Privacy Policy

Last updated: September 11, 2026

1. Introduction

heyGF.AI is operated by Y2A LLC ("we," "us," or "our"). We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and AI companion services (collectively, the "Service").

By accessing or using our Service, you consent to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

We collect several types of information from and about users of our Service:

2.1 Personal Information

Personal information includes data that can be used to identify you, such as:

  • Account information (name and email address)
  • Information from Google, if you sign in with Google (see Section 3)
  • Profile information (username, profile picture)
  • Payment information (processed through secure third-party payment processors)
  • Contact information if you choose to provide it

2.2 Conversation Data

When you interact with our AI companions, we collect:

  • Messages you send to AI companions
  • AI-generated responses
  • Images and media exchanged during conversations
  • Preferences and settings related to your interactions

2.3 Usage Information

We collect information about how you interact with our Service:

  • Log data (IP address, browser type, pages visited, time and date of visits)
  • Device information (hardware model, operating system, unique device identifiers)
  • Usage patterns and preferences
  • Feature utilization statistics

2.4 Cookies and Similar Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

3. Information We Receive From Google

You can sign in to heyGF.AI with your Google account. This section explains how we access, use, store, share, and delete the information we receive from Google ("Google user data").

3.1 What We Access

When you sign in with Google, we request only Google's basic sign-in permissions (openid, email, and profile). With your permission, Google shares:

  • Your name
  • Your email address
  • Your profile picture
  • Your Google account identifier

We do not access your Gmail, Google Drive, Google Contacts, Google Calendar, or any other data in your Google account.

3.2 How We Use It

  • To create your account and sign you in
  • To show your name and profile picture in your account
  • To send you emails about your account, your purchases, and the Service
  • To keep your account secure and to prevent fraud and abuse, such as repeatedly creating accounts to get around usage limits
  • To measure how our own advertising performs, as described in Section 6

3.3 How We Store and Protect It

Google user data is stored primarily in Google Cloud (Firebase Authentication and Cloud Firestore). It is encrypted in transit using HTTPS (TLS) and encrypted at rest. Access is limited to authorized personnel who need it to operate the Service.

3.4 How We Share It

We share Google user data with service providers that help us run the Service, such as our hosting and payment providers, only as needed to provide the Service, and with the advertising and analytics partners described in Section 6. We may also disclose it when required by law, to protect the rights and safety of our users and others, or as part of a merger, acquisition, or sale of assets.

We do not sell Google user data. We do not transfer it to data brokers or information resellers, and we do not use it to determine credit-worthiness or for lending purposes. We do not use Google user data to develop, improve, or train artificial intelligence or machine learning models.

3.5 Retention and Deletion

We keep Google user data while your account is active. You can delete your account at any time from Settings. Deleting your account signs you out and removes your ability to sign in. We keep a record of the account, including your email address, to prevent fraud and abuse and to meet our billing and legal obligations.

To have your Google user data permanently erased, email privacy@heygf.ai from the address linked to your account. We will delete it within 30 days, except for information we must keep by law. You can also remove heyGF.AI's access to your Google account at any time at myaccount.google.com/connections.

4. How We Use Your Information

We use the information we collect for various purposes:

  • To provide, maintain, and improve our Service
  • To personalize your experience and deliver content tailored to your preferences
  • To process payments and manage subscriptions
  • To create and generate custom AI-generated images and media
  • To communicate with you about service updates, offers, and promotions
  • To monitor and analyze usage patterns and trends
  • To detect, prevent, and address technical issues, fraud, abuse or illegal activities
  • To enforce our Terms of Service and other policies

5. Data Storage and Security

We take data security seriously and implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, use, and modification.

Your data is stored on secure servers and in cloud storage provided by established service providers who maintain high security standards. Data is encrypted in transit using HTTPS (TLS) and encrypted at rest by our cloud providers. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. No method of transmission over the Internet or method of electronic storage is 100% secure.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account from Settings, we close the account and remove your ability to sign in, and we keep a record of the account to prevent fraud and abuse and to meet our billing and legal obligations. To request permanent deletion of your personal information, contact us at privacy@heygf.ai.

6. Sharing Your Information

We may share your information in the following circumstances:

  • Service Providers: We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf, such as payment processing, data analysis, email delivery, hosting services, AI model providers, and customer service.
  • Advertising and Analytics Partners: We work with advertising and analytics partners, such as Meta, Google, Microsoft, Reddit, X, and PostHog, that use cookies, pixels, and similar technologies to help us understand how the Service is used, measure how our ads perform, and show our ads to people who may be interested in the Service. When you sign up, sign in, or make a purchase, we may share identifiers such as your email address, your name, and an account identifier with some of these partners.
  • Business Transfers: If we are involved in a merger, acquisition, or asset sale, your personal information may be transferred as part of that transaction.
  • Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
  • Protection of Rights: We may disclose your information to protect our rights, property, or safety, or the rights, property, or safety of others.
  • With Your Consent: We may share your information with third parties when we have your consent to do so.

We do not sell your personal information. However, we may use and share aggregated, de-identified data for any lawful purpose, including to analyze trends and enhance our services.

7. AI Features and Model Providers

Your companions' replies, voice messages, images, and videos are generated by AI models, some of which are operated by third-party providers. To generate a response, we send the relevant parts of your conversation and your companion's settings to these providers.

We use your conversation history to personalize your experience, for example so that your companion remembers details you have shared. We do not use your conversations to train AI models, and we do not use Google user data to develop, improve, or train artificial intelligence or machine learning models.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, including:

  • Access: You can request copies of your personal information that we hold.
  • Correction: You can request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
  • Deletion: You can delete your account from Settings at any time, and you can request that we permanently delete your personal information.
  • Restriction: You can request that we restrict the processing of your personal information.
  • Data Portability: You can request that we transfer your data to another organization or directly to you.
  • Objection: You can object to our processing of your personal information in certain circumstances.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section. We may request specific information to confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights).

If you are a resident of California, you may have additional rights under the California Consumer Privacy Act (CCPA). To exercise them, contact us using the information provided in the "Contact Us" section.

9. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us immediately.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy. If we make a material change, including any change to how we use information we receive from Google, we will also notify you by email or through the Service. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of the Service after we post changes to the Privacy Policy means that you accept and agree to the revised policy.

11. Contact Us

heyGF.AI is operated by Y2A LLC. If you have any questions about this Privacy Policy or how we handle your data, please contact us: