comprising editable nickname, avatar index or portrait asset handle, optional numeric ID, credential tokens when accounts authenticate — Purpose: Render Me tab profile cards, align chat composer avatars, underpin login-linked continuity — Attribute Required once personalization deepens beyond provisional guest scaffolding.
  2. English companion chat transcripts isolated per AI persona covering emotional support, boundary coaching, reassurance, repair guidance, or voice-call dialogue — Purpose: Maintain separated chat threads per character, energize AI companion replies, enforce three complimentary exchanges per companion when applicable — Attribute Collected whenever you send text or finalize AI replies inside Hushly.
  3. Photos captured with Camera or selected through Photos and videos (read flows) when updating profile avatar in Me — Purpose: Personalize Me profile cards and chat input-area avatars through preset selection, camera capture, or gallery import — Attribute Optional; manifests when you capture, import, or confirm avatar updates through Me avatar editing.
  4. Microphone-guided voice-call segments plus speech-to-text transcripts and synthesized reply ledgers generated during AI voice sessions — Purpose: Deliver immersive voice companionship, hydrate speech-to-text for model envelopes, decrement shared allotment once qualifying voice completions finish — Attribute Optional; activates solely when initiating voice-call sessions respecting runtime microphone and speech prompts.
  5. Pinned companion records describing which AI characters remain saved inside the Saved tab and toggled from chat AppBar favorites — Purpose: Mirror favorite toggles between chat AppBar and Saved waterfall cards without blending unrelated histories — Attribute Optional; manifests when you save or remove personas from chat favorites or Saved tab.
  6. Free-message quota counters recording complimentary exchanges remaining independently across ten emotional companions — Purpose: Honor three free conversational credits per companion shared across text and qualifying voice completions, gate premium restores when expansion SKUs appear — Attribute Required for quota stewardship whenever gratis plans operate.
  7. AI data-sharing consent record stored after accepting in-app disclosure referencing HTTPS Moonshot-class routing — Purpose: Evidence informed consent linking in-app AI disclosure explanations with Moonshot-class routing copy — Attribute Required before first composer send or inaugural voice-call attempt when notices display.
  8. Usage events plus diagnostics encompassing Device ID when users roam between Wi-Fi and cellular data — Purpose: Measure performance, troubleshoot issues, improve product quality — Attribute Required.
  9. In-app purchase and entitlement signals processed in connection with Google Play Billing extending companion allotments — Purpose: Deliver digital goods or features, validate entitlements with Google Play, keep companion sessions entitlement-consistent — Attribute Collected when users acquire expansion passes made available in applicable releases.

Across regions anticipating lawful bases (legal bases):

  1. Performance of a contract carrying profile synchronization, chat logging, companion dialogue fulfillment, Saved tab mirroring, quota bookkeeping, mediated Google Play Billing validations.
  2. Legitimate interests shielding users through Usage events, Device and app diagnostics, Device ID analytics, jitter measurement across Wi-Fi and LTE hops, alerting integrity collaborators when scripted harm surfaces.
  3. Legal obligations anchoring ledger duties tied to Google Play Billing audits.
  4. Consent fastening AI data-sharing notices, exploratory analytics sliders, avatar refreshers beyond scaffolding. Users may withdraw consent emailing welcome@tuanmeitrading.com tagging toggled channels with profile identifiers.

Android permission choreography (VB pairing)

Sensitive gates wake only on foreground intents you originate:

Hushly includes no feedback page; camera and gallery access arise exclusively from Me avatar editing under the VB scheme. These sensors stay not in the background as ambient watchers. Withdraw scopes anytime via Settings › Apps › Hushly › Permissions, acknowledging voice calls pause until revived.

How we disclose data beyond the handset

Processors must refrain from vending companion dossiers for unrelated retail dossiers.

Device ID narration

Because Usage events plus diagnostics encompassing Device ID when users roam between Wi-Fi and cellular data anchor stability dashboards, subsets of Device ID may traverse to Analytics / Performance Monitoring recipients strictly inside the enumerated purposes.

Data retention practices

Our data retention practices govern how long we retain personal data: only while companion services, safeguarding, disputes, bookkeeping, or legal obligation require continuity. Chat threads persist until cleared through chat Clear tooling or lawful commands. Fiscal traces tethered to Google Play Billing may survive Google's storefront notwithstanding handset wipes. Ordinary acknowledgements land within roughly 15 business days unless regulators articulate transparent extensions.

Security cadence

Moonshot-aligned transports encrypt in motion; contractual scopes constrain vendors; quota counters segregate companion allotments from unrelated storefronts; monitors sample Device ID drift thoughtfully.

Your rights and correction cadence

Users may request access, portability, restriction, objections, explanatory narratives keyed to profile identifiers after substantive diligence.

Individuals may request correction or rectification of inaccurate or incomplete personal data plus personal information, including mistaken Free-message quota counters recording complimentary exchanges remaining independently across ten emotional companions, erroneous Photos captured with Camera or selected through Photos and videos (read flows) when updating profile avatar in Me, or malformed excerpts of English companion chat transcripts isolated per AI persona covering emotional support, boundary coaching, reassurance, repair guidance, or voice-call dialogue. Email welcome@tuanmeitrading.com with proof.

