Privacy Policy

Keyboard Reply Suggestions

Content you type using this keyboard is used to generate suggested replies (you can turn this off in settings), generated by the third-party AI provider Volcano Engine. See “Third-party AI service” in Section 10.

We will ask for your consent before you first use this feature. For each input field, up to three requests may be made. Each request sends only the most recent 120 characters entered into that field using this keyboard; suggested replies do not read any other text that was already in the input field. "Help Me Edit" and "Cloud Sentence Input" read text in the input field differently; see the "Help Me Reply" section below and Section 11.

1. Scope

This policy applies to the processing of personal information arising from your use of ReplyHer products and services.

2. Information We Collect

• Profile information (gender, optional): used only to determine the tone of suggested replies. You can change it at any time by editing your profile.
• Account information: your phone number, email address, or other identifying information provided when you register or sign in, or the phone number verified by your mobile carrier when you use one-tap sign-in with this device's phone number (Android and iOS). For the identifier we receive when you use Sign in with Apple, see the "Sign in with Apple" section below. For the information we receive when you use one-tap sign-in with HUAWEI ID, see the "One-tap sign-in with HUAWEI ID" section below.
• Device and log information: device model, operating system version, system language, time zone settings, App Store region (iOS only), IP address, browser/app version, access times, and activity records. System language, time zone, and App Store region are used only to understand the regional distribution of our users and improve services in those regions. They are not used to determine your precise location.
• Usage and content information: text content you generate, content you enter, and your preferences when using the Service.
• Customer support and feedback information: information, correspondence, and attachments you provide when contacting us.
• Transaction information: necessary payment records, such as order numbers, payment status, and subscription type (excluding full bank card details).
• Permission usage information: permissions that require your authorization are accessed only after you choose to use the related feature and grant them; the normal permissions below are granted by the system at installation, without a prompt. Access network state / Wi-Fi state (Android; normal permissions granted at installation, with no prompt): used to determine whether one-tap sign-in with this device's phone number can be completed over mobile data; SDKs such as Alipay and WeChat may also use them to determine the network environment; the Android keyboard also uses them to determine whether the network is currently available before sending cloud suggestion requests (only after you turn on "Cloud Sentence Input"). Change network connectivity (Android; normal permission): when Wi-Fi and mobile data are both on, the phone number verification SDK temporarily connects to your carrier over mobile data to verify this device's phone number, which may use a small amount of mobile data. Vibration (VIBRATE; Android; normal permission): used for vibration feedback when you press keyboard keys. Foreground service (FOREGROUND_SERVICE and FOREGROUND_SERVICE_MEDIA_PROJECTION; Android; normal permission): used only when you use screenshot-based reply and agree to screen capture, to keep the capture service running while screenshot-based reply is available, with a system notification showing its status. Notifications (POST_NOTIFICATIONS; Android): used to send notifications, such as automatic renewal payment reminders; on system versions that require authorization, notifications are sent after you grant it. You can turn off notifications in system settings.
• Full-screen notifications (USE_FULL_SCREEN_INTENT; Android): used only when you use screenshot-based reply, screen capture permission is needed, and the authorization page cannot be opened directly, to open the screen capture authorization page through a system notification.
• Clipboard information: on Android and iOS, the keyboard reads clipboard text at most once per action, as needed, after you explicitly tap "Help Me Reply", "Another Batch", switch styles, or take a similar deliberate action. It may not read the clipboard if permission is denied or previously submitted content is reused. On HarmonyOS, after you first authorize pasting through the system's secure "Paste" button, the same text may be reused during that session when you request another batch or switch styles. Simply opening the keyboard only checks metadata, such as whether the clipboard has changed; it does not read clipboard text. In password fields, "Help Me Reply" generation is unavailable, clipboard content is neither uploaded nor used for generation, and the Android and iOS keyboards do not read clipboard text. When generating text replies, we send the chat text you copy and actively submit to ReplyHerAI servers to generate suggestions. Your submissions and generated replies are saved in your account records so you can view your history; see Section 10 for details of third-party generation services. To identify invitation codes and attribute referrals, the Android app also automatically attempts to read the clipboard once on the first launch after you accept this policy (existing users who have completed onboarding are excluded). The H5 sign-in page attempts to read it when you first tap the page's content area and again when you tap "Have an invitation code?". This is skipped for the sign-in page embedded in onboarding, when an invitation code has already been identified, or when linking an account. Invitation code recognition takes place only on your device: it parses the code format after the ReplyHer invitation phrase prefix (the brand name followed by the Chinese word for "passphrase" and "#"). The identified code is used to attribute the referral when you register; no other clipboard content is uploaded. On Android 12 and later, the system may display a "Pasted" notification when clipboard text from another app is read. When you actively use a copy function, such as copying an invitation phrase or a Moments caption, we write the text you selected to the clipboard. You may withdraw consent by deleting your account or contacting us at support@replyher.com. Once withdrawal takes effect, we stop the processing based on that consent and delete the related account records, except where retention is required by law or regulation. See Section 7 for account deletion and data deletion procedures. You may also turn off "Cloud Sentence Input" in keyboard settings (shown as "Cloud Whole-Sentence Input" in the HarmonyOS keyboard before version 1.2.6) or adjust the "Paste from Other Apps" permission in iOS settings to disable the relevant features.

