Privacy Policy
Effective date: August 12, 2026 · Last updated: August 12, 2026
Heart AI Inc. ("HearHeart", "we", "us") operates heartplay.live. This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. It applies to the website, our applications and related services (the "Service").
Where your data is processed. We are based in the Republic of Korea and our servers are located in South Korea. If you use the Service from the United States or elsewhere, your personal information is transferred to and processed in the Republic of Korea.
1. Information we collect
| When | What we collect | Why | How long we keep it |
|---|---|---|---|
| Account creation (required) | Email and password; or the account identifier from Google, Naver or Kakao if you sign up with a social account | Create and secure your account; provide member services | Until you close your account, then deleted within 5 days unless a law requires longer retention |
| Account creation (optional) | Email address, mobile number | Sending promotional and event information, if you opt in | Until you withdraw consent or close your account |
| Identity / age verification (only where required) | Date of birth, gender, mobile number, connecting information (CI) issued by the verification provider | Verify identity and age where required by law or to prevent duplicate benefits | Until the purpose is fulfilled, or the period a law requires |
| Payment | Payment amount, date and time, payment method, IP address used for payment, order and Coin records. We do not store your full card number — card data is handled by our payment processor. | Process payments, manage purchases and refunds, prevent fraud, meet tax and record-keeping duties | Retained for the period required by applicable commerce and tax law (in Korea, generally 5 years for contract and payment records) |
| Using content | Purchase date and time, content purchased, amount spent, viewing history, library and playback position | Deliver the content you bought, keep your library and history, provide recommendations | Until you close your account, unless a law requires longer |
| Automatically, when you use the Service | IP address, cookies and similar technologies, visit date and time, service usage logs, browser type, device information including mobile advertising identifiers and push notification status | Operate and secure the Service, prevent abuse, measure usage, comply with consumer-protection duties | Generally up to 12 months for logs, unless a longer period is required |
| Customer support | The content of your inquiry and any information you provide, such as payment details for a billing issue or bank account details for a refund by transfer | Answer your inquiry, handle complaints, prevent repeated abusive inquiries | 3 years; if you delete an inquiry, up to 1 year before deletion |
We do not intentionally collect precise geolocation, biometric data, or the contents of your communications outside the Service.
2. How we use your information
- Provide, maintain and improve the Service, including your library, playback history and recommendations
- Process purchases, subscriptions, refunds and Coin balances
- Verify identity or age where required by law or to prevent duplicate promotional benefits
- Detect, investigate and prevent fraud, abuse and security incidents
- Respond to your questions and provide support
- Send service messages (for example, receipts, renewal notices, security alerts) — these are not marketing and are sent regardless of your marketing preferences
- Send marketing messages where you have opted in, and measure their effectiveness
- Comply with legal obligations and enforce our Terms
3. Cookies, analytics and advertising
We use cookies and similar technologies for sign-in, session security, remembering your preferences (such as your display language), measuring usage, and marketing. Some of these are provided by third parties who may set their own identifiers.
Depending on the features enabled on the site, this may include analytics and advertising services such as Google Analytics, Google Ads and similar advertising partners. Under some U.S. state privacy laws, the use of advertising cookies may be considered a "sale" or "sharing" of personal information for cross-context behavioral advertising, even though we do not receive money for it. See Section 7 for how to opt out.
You can also control cookies through your browser settings. Blocking essential cookies will prevent you from signing in.
4. Service providers we share information with
We share personal information with vendors who process it on our behalf under contract, and only for the purposes below.
| Provider | Purpose | Information shared |
|---|---|---|
| Hecto Financial Co., Ltd. | Payment processing | Payment ID, payment amount, Coin product information |
| SK Planet Co., Ltd. | OK Cashbag point service | Payment ID, payment amount, Coin product information |
| Smart Solution Co., Ltd. | Identity verification via KakaoTalk | Identity verification data |
| Korea Credit Bureau Co., Ltd. | Identity and age verification | Identity verification data |
We also use infrastructure providers (cloud hosting, content delivery, email and messaging) that process data on our instructions.
We may disclose information when required by law, subpoena or court order; to protect the rights, property or safety of HearHeart, our users or the public; to investigate fraud or violations of our Terms; and in connection with a merger, acquisition or sale of assets, in which case we will notify you.
We do not sell your personal information for money.
5. How long we keep information
We keep personal information only as long as needed for the purposes described above, then delete it in a way that cannot be recovered. Specific periods are listed in Section 1. In addition:
- When you close your account, we complete deletion within 5 days, except for records we must keep by law (for example, payment and contract records).
- If you do not use the Service for one year, we separate and store your information apart from active accounts.
- Electronic files are securely erased; printed materials are shredded or incinerated.
6. Your choices
- Access, correct or delete — you may review and update your information in My Account, or request access, correction or deletion by emailing help@hearheart.com.
- Close your account — My Account > Close account. This withdraws your consent to processing, subject to records we must retain.
- Marketing — you can opt out at any time in My Account or through the unsubscribe link in a marketing email. You will still receive service messages such as receipts and renewal notices.
- Cookies — see Section 3.
We do not use your information to make decisions that produce legal or similarly significant effects about you without human involvement.
7. U.S. state privacy rights
If you live in a U.S. state with a comprehensive privacy law — including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah or Virginia — you may have the rights below, subject to that state's law and its thresholds.
- Know / access the categories and specific pieces of personal information we collected about you, the sources, the purposes, and the categories of recipients
- Delete personal information we collected from you
- Correct inaccurate personal information
- Portability — receive a copy in a portable format
- Opt out of the sale or sharing of personal information for targeted or cross-context behavioral advertising
- Limit the use of sensitive personal information
- Non-discrimination — we will not deny service, charge a different price, or provide a different quality of service because you exercised a right
- Appeal — if we decline a request, you may appeal by replying to our decision; if the appeal is denied you may contact your state Attorney General
Categories of personal information we collect (as defined by the California Consumer Privacy Act): identifiers (such as email, account ID, IP address, device identifiers); commercial information (purchases and Coin history); internet or other electronic network activity (usage logs, playback history); and inferences drawn to recommend content. Where identity verification is performed, we also process date of birth and gender.
How to exercise your rights. Email help@hearheart.com with the request type and the email address on your account. We will verify your request using your account credentials or by confirming information we already hold, and respond within 45 days (extendable by another 45 days with notice). An authorized agent may submit a request on your behalf with written permission.
Opt out of sharing for advertising. Email help@hearheart.com with the subject "Do Not Sell or Share My Personal Information", or enable a Global Privacy Control (GPC) signal in your browser, which we treat as a valid opt-out request for that browser.
Nevada residents may direct us not to sell covered information by emailing help@hearheart.com.
8. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that we have collected personal information from a child under 13, we will delete it promptly. A parent or guardian who believes a child has provided us information may contact help@hearheart.com. See also our Minors Policy.
9. Security
We protect personal information with measures appropriate to the risk, including encryption of passwords using one-way hashing, encryption of sensitive data, access controls limiting who may handle personal information, and staff training. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Changes to this policy
We may update this Privacy Policy. If a change is material, we will provide notice in the Service or by email before it takes effect. The "Last updated" date at the top shows when it was last revised.
11. Contact us
Heart AI Inc. · 409, 123 Digitallo 26-gil, Guro-gu, Seoul, Republic of Korea
Privacy inquiries: help@hearheart.com