California Consumers

California residents exercise rights stemming from the California Consumer Privacy Act (CCPA), oft discussed beside CPRA layers.

Shares align with specific definition under California law—sometimes evoking cross-context behavioral advertising when processing leaps beyond narrowly tailored essentials. Innocuous conduit routing ordinarily avoids statutory sale readings.

Transparency: you retain the right to know whether personal data inside companion sessions may be shared with third parties listed here under the California Consumer Privacy Act (CCPA). Compose welcome@tuanmeitrading.com citing California right to know plus profile identifiers.

We intentionally pair personal data and personal information throughout.

Virginia Consumer Data Protection Act (VCDPA)

How you can opt out under VCDPA

  1. Targeted advertising — Send welcome@tuanmeitrading.com subject Virginia targeted advertising opt-out articulating companion tags whenever personalization echoes regulated canvases.
  2. Sale — Hushly does not sell personal data ordinarily, though hypothetical remuneration resembling statutory sale honors Virginia sale opt-out letters enumerating profile identifiers.
  3. Profiling producing legal effects — Challenge companion scoring mail labeled Virginia profiling opt-out referencing impacted chat sessions whenever automation menaces materially significant spheres.

Symmetric coverage embraces emails quoting Opt-out of sharing or Opt-out of sale. Auxiliary banners may blossom inside Me tab ribbons as storefronts stabilize.

European guests escalate supervisory authorities strictly after substantive dialogue exhaustion.

Account deletion

Dissolving Hushly scrubs mirrored English companion chat transcripts isolated per AI persona covering emotional support, boundary coaching, reassurance, repair guidance, or voice-call dialogue, buffered voice-call text, Saved tab favorites, gratis tallies, avatar selections—excluding ledgers statutes preserve commerce rails.

Navigate Me > Account settings > Delete account.

Email mailto:welcome@tuanmeitrading.com stating delete account with subject Delete account.

Historical Google Play Billing artefacts remain tethered to Google storefronts notwithstanding companion-side dissolution ribbons.

No-sale pledge

We do not sell personal and sensitive user data.

Cross-border companion archives

Whenever chat archives glide overseas, contractual clauses, audits, and impact reviews cradle companion dossiers beneath instruction umbrellas.

Minors stance

Companion sessions target declared adults 18+; misfiled minor input evaporates upon reasonable caregiver mail to welcome@tuanmeitrading.com.

AI data-sharing candor

AI data-sharing consent record stored after accepting in-app disclosure referencing HTTPS Moonshot-class routing must stay truthful alongside camera, microphone, photos, speech recognition, and Me avatar constraints captured above.

Updates to this Privacy Policy

We may update this Privacy Policy thoughtfully—meaningful policy updates or changes to this policy touching accounts, companion sessions, collaborators, Billing, or third parties will refresh the effective date through banners inside Hushly or Play descriptors patrons can revisit.

Supplement for Google Play policy checks

<!-- PLAY32_SUPPLEMENT_V1 -->

Encryption and transfers. We use encryption in transit (for example TLS and HTTPS) between the app and our servers and applicable subprocessors where technically supported, together with access controls described in our security practices. This does not mean that every copy of information is encrypted at rest on every device.

European Economic Area and United Kingdom. If you are in the EEA or the United Kingdom, you may exercise rights under the General Data Protection Regulation (GDPR) and the UK GDPR, including access, rectification, erasure, restriction of processing, objection where applicable, data portability where feasible, and withdrawal of consent where we rely on consent. To exercise these rights, contact us at welcome@tuanmeitrading.com with a clear description of your request.

Right to lodge a complaint. You may lodge a complaint with a competent supervisory authority if you believe our processing infringes applicable data protection law, including with an authority in the EU/EEA member state of your habitual residence, place of work, or the place of the alleged infringement.

Policy updates. We may update this Privacy Policy from time to time; when we do, we will publish a revised version with an updated effective date and, where appropriate, provide additional notice through the app or other reasonable channels.

Play storefront user rights summary

Depending on applicable law, you have the right to request access to the personal data that we collect about you (including, where applicable, the right to know whether we process certain categories of personal data concerning you). To exercise this right, email welcome@tuanmeitrading.com with a clear description of your request and enough information for us to verify your identity and locate the relevant records.

You have the right to request deletion of personal data that we collect about you, subject to lawful exceptions (for example records we must retain for security, audits, disputed transactions, or legal process). Submit your request by emailing welcome@tuanmeitrading.com with subject Deletion Request, or follow the account deletion paths described elsewhere in this policy when you use a registered profile.

Depending on applicable U.S. state laws and similar regimes, disclosures may be characterised as sharing or as sale / selling even when money does not change hands. How to opt out: email welcome@tuanmeitrading.com with subject Opt-out of sharing to opt out of sharing-related disclosures to the extent required by law, Opt-out of sale for sale-related opt-out requests, and Opt-out of targeted advertising when you wish to limit personal data used for cross-context behavioural or targeted ads. Where verification is required, we aim to acknowledge and process qualifying requests within about 15 business days.