Sign in with Apple

On some versions of our iOS app you can choose "Sign in with Apple" to create or sign in to a ReplyHerAI account. The option is offered in the iOS app, and whether to use it is up to you; if you do not, you can still sign in with a phone number.

• What we receive: after you confirm on the system sheet, Apple issues an identity token to us. From that token we take the user identifier Apple generates for ReplyHerAI alone (Apple calls it the "sub"), together with the issuer, audience, and issue and expiry times that we use to verify that the token is genuine. We do not ask Apple for your name or email address, and we do not take an email address or any other personal information out of the token, so we neither receive nor store an Apple private relay email address.
• What we store: first, the identifier above, which serves as your account identifier in ReplyHerAI so that the same Apple account always signs in to the same account; second, the authorization credential Apple issues once you approve, which we store encrypted. Neither is sent to the app on your device, and neither is written to our logs.
• Purpose: the identifier and the credential are used only to create and recover your account, to establish the session for this sign-in, and to revoke the authorization with Apple when you delete your account. They are not used for anything else.
• Deleting your account and revoking the authorization: when you delete your account, we clear the Apple user identifier from it in the same operation and use the credential above to revoke ReplyHerAI's authorization for your Apple account; once revocation succeeds, the credential is deleted. If an attempt fails, for example because of a network error, we retry automatically, and if it still does not succeed our staff follow it up. See Section 7 for how to delete your account. If you registered through someone's invitation, the invitation reward ledger keeps an irreversible digest of the identifier, under the same rules as for phone numbers, so that each account receives an invitation reward only once; the digest cannot be turned back into your identifier.
• Apple's role: for the Apple account and sign-in verification it provides to you, Apple is an independent handler of personal information and processes information under its privacy policy.

One-tap sign-in with HUAWEI ID

In the HarmonyOS app, if your device is signed in to a HUAWEI ID registered in the Chinese mainland (excluding Hong Kong, Macao, and Taiwan) and that HUAWEI ID is linked to a phone number, you can choose "One-tap sign-in with HUAWEI ID" to create or sign in to a ReplyHerAI account without receiving an SMS verification code. Whether to use it is up to you; if you do not, you can still sign in with an SMS verification code.

