Effective 1 November 2026

Privacy Policy

This notice covers the Harumi landing site, pilot invitation requests, and the current invite-only chat pilot. The operator is Harumi Studio.

For privacy questions or requests, contact hello@harumi.studio.

1. Your invitation request

The form asks for exactly two things: your email and what you expect from Harumi (up to 1,200 characters). No Google login is needed. The submission also records a submission timestamp, language, and consentVersion (2026-10-27). Please do not include sensitive information, private chat transcripts, or other people’s personal data.

With your affirmative request, these details are stored in a private Cloudflare D1 database only to review and follow up on a possible pilot invitation. Harumi Studio performs manual review. Your expectation is not AI input. We do not use invitation requests for newsletters, advertising, ad tracking, or sale.

A request does not create an account, subscription, or right of access. We do not promise an invitation or a response time. No automatic email is sent. Any follow-up is limited to the pilot invitation purpose you requested; no marketing consent is bundled in.

2. Retention and deletion

Active invitation requests expire after 90 days from submission. An hourly deletion job removes expired records, so deletion from the active database can occur at the next hourly run. You can ask us to delete your request earlier or withdraw your permission to contact you.

Cloudflare D1 Free recovery copies can retain a deleted record for up to 7 additional days. Deletion from active records is not immediate erasure of every provider recovery copy. If recovery is necessary, deletion requests must be reapplied before recovered data is used for invitation follow-up.

3. Network and security information

Hosting and infrastructure providers process network metadata, including IP addresses, for delivery, reliability, and security under their own policies. The invitation application does not retain raw IP addresses. Pseudonymous rate-limit counters use a daily-rotated IP hash, expire at the end of the current hour, and are removed by the next hourly cleanup. They are not invitation content or a marketing profile.

Private storage is not a promise of perfect security, zero logs, or zero provider retention. Do not send secrets or sensitive information in the form or chat.

4. If you use the separate chat pilot

Both characters can use recent messages in the same current conversation when you switch. They are two fictional AI character modes, not separate human recipients. Earlier replies keep their original character name. This is temporary chat context, not a persistent shared Mindmap or a transfer of romantic consent.

Google/Firebase handles account sign-in, including your Google email and profile and a Firebase UID. Authentication needs session storage to keep you signed in. Harumi requests no contacts, calendar, or Workspace access. This is separate from the invitation form, which does not require sign-in.

The app retains UID-based usage counters and request IDs to enforce finite usage caps, not chat transcripts or durable memories. Current chat exists in browser memory and clears on reset, sign-out, or reload. Long-term memory, personality adaptation, proactive check-ins, and human matching are not live.

Messages are sent server-side to Cloudflare for AI generation and moderation. Provider policies may independently retain data or otherwise govern processing. The app’s temporary-chat design does not remove provider processing or guarantee a particular provider training or retention policy.

5. Cookies, language, and international processing

Language is selected only by the URL query (?lang=id for Indonesian); English is the default. Optional website analytics and its consent storage are explained below. Necessary authentication storage belongs to the separate signed-in app.

English and Indonesian are interface choices, not conversation-language restrictions. Harumi attempts to follow the language of your message or a language you request. Quality and safety checks can vary by language. Service and safety notices use your selected interface language.

Cloudflare and Google/Firebase may process data internationally under their provider arrangements. We do not promise storage or processing in any particular country.

6. Your choices and rights

You can request access, correction, or deletion, or withdraw invitation-contact consent, through the public email above. Withdrawal stops future invitation follow-up; it does not undo processing already performed. We may ask for minimal identity verification, such as writing from the submitted email address, before disclosing or changing data.

Rights and available remedies depend on applicable law. You may complain to a relevant authority where that law allows. We do not name a country-specific regulator or assume a jurisdiction for you.

7. Changes

We will update this notice when the actual pilot changes and identify the effective date. Material changes will be brought to affected participants’ attention. A materially new invitation-data purpose requires fresh consent, not silent reuse of your request.