1. Who we are and what this Policy covers
HYPERBOND STUDIO PTE. LTD. ("Hyperbond", "we", "us" or "our") operates the Call Me Sensei mobile application, the website at https://www.callmesensei.app/, and related features, content, communications and support services (together, "CMS" or the "Service"). Hyperbond is the controller responsible for the personal data described in this Privacy Policy. Our registered address is 111 North Bridge Road, #08-11, Peninsula Plaza, Singapore 179098.
This Policy describes the categories of personal data we may collect or receive, how we may use and disclose it, how long we may keep it, and the choices and rights available to users. It applies across current and future CMS features where the processing is reasonably described by this Policy. If a new feature materially changes how we use personal data, we will provide any additional notice or consent required by applicable law.
Depending on the activity and applicable law, we process personal data to perform our agreement with you, with your consent, for our legitimate interests, or to comply with legal obligations. This Policy is a notice about our practices and does not waive or limit a right that cannot lawfully be waived or limited.
2. Personal data we collect or receive
2.1 Account, profile and eligibility data
We may process your name or display name, email address, account and authentication identifiers, sign-in provider information, profile details, avatar, preferences, language, country or region, time zone, date of birth or age band, and information used to verify eligibility, protect minors, recover an account or maintain account security.
2.2 Conversations, memories and other content
We process content submitted to, created through or associated with CMS, including prompts, messages, Sensei responses, conversation history, summaries, transcripts, scenario choices, feedback, saved or generated text, images, audio and video, and related metadata. We may derive and store structured Sensei memories, preferences, interests, classifications, relationship or learning progression, achievements, safety signals and other inferences from your use of CMS so the Service can respond consistently, personalize later interactions and maintain continuity.
Content may reveal sensitive information, including information about health, beliefs, sexuality, relationships, identity or location. If you provide that information, you direct us to process it for the feature you use, subject to applicable law. Do not submit sensitive information that is unnecessary for your use of CMS.
2.3 Voice, images and device permissions
Depending on the feature, CMS may process voice recordings, voice samples, generated speech, transcripts, text to be spoken, prompts, conversation context, voice settings and technical metadata. Voice and audio data may be linked to your account and used to provide voice input, speech generation, voice cloning or customization, calls and other audio experiences, and to personalize and maintain the Service.
If you use camera, photo, image, video, microphone, precise location, contacts, notifications, alarms, calendar or similar device features, CMS may process the information made available through that permission for the requested feature and related personalization, safety, analytics or support. You can change device permissions through your operating system, although doing so may prevent a feature from working. Removing permission does not automatically delete information already stored with your account.
2.4 Usage, device, network and diagnostics data
We may process IP address, device and advertising identifiers, device model, operating system, app and SDK version, browser, language, network information, session and account-link identifiers, referring pages, timestamps, feature interactions, lessons, progression and reward events, searches, ad interactions, clicks, crash reports, logs, performance data, security events and similar technical information.
2.5 Purchases, subscriptions and virtual items
We may receive product and offer identifiers, transaction and receipt information, price, currency, purchase, renewal, cancellation, refund and subscription status, and records relating to virtual currency, credits, items, randomized rewards and entitlements. Apple, Google and other authorized sellers process payment credentials under their own terms; CMS generally receives transaction and entitlement information rather than full payment-card details.
2.6 Support, moderation, safety and legal data
We process support requests, complaints, appeals, reports, messages, attachments and relevant account, content, technical and transaction information. We may create or receive moderation decisions, content classifications, blocked-content records, fraud indicators, account-risk information, investigation notes and legal or regulatory records.
2.7 Information from third parties and derived information
We may receive information from sign-in providers, app stores, payment platforms, analytics, advertising and attribution partners, service providers, other users, public sources and authorities. We may combine information from these sources with CMS information and derive memories, preferences, recommendations, audience or eligibility categories, abuse and fraud indicators, performance measures and other insights for the purposes described in this Policy.