• What the sign-in panel shows: when you open the sign-in page, we obtain a masked form of that phone number (with the middle digits hidden) through the HUAWEI ID service built into HarmonyOS. It is shown only on the HUAWEI ID sign-in panel provided by the system; it is not passed to the web page, not uploaded to our servers, and not stored.
• What we receive: after you tick the box agreeing to the Terms of Service, this Privacy Policy, and the HUAWEI ID User Authentication Agreement on the panel and tap sign in, Huawei issues a one-time authorization code (valid for 5 minutes and usable only once). Our server uses it to obtain from Huawei the phone number linked to your HUAWEI ID and verified by Huawei. The result Huawei returns also contains user identifiers Huawei generates for ReplyHerAI (OpenID and UnionID); we do not read, store, or use them.
• What we store: of the information obtained from Huawei, we store only the phone number, which serves as your ReplyHerAI account identifier; it is the same account as when you sign in with an SMS verification code. Our registration and sign-in records note that HUAWEI ID one-tap sign-in was used. The sign-in page records whether one-tap sign-in with HUAWEI ID is available, the actions taken on the panel, and, when it could not be used, the reason category (such as not signed in to a HUAWEI ID, no phone number linked to the HUAWEI ID, device not supported, network, timeout, or consent not given), for statistics and troubleshooting; these records do not contain phone numbers. The authorization code is used only to obtain the phone number; we do not store the code itself or write it to our logs, and phone numbers in our service logs are recorded only in masked form.
• Purpose: the phone number is used only to identify your account and sign you in. It is not used for marketing, and we will not send you marketing text messages because of it.
• Deleting your account: when you delete your account, the phone number is handled together with the account as described in Section 7. Because we do not store any HUAWEI ID user identifier, there is no authorization to revoke with Huawei when you delete your account, and we do not do so.
• Huawei's role: for the HUAWEI ID and phone number verification services it provides to you, Huawei is an independent handler of personal information and processes information under the HUAWEI ID User Authentication Agreement.

Help Me Reply

When you tap "Help Me Reply", the text you copied is sent to ReplyHerAI and passed by our servers to the third-party AI provider Volcano Engine to generate a reply, and is saved in your account so you can view your history. It is deleted when you delete your account.

You must ensure that you have the right to provide the other person's messages. Style examples may contain other people's information; please check before sharing them. Content is used only to generate replies and let you view your history. Internal access is subject to access controls.

When you tap "Help Me Edit" on the keyboard, the keyboard reads the draft you have already written in the current input field and sends it to ReplyHerAI to generate several rewrites for you to choose from. "Help Me Edit" reads and sends the draft when you tap it. When you adopt a rewrite, the keyboard rereads up to 500 characters before the cursor on your device to check it; text read for this check is not uploaded. The draft and the rewrites are not saved to your account records, and our servers do not retain their original text; we keep only an irreversible digest of each rewrite to measure whether rewrites are used, and the text cannot be recovered from the digest. Rewrites are generated by our servers through a third-party generation service; see Section 10.

Learning from Your Past Wording (Not Yet Available)

When this feature becomes available, we will ask for your separate consent first. It will be off by default.

It will use only sentences you have written or edited in ReplyHerAI, not text you type elsewhere. You can turn it off at any time. Once it is off, learning stops and anything already learned is cleared immediately.

3. How We Use Information

• To provide, maintain, and improve our products, services, and features.
• To keep the Service secure and detect and prevent fraud, abuse, or violations.
• To analyze operations, monitor performance, and improve the product experience.
• To communicate important notices, service changes, and customer support responses.
• To meet obligations imposed by laws, regulations, or regulatory authorities.

4. Legal Bases for Processing Personal Information

We process personal information only where permitted by law, primarily on the following bases:

• Your consent.
• Necessity for entering into or performing a contract.
• Compliance with legal obligations or public safety needs.
• Other circumstances provided for by laws and regulations.

5. How We Share and Disclose Information

We do not sell your personal information to third parties. We share necessary information only in the following circumstances:

• With cloud, SMS, email, analytics, or payment service providers as needed to deliver features.
• To provide AI generation, we send the content you submit to the third-party AI provider Beijing Volcano Engine Technology Co., Ltd. See “Third-party AI service” in Section 10.
• To check images generated in AI Moments for content safety, we send generated images to the content moderation service of Qiniu Cloud (Shanghai Qiniu Information Technologies Co., Ltd.).
• Where disclosure is required by laws, regulations, or regulatory authorities.
• With your express authorization or consent.

