Privacy Policy
Last updated: April 12, 2026
1. Overview
hey. ("we", "us", "our") operates hey.dec8.io. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.
2. Information We Collect
Account Information: When you sign in with Google, we receive your Google account ID, email address, and display name. We use this solely for authentication and account management.
Usage Data: We track daily chat usage counts to enforce free-tier limits. This data is associated with your account and reset daily.
Chat Messages: Messages sent during chat sessions may be temporarily processed by our moderation system. Chat logs may be retained when a report is filed for safety review purposes.
Age Confirmation: We record that you confirmed you are 18+ and the timestamp of that confirmation. We do not collect your actual date of birth.
3. How We Use Your Information
- To authenticate you and maintain your session
- To match you with other users for anonymous chats
- To enforce usage limits and community guidelines
- To moderate content and ensure user safety
- To investigate reports and enforce bans when necessary
- To improve the Service
4. Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:
- With service providers who help us operate the Service (e.g., Supabase for database hosting, Google for authentication)
- When required by law or to respond to legal process
- To protect the safety of our users or the public
5. Anonymity
hey. is designed to be anonymous. Other users cannot see your name, email, or any identifying information. Your chat partner only sees your messages. We actively strip contact information from messages to protect anonymity.
6. Data Storage & Security
Your data is stored securely using Supabase with row-level security policies. We use industry-standard encryption for data in transit (HTTPS/TLS). While we take reasonable measures to protect your information, no method of electronic storage is 100% secure.
7. Data Retention
Account data is retained as long as your account is active. Chat messages from completed sessions are not permanently stored unless a report is filed. Usage data is reset daily. You may request deletion of your account and associated data at any time.
8. Cookies
We use essential cookies to maintain your authentication session. We do not use tracking cookies, advertising cookies, or analytics cookies.
9. Third-Party Services
We use the following third-party services:
- Google OAuth: For authentication. Subject to Google's Privacy Policy.
- Supabase: For database and authentication infrastructure.
- Vercel: For hosting the application.
10. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data
- Withdraw consent at any time by deleting your account
11. Children's Privacy
hey. is not intended for anyone under the age of 18. We do not knowingly collect information from minors. If we learn that we have collected information from a user under 18, we will delete that account immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last updated" date at the top of this page.
13. Contact
For questions about this Privacy Policy or to exercise your data rights, contact us at hey@dec8.io.