3. How we use personal data
3.1 Provide, operate and personalize CMS
We use personal data to create and maintain accounts; authenticate users; generate and deliver text, voice, image and other AI outputs; provide conversations, scenarios, lessons, calls, alarms and notifications; save and synchronize content; maintain Sensei memories and continuity; tailor features, recommendations, offers, progression and experiences; provide purchases and entitlements; and respond to support requests.
3.2 Develop, evaluate and improve the Service
We may analyze content, outputs, usage, feedback, diagnostics and derived information to test and evaluate features, understand engagement, measure performance, troubleshoot defects, improve response quality and personalization, develop new CMS features, conduct research, plan the business and maintain the quality and reliability of the Service. Where appropriate, we may aggregate or de-identify information and use the resulting information for these and other lawful business purposes.
3.3 Safety, security, moderation and enforcement
We use information to verify eligibility, protect accounts, moderate content, detect and investigate suspected fraud, abuse, payment disputes, unlawful activity, security incidents and violations of our Terms, enforce restrictions, preserve evidence and protect Hyperbond, users, service providers and the public.
3.4 Transactions, communications and legal compliance
We use information to process and reconcile purchases, subscriptions, refunds and entitlements; maintain accounting and business records; communicate about the Service, accounts, safety and security; provide marketing where permitted; establish, exercise or defend legal claims; respond to lawful requests; and comply with legal, regulatory, tax and reporting obligations.
3.5 Advertising, attribution and measurement
CMS may display contextual or personalized advertising and may measure advertising, referrals and campaigns. For users aged 18 or older, personalized advertising or cross-app tracking is used only where permitted and after any consent required by the platform or applicable law. Users aged 13 to 17 receive contextual or non-personalized advertising, and CMS does not intentionally use their activity for cross-app advertising tracking.
4. AI, voice, cloud and service-provider processing
4.1 Server processing and security of transmissions
CMS is not an end-to-end encrypted service. Hyperbond and its service providers may access and process content on servers to provide, personalize, moderate, secure, support, evaluate and improve the Service. We use encryption in transit, such as HTTPS or TLS, where appropriate for communications between the app, website and servers. We do not promise a particular encryption method for information stored on a device, in a provider system or on our servers.
4.2 Known AI, voice and cloud providers
CMS uses services provided by NANONOBLE PTE. LTD. (MiniMax), including text-to-speech, voice-cloning and related voice or AI processing. Depending on the voice feature, CMS may send or receive audio, voice samples, text, transcripts, prompts, conversation context, relevant Sensei memories, configuration or output instructions, generated speech, session identifiers and technical or safety information. MiniMax's API privacy policy is available at https://platform.minimax.io/protocol/privacy-policy.
CMS also uses Google AI or cloud services and Alibaba Cloud Model Studio/Qwen for AI, text, image, cloud, storage, safety or related processing. Depending on the feature, these services may process prompts, conversation context, relevant Sensei memories, images, audio or transcripts, inputs, outputs, session and account-link identifiers, technical metadata and safety signals. Google's privacy policy is available at https://policies.google.com/privacy. Alibaba Cloud Model Studio's privacy notice is available at https://www.alibabacloud.com/help/en/model-studio/privacy-notice, and Alibaba Cloud's general privacy policy is available at https://www.alibabacloud.com/help/en/legal/latest/alibaba-cloud-international-website-privacy-policy.
4.3 Other providers and provider changes
We may use, replace or add providers for hosting, storage, content delivery, authentication, AI and media generation, voice processing, safety and moderation, analytics, diagnostics, advertising, attribution, communications, notifications, customer support, billing and other functions. Providers may process information in different countries and under their own terms and privacy notices. We may change providers without amending this Policy where the resulting processing remains reasonably described here; we will give additional notice or obtain consent where a change materially affects users and applicable law requires it.