6. Information Storage, Protection, and Cross-Border Transfers

We use security measures such as access controls, encrypted transmission, and log audits to protect your information against unauthorized access, disclosure, or alteration. We retain your information for as long as necessary to provide the Service and store and delete it in accordance with laws and regulations. Your personal information is stored in China; the services listed under “Third-party AI service” in Section 10 process it in China. If personal information is transferred outside China in the future, we will first update this policy, conduct security assessments and obtain the necessary authorizations in accordance with the law.

7. Your Rights

• Access, copy, correct, or delete your personal information.
• Withdraw consent or delete your account (which may affect some features).
• Obtain explanations of the rules governing the processing of personal information.

Account deletion procedure: you can delete your account in either of the following ways: (1) In the app, go to "Me" > "Edit Profile" > "Delete Account" at the bottom of the page. Read and acknowledge the account deletion notice, then tap "Confirm Account Deletion". Deletion takes effect immediately upon confirmation. Account details, sign-in information, chat history, usage records, and other account data are permanently deleted and cannot be recovered. (2) By email, send a deletion request to support@replyher.com, including your registered phone number and a statement that you are requesting account deletion. After verifying your identity, we will complete deletion within 15 working days and inform you of the outcome. Information that must be retained under laws or regulations will be kept for the statutory period and then deleted or anonymized.

8. Sensitive Personal Information

Processing this information is necessary to provide the relevant features. If you do not provide it or withdraw consent, you cannot use the features that depend on it. Disclosure or unlawful use of this information could harm your privacy or that of others, as well as personal safety and property. Please submit only content you have the right to provide and that is necessary for the feature. Before you first use a relevant feature, we explain the purpose and necessity of processing through this policy and notices within the feature, and obtain your consent. You may withdraw consent by deleting your account or contacting us at support@replyher.com. Once withdrawal takes effect, we stop the processing based on that consent and delete the related account records, except where retention is required by law or regulation. See Section 7 for account deletion and data deletion procedures. Withdrawal does not affect processing already carried out on the basis of your consent before withdrawal.

9. Protection of Minors

The Service is not intended for children under 14. If you are a minor, please use the Service with your guardian's consent and guidance.

10. Third-Party Services and SDKs

Our apps integrate the third-party SDKs listed below to provide necessary features such as membership payments, WeChat sign-in and sharing, one-tap sign-in with this device's phone number, and advertising attribution. These SDKs are developed by third parties and process information under their respective privacy policies. We do not initialize any third-party SDK before you accept this policy. Payment SDK payment functions are called only when you actively select the corresponding payment method. The iOS app does not integrate third-party payment SDKs; membership purchases are handled through Apple's StoreKit.

