Privacy Policy

Last updated: October 5, 2026

This Privacy Policy describes how Urban Inc Studio ("we", "us", or "our") collects, uses, and protects information when you use the HiMania application ("App"), on Android or in a web browser. By creating an account you confirm you have read this policy and our Terms of Service, and you agree to the practices described here.

1. Information We Collect

1.1 Account information (private)

• Username: an auto-generated handle you can change; shown to other users everywhere in the App.
• Display name: optional, and hidden from other users unless you turn it on yourself in Edit Profile. While it is hidden, it is not shown anywhere and cannot be found by searching for it.
• Email address (or your Google account, if you sign in with Google) — used for login, verification, and account recovery. Never shown to other users.
• Password: stored as a salted hash — we cannot read your actual password.
• Date of birth: collected once, before your account is created, solely to verify you meet the App's 18-and-over age requirement. We do not display your birth date to other users.
• Region and app language.

1.2 Public profile information

The following is visible to other users of the App:

• Your username and, if you set one, a profile photo or a sticker avatar.
• Your display name, but only if you have chosen to show it (see 1.1).
• Your bio, and any of the optional profile detail fields (age, location, occupation, zodiac, hobbies) you choose to mark as visible — each field has its own visibility toggle, so what you disclose is your choice, field by field.
• Your follower and following counts, and the lists of accounts you follow and that follow you.
• Your sticker collection, if you choose to show it, and any cards you list in the Card Market.
• Any badge or label your account carries — a verification checkmark, and the "creator" label if you have joined the creator programme. See Section 9.

1.3 Content you create

• Posts, comments, and ratings you make in the App's feed and chat rooms — visible to other users, same as any social app.
• Stories: photos or short videos that are visible to other users for 24 hours and then stop being shown. We record who viewed your story, and that list is shown to you, the author. We also record ratings and replies other users send to your story; a reply is delivered as an ordinary direct message.
• Direct messages you exchange with other users — visible only to you and the other person in that conversation. A direct message can also carry a reference to a post or a story, which the other person can open.
• Follows, room memberships, and reports you submit about other users' content.
• Chat messages with the App's AI assistant (Himai) — private, stored to provide continuity of conversation, never shown to other users.
• Messages and interactions with the AI characters from Nagomi Worlds (@aria, @nora, @yuki) — see Section 10 for what is shared, and only if you link your accounts.

1.4 Photos and videos you upload

Every photo or video you upload is screened automatically before being accepted (see Section 3). In the public parts of the App this screening covers all content our Terms prohibit. In private messages between adults it is deliberately narrower: it looks only for sexual or exploitative content involving a person under 18, and for real depictions of death or mutilation. What two adults otherwise send each other in private is not screened. The kinds of upload in the App are:

• Your profile photo — public, shown to other users wherever your avatar appears (profile, posts, comments, direct messages).
• Photos and videos (up to 3 minutes in the feed, up to 60 seconds in direct messages and chat rooms) posted to the feed, sent in direct messages, or shared in a chat room — visible according to the normal rules of that feature (public in the feed and chat rooms, private between participants in a direct message). Videos are re-encoded and compressed on our server before being stored, regardless of the original file you uploaded.
• Stories (photos, or videos up to 30 seconds) — visible to other users for 24 hours, then no longer shown. See Section 7 for how long the file itself is kept.
• Card images you submit to the Card Market, which are reviewed by us before they can appear.
• Photos sent to the AI assistant in chat — private, used only so the assistant can "see" and react to the photo.

1.5 Other data

• Device token: a Firebase Cloud Messaging (FCM) token used solely to deliver push notifications to your device.
• App integrity token: a Firebase App Check token, generated on your device, sent with requests so we can tell a real installation of the App from an automated script. It identifies the app installation, not you.
• IP address: processed when you sign in, used to protect your account — rate limiting and detecting sign-ins from a new location. We do not use it to track you across the web.
• Usage data: activity statistics and app interaction data used to personalize your experience, and — if you join the creator programme — to work out whether your account still meets its activity requirement.
• Purchase records: if you buy coins or a subscription, our payment processor (RevenueCat, see Section 3) tells us what you bought and an anonymous transaction ID — we never receive or store your card details, which are handled entirely by Apple's or Google's own payment systems.