4.4 Model use, evaluation and service improvement
Hyperbond does not intentionally use or submit user chats, audio recordings or images as training datasets for general-purpose AI models unrelated to providing CMS, and does not instruct providers to train such models on that content. We and our providers may nevertheless process content and outputs to generate results, personalize CMS, evaluate quality, detect abuse, troubleshoot, maintain security, comply with law, and develop or improve CMS or the services used to operate it, as permitted by applicable agreements and law. Provider systems may retain, review, analyze or otherwise process submitted information for these purposes under their applicable terms. You should not submit content that you do not want processed in this manner.
5. When we disclose personal data
5.1 Service providers and business partners
We may disclose personal data to providers and partners that perform or support the functions described in Section 4, as well as professional advisers, auditors, insurers and other parties that help operate, protect, finance or evaluate CMS. They may process information as our service providers or, for some activities, for their own purposes under their terms and applicable law.
5.2 Platforms, advertising and attribution partners
Apple, Google, device platforms, app stores, advertising networks and attribution providers may process store accounts, downloads, purchases, subscriptions, refunds, device information, identifiers, app and ad interactions and campaign events. Where a partner determines its own purposes, it may act independently from Hyperbond. We do not sell personal data for money, but some laws may treat particular advertising or attribution disclosures as a sale, sharing or targeted advertising.
5.3 Legal, safety and corporate events
We may preserve, access or disclose information where we reasonably believe it is necessary to comply with law, legal process or regulatory requests; investigate or prevent fraud, abuse, security incidents or harm; enforce agreements; protect rights or property; obtain professional advice; or establish, exercise or defend claims. Information may also be disclosed or transferred in connection with a financing, investment, merger, acquisition, reorganization, asset sale, insolvency or transfer of all or part of CMS or Hyperbond's business.
5.4 At your direction or in public features
We may disclose information when you direct us to do so, connect CMS to another service, share generated content, participate in a public or social feature, or otherwise choose to make information available. Information made public or shared with another person may be copied, redistributed or used outside our control.
6. Cookies, tracking and consent controls
CMS and its website may use cookies, SDKs, pixels, local storage and similar technologies for sign-in, security, preferences, consent records, analytics, diagnostics, advertising, attribution and measurement. We request consent before non-essential tracking where required. Available choices may include website consent controls, in-app settings, device permission and advertising settings, platform controls and a recognized Global Privacy Control signal where applicable. Withdrawing consent does not affect processing that was lawful before withdrawal.
7. Retention, deletion and de-identification
We generally retain account, profile, chats, Sensei memories, transcripts, voice recordings, generated content, preferences, progression and related personalization data for the lifetime of the account because this information provides continuity, saved content and personalization. We may retain particular information for a shorter or longer period depending on the feature, user settings, operational need, legal obligation, dispute, safety or fraud concern, provider practice, backup cycle and the time reasonably needed to establish, exercise or defend claims.
When an account is deleted, we initiate deletion or de-identification of account-linked personal data from systems under our control within a commercially reasonable period, subject to technical limitations and lawful exceptions. Information may remain for a period in backups, logs, cached copies, de-identified datasets, provider systems and records retained for security, fraud prevention, accounting, tax, legal or dispute purposes. Those copies are deleted, overwritten, isolated or de-identified in accordance with applicable retention cycles, provider arrangements and law.
We may delete or de-identify information when it is no longer reasonably needed and are not required to retain content indefinitely unless applicable law or an express paid-service commitment requires otherwise. Deleting CMS does not itself delete your account, and deleting your account does not automatically cancel a subscription billed by Apple, Google or another seller.
8. International processing and transfers
Hyperbond operates from Singapore, and personal data may be stored or processed in Singapore, the United States and other countries where Hyperbond, its affiliates, providers or partners operate. Those countries may have different data-protection laws. Where required, we use contractual, organizational or other lawful safeguards for international transfers, but no transfer mechanism eliminates every difference between legal systems.
