Privacy Policy
Effective: 30 August 2026·Last revised: 14 September 2026
1. General
PlayOnly (the “Service”) complies with the Korean Personal Information Protection Act and other applicable laws, and publishes this Privacy Policy to explain how it protects your information.
The Service handles conversations you have with AI characters. Those conversations may contain private things you have chosen to say, so we treat them with particular care.
2. Information we collect
We collect and store the following.
| Category | Items | When |
|---|---|---|
| Account | Email address, password (stored encrypted), nickname, profile image | On registration and when you edit your profile |
| Google sign-in | Google account identifier, email address, name | When you sign in with Google |
| Preferences | Display language, country | Filled from your browser settings at registration; you can change them afterwards |
| Persona | Name, gender, age, description, country, profile image | When you create or edit a persona |
| Conversations | The character you are talking to, the full text of messages exchanged, per-conversation notes | When you talk to a character |
| Memories | Facts you save for a character to remember | When you save a memory |
| Notes | Title, body | When you write a note |
| Spark | Balance and transaction history (amount, reason, time) | When Spark is earned or spent |
| Relationships | Relationship state per character, when it began, cumulative Spark spent | When a relationship with a character changes |
| Usage records | Message counts, access logs, server error logs | Generated automatically as you use the Service |
We do not collect national identification numbers, bank account numbers or card numbers. Payment details are handled by the payment provider and are not stored by us.
We do not ask for your real name, date of birth or telephone number. Anything you choose to put into a persona or a conversation is your own choice, and we do not verify it.
3. What we use it for
- ·identifying you, keeping you signed in, and managing your account
- ·generating character replies and maintaining the thread of a conversation
- ·applying the personas, memories and notes you have saved
- ·managing your Spark balance and showing your transaction history
- ·displaying the interface in the language you chose
- ·preventing misuse, responding to faults, and improving the Service
- ·meeting our obligations under the law
4. Information sent for AI processing
To produce a character's reply, the conversation has to be passed to an AI language model. The following is sent to AI providers outside the Service:
- ·the messages exchanged in that conversation
- ·the persona you have set (name, gender, age, description)
- ·the memories you have saved and the notes for that conversation
- ·the settings of the character you are talking to
We do not send your email address, account identifier or any other direct identifier. What you have typed into a persona or a conversation is sent as written, so we suggest you do not enter information you would not want disclosed.
The AI providers currently used are listed below. They may change as the Service develops; we will update this Policy if they do.
| Provider | Purpose | Country |
|---|---|---|
| Anthropic PBC | Generating character replies | United States |
| DeepSeek | Generating character replies | China |
| ModelsLab | Fallback processing when the above are unavailable | India |
5. Processors and international transfers
We use the following processors to run the Service. They may not use the information for any purpose other than the one entrusted to them.
| Processor | Task | Information transferred | Country |
|---|---|---|---|
| Amazon Web Services | Running servers and databases; storing profile images | All information in section 2 | United States |
| Amazon Web Services (SES) | Sending verification email | Email address | United States |
| Google LLC | Google account sign-in | Google account identifier, email address | United States |
Transfers to these processors and to the AI providers in section 4 are necessary to provide the Service. If you do not want your information transferred, you cannot use the Service.
When and how: transferred over the network as you use the Service. Retention is as described in section 6.
6. How long we keep it
We keep the information in section 2 for as long as your account exists. When you delete your account, we follow this process:
- ·We deactivate the account immediately, ending sign-in and access to the Service.
- ·We keep your data for 30 days from the date of deletion. If you sign back in to the same account within that period, your account and data are restored as they were.
- ·After 30 days we irreversibly delete your conversations, personas, memories, notes, Spark history, profile image and account details.
- ·Characters you created and published remain in the Service with the link to you removed.
The 30-day period exists so that a deletion made by mistake or in the moment can be undone. If you would rather not wait, you can ask us to delete everything immediately using the method in section 7.
We keep database backups so that we can recover from a failure. Backups taken before a deletion may retain the deleted information for up to 30 days longer. Those backups are used only to recover from failures and are discarded automatically at the end of their retention period.
Where the law requires us to retain particular information for a set period, we keep that information separately for that period.
7. Your rights
You may ask at any time to access, correct, delete or restrict the processing of your information. The following can be done yourself from My Page:
- ·viewing and changing your profile image, nickname and display language
- ·viewing, editing and deleting personas, memories and notes
- ·viewing your Spark history
- ·deleting conversations
- ·deleting your account
For anything else, write to the address in section 10. We will act without undue delay and in any event within 30 days of receiving the request, and will tell you the outcome. We may ask for the minimum information needed to confirm who you are.
If you are in the European Economic Area or the United Kingdom, the GDPR also gives you the right to data portability, to restrict or object to processing, and to lodge a complaint with your supervisory authority.
8. Cookies
The Service uses the cookies below. We do not use advertising or behavioural tracking cookies, and we have not embedded any third-party analytics.
| Name | Purpose | Lifetime |
|---|---|---|
| playonly_token | Keeping you signed in (stored so that scripts cannot read it) | 30 days |
| playonly_age_ok | Remembering that you confirmed you are 18 or over | 1 year |
| playonly_locale | Remembering the display language you chose | 1 year |
| playonly_filters | Remembering the last filters you used in the character list | 1 year |
| playonly_rail | Remembering that you collapsed the sidebar | 1 year |
You can refuse or delete cookies in your browser settings. If you refuse the sign-in cookie, you will not be able to use the Service.
The Cookies Notice gives more detail, including browser storage and third-party scripts.
9. How we keep it safe
- ·Passwords are stored using one-way encryption and cannot be read back.
- ·Sign-in credentials are carried in a cookie that scripts cannot read.
- ·All traffic between you and the Service, and between the Service and its processors, is encrypted.
- ·The database sits on a closed network that cannot be reached directly from outside, with access limited to the minimum.
- ·We keep access and error logs so that misuse can be identified.
10. No use by anyone under 18
The Service contains adult content, may not be used by anyone under 18, and we do not knowingly collect personal information from anyone under 18.
If we learn that we hold information about someone under 18, we delete that account and its information without delay. If you know of such a case, please tell us at the address below.
11. Data protection officer
We have appointed a person responsible for personal information, who oversees this area and handles enquiries from users.
Email: admin@playonly.ai
12. Changes to this Policy
This Policy may change as the law or the Service changes. We will publish the effective date and the substance of any change within the Service, and will give at least 7 days' notice of significant changes that disadvantage users.
The Korean text of this Policy is the authoritative version. Where a translation differs, the Korean text prevails.
13. Contact
For questions, complaints or redress concerning personal information, write to admin@playonly.ai.
You may also contact the Korea Internet & Security Agency's privacy centre (privacy.kisa.or.kr, 118), the Supreme Prosecutors' Office cybercrime division (spo.go.kr, 1301) or the National Police Agency cybercrime bureau (ecrm.police.go.kr, 182). If you are in the EEA or the UK, you may complain to your national supervisory authority.