2. How We Use Your Information

We use the information collected to:

• Provide, operate, and personalize the App experience, including the feed, stories, chat rooms, and direct messages.
• Generate AI responses when you chat with the App's AI assistant.
• If you link your Nagomi Worlds account, deliver the conversations and reactions of its AI characters (see Section 10).
• Send push notifications (e.g., a direct message, a reply, activity on your posts or stories).
• Verify you meet the App's minimum age requirement before your account is created.
• Moderate content — screening uploaded photos and videos automatically (in full for public content, and only for content involving minors or real gore in private messages), and reviewing content reported by other users.
• Work out eligibility for the creator programme and for a verification checkmark, from your public activity in the App (see Section 9).
• Protect your account and the App against abuse — including rate limiting, detecting suspicious sign-in attempts, and alerting you to logins from a new location.
• Calculate in-app statistics and progress.
• Process purchases and manage subscriptions.
• Improve the App and diagnose technical issues.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

The App uses the following third-party services, each with their own privacy policies:

• Firebase (Google LLC): used for push notifications (Firebase Cloud Messaging), account authentication (Google Sign-In), and app-integrity checks (Firebase App Check). Firebase Privacy Policy
• Google (Gemini API): used to generate the AI assistant's replies. The messages in that conversation are sent to Google for processing. Gemini API Terms · Google Privacy Policy
• Together AI: used to automatically screen uploaded photos and videos (via frames extracted from the video) for prohibited content, to generate a description of a photo you send to the AI assistant so it can react to it, and to compute text embeddings used by the assistant's memory. The relevant images and text are sent to Together AI (a United States–based provider) for processing. Together AI Privacy Policy
• Cloudflare, Inc.: used to store uploaded photos and videos (Cloudflare R2) — profile photos, stories, card images, and any photo or video posted to the feed, a chat room, or a direct message — kept in private storage. Cloudflare Privacy Policy
• Hetzner Online GmbH: your account data and messages are stored on a PostgreSQL database hosted on Hetzner's cloud infrastructure in Germany (EU). Hetzner Privacy Policy
• IP-API (ip-api.com): used to determine the approximate country of a sign-in from your IP address, so we can alert you to logins from a new location. Only your IP address is sent, and only at the moment you sign in. IP-API Legal & Privacy
• RevenueCat, Inc.: used to process in-app purchases and manage subscriptions across Apple's and Google's app stores. RevenueCat receives your purchase events and an anonymous app-user identifier; it does not receive your payment card details. RevenueCat Privacy Policy
• Resend: used to send transactional emails (email verification, password reset). Your email address is shared with Resend solely to deliver these emails. Resend Privacy Policy

4. Content Visible to Other Users

Because the App is social, it is worth being explicit about what other users can and cannot see:

• Visible to other users: your username, avatar/profile photo, bio, any profile detail field you mark visible, your display name if you have chosen to show it, your posts, comments and ratings, your stories while they are live, who you follow and who follows you, your activity in chat rooms, your Card Market listings, your badges, and (only to the other participant) your direct messages.
• Visible only to you: the list of people who viewed each of your stories, and — for a post you made — who gave it which rating.
• Never visible to other users: your email address, your date of birth, your password, your display name while it is hidden, your chat history with the AI assistant, any photo you send to the assistant in that private chat, and your direct messages with the AI characters from Nagomi Worlds.

5. Moderation, and What Other Users Can Do

Some moderation is carried out by other users, not only by us. A person who creates a chat room moderates that room, and may appoint other users as moderators of it. Within that room — and only within it — they can remove messages, unpin messages, and ban an account from the room. They see the same content any member of the room sees; being a room moderator does not give anyone access to your account information, your direct messages, or your activity elsewhere in the App.

We also operate App-wide moderation. Reported content is reviewed by us, and we may remove content or restrict an account across the whole App. When you report something, we record what you reported and that you reported it.

6. Data Storage and Security

Your data is stored on servers located in the European Union (Hetzner, Nuremberg, Germany). Some AI features transfer the relevant message or image (including frames extracted from a video) to AI providers located outside the European Union — Google and Together AI — for processing. We implement reasonable technical measures to protect your information against unauthorized access, alteration, or disclosure. However, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data — including messages, photos, videos, posts, stories, statistics, and profile information — is permanently deleted from our systems within a reasonable timeframe. Some anonymized or aggregate data (for example, a group chat message you sent, with the author link removed) may be retained to avoid disrupting other users' conversations — see our Terms of Service.

Stories stop being shown to anyone 24 hours after they are posted, or immediately if you delete them. The underlying file is then removed from storage by a scheduled clean-up. One exception: if a story has been reported, the file and its record are kept until we have reviewed that report, so that a rule-breaking story cannot be made to disappear simply by waiting a day.

A ban from a chat room is recorded with the room it applies to, and a temporary one is cleared once it expires.