9. Security
We use administrative, technical and organizational measures designed to protect personal data, which may include access controls, authentication, logging, encryption in transit, data minimization, vendor review and incident response. Security measures vary by system and risk and may change over time. No method of storage or transmission is completely secure, and we cannot guarantee that information will never be accessed, disclosed, altered, lost or destroyed. We will provide legally required breach notifications.
10. Choices and privacy rights
Depending on your location and the feature, you may be able to review or correct profile information, manage permissions and notifications, change advertising choices, withdraw consent, obtain an available copy of account data, or initiate account deletion in CMS. Applicable law may also give you rights to access, correct, delete, restrict or object to processing, obtain portability, opt out of sale, sharing or targeted advertising, limit certain uses of sensitive data, appeal a decision, or complain to a regulator.
To exercise a right, use the relevant CMS control or contact support@hyperbond.studio. We may require information reasonably necessary to verify identity, account ownership, authority and the scope of the request. Rights are subject to applicable definitions, exceptions and retention obligations. We may decline, limit or charge for a request where permitted by law, and a feature may stop working if the information needed for it is deleted or processing consent is withdrawn.
Deleting a CMS account removes access to stored content, personalization and unused account entitlements in accordance with Section 7. It does not automatically cancel an App Store or Google Play subscription. Cancel any externally billed subscription through the relevant platform before deleting the account if you do not want it to renew.
11. Children and teenagers
CMS is not intended for anyone under 13, and a higher minimum age applies where required by local law. Users aged 13 to 17 must have the involvement or permission of a parent or legal guardian where required and must provide truthful age information. CMS does not intentionally provide personalized advertising or cross-app advertising tracking to users identified as under 18.
If we reasonably believe an account belongs to someone below the applicable minimum age, we may restrict, investigate and delete the account and associated information. A parent or guardian may report an underage account at support@hyperbond.studio. We may request limited verification information and retain it only as reasonably necessary to handle the report and protect the Service.
12. Regional provisions
12.1 Singapore
For users covered by Singapore's Personal Data Protection Act, Hyperbond is responsible for reasonable purposes, notification, consent where required, access and correction, accuracy, protection, retention limitation, transfer limitation and breach response. You may contact our Data Protection Officer using Section 14 and may complain to the Personal Data Protection Commission.
12.2 EEA, United Kingdom and Switzerland
Where these laws apply, the legal bases described in Sections 1 and 3 govern our processing. You may have rights of access, correction, erasure, portability, restriction, objection and consent withdrawal, and may complain to your local supervisory authority. Our legitimate interests include providing and improving CMS, personalization, safety, fraud prevention, support, business planning and protecting legal rights. International transfers may rely on adequacy decisions, approved contractual clauses or another lawful mechanism.
12.3 California and other United States jurisdictions
Depending on applicable law, you may have rights to know or access personal data, correct, delete, obtain a portable copy, opt out of sale, sharing, targeted advertising or certain profiling, limit certain uses of sensitive data, and appeal a decision. We do not sell personal data for money. Advertising and attribution disclosures involving eligible adults may constitute sharing or targeted advertising under some laws. We do not knowingly sell or share the personal data of users identified as under 18 for personalized advertising.
12.4 Other jurisdictions
Users in Australia, Canada, Indonesia, Malaysia, New Zealand, the Philippines, Thailand and other jurisdictions may have additional local rights. We apply mandatory local requirements where they govern our processing. If this Policy conflicts with a non-waivable local requirement, that requirement controls to the extent of the conflict.
13. Changes to this Policy
We may update this Policy to reflect changes to CMS, providers, technology, law, risk or business operations. We will post the updated Policy with a revised date and provide additional notice or obtain consent where required. Unless applicable law requires otherwise, the updated Policy applies from its stated effective date.
14. Contact
Controller and Data Protection Officer: HYPERBOND STUDIO PTE. LTD. Address: 111 North Bridge Road, #08-11, Peninsula Plaza, Singapore 179098. Email: support@hyperbond.studio. Telephone: +65 8528 3448.