• SDK name: App Payment Client SDK (alipaysdk-android 15.8.42 on Android; cashiersdk 15.8.43 on HarmonyOS). Provider: Alipay (Hangzhou) Information Technology Co., Ltd. Use and purpose: called when you select Alipay in ReplyHerAI, to complete payment, identify payment risks, and protect transactions and accounts. Information collected: Android ID, OAID, sensor list, screen density, carrier information, Wi-Fi parameters and network type, app name/version, and whether the Alipay app is installed. Actual collection is limited by the operating system, permissions granted, and the SDK's actual behavior. Privacy notice: Alipay App Payment Client SDK Privacy Notice.
• SDK name: WeChat OpenSDK Android (wechat-sdk-android 6.8.34 on Android; wechat_open_sdk on HarmonyOS). Provider: Shenzhen Tencent Computer Systems Co., Ltd. Use and purpose: checks whether WeChat is installed and supports subscription signing only when you enter a membership payment or subscription signing flow, to determine whether to display WeChat Pay; opens WeChat to complete payment when you select WeChat Pay; also supports WeChat sign-in and sharing to WeChat. Information collected: order information needed for the payment is passed to WeChat, including the app ID, merchant number, and prepayment order number. When you actively share to WeChat, the content you choose to share (link, title, description, thumbnail, or image) is passed to WeChat. The SDK may read the operating system version, device model, app package name/version, whether WeChat is installed, and the network state. It does not collect content you type. Privacy notice: WeChat Open SDK Privacy Guidelines.
• SDK name: Alibaba Cloud Phone Number Verification SDK (Android; 2.14.19 on iOS). Provider: Alibaba Cloud Computing Co., Ltd. Use and purpose: one-tap sign-in with this device's phone number. When you open the sign-in page, the device environment is checked (such as whether a SIM card is inserted and whether mobile data can be used), and one-tap sign-in is offered only when the device has a SIM card from China Mobile, China Unicom, or China Telecom; it is not initialized before you accept this policy. After you tick the consent box on the carrier's authorization page and tap "One-tap sign-in with this number", your carrier verifies this device's phone number and we use the result to sign you in or register you (if you are already signed in, to link that phone number to your current account). If you do not use it, you can still sign in with an SMS verification code. On iOS, the SDK does not request any additional system permission, but you need to allow the ReplyHer app to use cellular data. Information collected: network type, IP address, device manufacturer, device model, operating system version, SIM card status, and carrier type (used to show on the sign-in page which carrier provides the verification). After you confirm on the authorization page, your carrier verifies this device's phone number, and Alibaba Cloud's phone number verification service then returns the number to our server for sign-in. During authorization the app receives only a one-time token; the masked number on the authorization page is displayed by the SDK, and our app code does not read the number. After sign-in completes, as with SMS verification code sign-in, your account phone number is returned to the app with the sign-in result so that your account can be displayed. The sign-in page records whether one-tap sign-in with this device's phone number is available and, when unavailable, the reason category (such as no SIM card, mobile data disabled, unsupported carrier, timeout, or consent not given), for statistics and troubleshooting; these records do not contain phone numbers. Our registration and sign-in records note that one-tap sign-in with this device's phone number was used; the one-time token is used only to obtain the phone number, and we neither store it nor write it to our logs; phone numbers in our service logs are recorded only in masked form. The phone number verification SDK does not collect your app list, precise location, or content you type. Privacy notice: Phone Number Verification Service Privacy Policy. The carrier's authentication service terms are shown on the authorization page, and China Mobile, China Unicom, and China Telecom each process information under their own terms.
• SDK name: Ocean Engine Conversion SDK (iOS, BDASignalSDK). Provider: Beijing Ocean Engine Network Technology Co., Ltd. Use and purpose: monitors, attributes, and optimizes advertising performance; enabled after you accept this policy. Information collected: basic device information such as brand, model, operating system version, carrier, time zone, app name/package name/version, system restart time, total disk space, total system memory, and CPU count. It does not collect content you type or the advertising identifier (IDFA). Privacy notice: Ocean Engine Conversion SDK Privacy Policy.
• SDK name: Tencent MMKV (Android). Provider: Shenzhen Tencent Computer Systems Co., Ltd. Use and purpose: an on-device key-value storage component for settings and sign-in state. It does not access the network or collect personal information. Details: Open-source information.

One-tap sign-in with HUAWEI ID in the HarmonyOS app uses the HUAWEI ID service built into HarmonyOS (Account Kit); it is not a separately integrated third-party SDK. Our apps do not integrate third-party SDKs other than those listed above. The Android and HarmonyOS apps do not integrate any advertising, push notification, or analytics SDKs. AI reply generation, screenshot interpretation, rewriting and AI Moments image generation are provided by a third-party AI service. See “Third-party AI service” below. If these third-party SDKs or services change, we will update this section and notify you in the app.

Third-party AI service

AI features such as Help me reply and screenshot reply send the content you submit to the third-party AI provider Beijing Volcano Engine Technology Co., Ltd. (Volcano Ark large-model service), only to generate replies and images.