For conversations with the AI characters from Nagomi Worlds, see Section 10.5.

8. Your Rights — Account Deletion

You have the right to delete your account and all associated data at any time. To do so, open the App, tap the Settings icon (visible from your profile, Rooms, Feed, or Shop), scroll to the bottom, and tap "Delete Account". This action is irreversible and will permanently remove all your data, including posts, stories, comments, direct messages, and any custom room you created.

You may also request data deletion by contacting us at urbanincstudio@gmail.com.

9. Creator Programme and Badges

Joining the creator programme is voluntary and is done from within the App. If you join, your account carries a public "creator" label, and we use your public activity — how recently and how often you post, and how other users respond to your posts — to work out whether you still meet the programme's requirement, and whether you qualify for a verification checkmark. Those calculations use activity that is already public in the App; they do not use your direct messages or your chat with the AI assistant.

A verification checkmark can be earned this way, or it can come with a paid subscription. The two are shown in different colours so other users can tell them apart, and which one your account carries is public. You can leave the programme at any time, which removes the label.

10. AI Characters from Nagomi Worlds

The accounts @aria, @nora and @yuki are AI characters from Nagomi Worlds, a separate app published by the same developer. They are not real people. Wherever they appear in the App — profile, direct messages, message list, posts and comments — they carry an "A.I." label. Their messages, posts, follows, likes and comment replies are generated automatically by AI.

10.1 If you have not linked your accounts

Apart from public messages in the General chat room (see Section 10.6), nothing about you is shared with Nagomi Worlds. If you write to one of the characters, you receive a single automatic reply from the App explaining that she only talks here with people who linked their Nagomi Worlds account; your messages stay in HiMania. Following a character or commenting on her posts is likewise not shared.

10.2 How linking works

Linking can only be started from inside Nagomi Worlds, when you agree to it there. It happens in one of two ways:

• Same verified email: Nagomi Worlds asks HiMania whether an account with the same verified email address exists. HiMania only answers whether there is a match; it does not send your email address or any other information back.
• Your username: you tell the character your HiMania username. She then sends you an ordinary message request in HiMania, and the link only happens if you accept it and confirm in the conversation that it is you.

10.3 What is shared while your accounts are linked

For each character you are linked with, HiMania shares with Nagomi Worlds:

• your HiMania user ID, your username, your app language, and your display name only if you have made it public;
• the messages you send to that character — text, and photos, voice messages and videos through temporary links that expire within an hour — and when you have read her messages;
• whether push notifications are turned on for you, so her messages are sent where you will see them;
• when you follow or unfollow her, and the comments you leave on her posts (with your username), including when you delete one.

HiMania never shares your email address, password, date of birth, IP address, device token, your direct messages with other people, your activity elsewhere in the App (except the public General room, see Section 10.6), or your purchases.

10.4 How Nagomi Worlds uses it

Nagomi Worlds uses this information to generate the character's replies and reactions, using AI providers such as Google (Gemini). The conversation you have with a character through HiMania becomes part of your Nagomi Worlds account, so she remembers it in both apps, and it is governed by the Nagomi Worlds Privacy Policy. Public interactions (follows, likes, comments) are kept by Nagomi Worlds only as short-term context for about 48 hours. When a character replies publicly to a comment, that reply is written without using anything from your private conversations.

10.5 Unlinking and deletion

You can end the link at any time by blocking the character, by deleting your conversation with her in HiMania, from inside Nagomi Worlds, or by deleting either account. After unlinking, nothing more is shared. Deleting your HiMania account deletes HiMania's copy of the conversation and ends the link; the copy stored by Nagomi Worlds as part of your Nagomi Worlds account is deleted when you delete that account.

10.6 @nora in the General chat room

The character @nora also takes part, occasionally, in the public General chat room, and only there. To decide whether and how to reply, HiMania shares with Nagomi Worlds the recent public messages of that room — the text, the author's username and HiMania user ID, and the time — for every participant, whether or not they have linked a Nagomi Worlds account, and tells Nagomi Worlds when someone mentions her or replies to her there. Photos, videos and voice messages are not shared, only a note that one was sent. Nagomi Worlds keeps this only as short-term context (about 48 hours) and never adds it to anyone's permanent memory. In the room she never uses or reveals anything from private conversations, and she does not reply to people who have blocked her. Her messages there are generated automatically by AI and pass through the same content filter as everyone else's.

11. Children's Privacy

The App is intended for users aged 18 and older, and we verify a self-reported date of birth before an account can be created. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:
urbanincstudio@gmail.com