• Provider: Volcano Ark large-model service by Beijing Volcano Engine Technology Co., Ltd., processed in Beijing, China. Our servers call it; your device does not connect to it directly. Contact: Volcano Engine hotline 400-034-7888, or online support and tickets on the Volcano Engine website.
• What we send:
  • The chat text you submit with Help me reply, Refresh or a style change, plus your last 5 submissions as context;
  • Screenshots you submit for screenshot reply or attitude reading;
  • Your draft when you tap Rewrite;
  • The last 120 characters typed with this keyboard if Keyboard suggestions is on;
  • Profile screenshots you upload for a social scan;
  • Photos and templates you choose in AI Moments;
  • Custom-style descriptions, samples and example messages;
  • The partner details needed for generation (name, relationship stage and type, traits, your goal, social-scan results) and style settings.

  We do not send your phone number or other account identifiers.

• Purpose: only to generate that reply, rewrite, reading, caption or image.
• Content safety: for legal compliance Volcano Engine runs automated content review and may store and review content that triggers abuse alerts. Images generated in AI Moments are also sent to Qiniu Cloud (Shanghai Qiniu Information Technologies Co., Ltd.) content moderation, only to check for prohibited content.
• Your choice:
  • Before first use, we ask you to agree when you sign in or first open the app.
  • You can turn this off or back on at any time in Me → Settings → Privacy & Security → AI replies. Turning it off stops the app and keyboard from sending your content to the service and disables dependent features; typing and on-device suggestions keep working. This does not affect processing already completed before you turned it off.
  • Messages you send to our WeChat Official Account are also sent to this service; stop messaging it if you do not want that.
  • You can also delete your account; see Section 7 for deletion procedures.
• The service's privacy policy: it processes information under its privacy policy. Generated content is labeled as AI-generated as required.

11. Cloud Sentence Input (Optional)

The ReplyHer keyboard offers an optional "Cloud Sentence Input" feature (shown as "Cloud Whole-Sentence Input" in the HarmonyOS keyboard before version 1.2.6). It is off by default and is enabled only after you read the feature description and actively turn it on in keyboard settings. When enabled:

• Information collected: only the pinyin key sequence you are currently typing and a short fragment immediately before the cursor in the current input field (up to 16 characters, used as context to improve candidate accuracy; not collected in password fields or other secure input situations). Both are collected only while this feature is enabled. No other content you type is collected.
• Purpose: this content is sent to our servers for real-time cloud decoding, using context to return more accurate full-sentence candidates for you to choose from.
• Processing: the content is transmitted over TLS-encrypted connections and processed immediately.
• Retention: we do not write to disk or store any content you type, including key sequences and context fragments. We retain only aggregated performance metrics that contain no input content, such as request counts and response times, to monitor service quality.
• Third-party sharing: key sequences and context fragments are not shared with any third party.
• Turning it off: you can turn this feature off at any time. On iOS and Android, turn off the "Cloud Sentence Input" switch in keyboard settings or in the ReplyHer app under Settings → Cloud Sentence Input; on HarmonyOS, turn off the "Cloud Sentence Input" switch in keyboard settings (shown as "Cloud Whole-Sentence Input" before version 1.2.6); on iOS you can also turn off "Allow Full Access" for the ReplyHer keyboard in system settings. Once disabled, candidate decoding takes place entirely on your device, and no input content is sent to our servers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time and provide prominent notice of changes on this page. Continued use of the Service after an update constitutes acceptance of the updated policy.

13. Sharing and referral attribution

Shared links contain a share identifier (s) for referral attribution. Landing-page traffic sources, operating-system families and IP hashes are used only for referral statistics. IP hashes are deleted after 24 hours; share sessions are retained for 180 days. On iOS, IP addresses and network connection information are not used to infer referrals.

14. Contact Us

If you have questions, comments, or complaints about this Privacy Policy, please contact us:

• Company name: Shenzhen Youweiwei Network Technology Co., Ltd.
• Email: support@replyher.com
• Phone: 13510869785
• Office address: 3rd Floor, No. 7037 Beihuan Avenue, Futian District, Shenzhen