Privacy Policy · Last updated: October 5, 2026
LuckyHan Studio ("we", "us", "our") operates the AI Random Chat application (the "App"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
By using the App you agree to the practices described here.
You sign in to the App with a Google Account. Sign-in is handled by Firebase Authentication, a Google service; we receive your Firebase user ID, your e-mail address, whether it is verified, and the sign-in method. We do not receive your Google password, contacts or profile beyond that.
After signing in you may add a password to your account so you can also sign in with your e-mail address. The password is stored and checked by Firebase Authentication; we never see it. If you forget it, a reset link is sent to your e-mail address by Firebase.
Our server also issues a random installation identifier and a token for each device. Once you sign in, every device you use is linked to the same account, which is how your credits, purchases and match history follow you between devices.
The welcome credits are given once per person and once per device, and the daily top-up once per device each day. To keep it that way, the App sends our server a one-way digest of the Android ID that Android assigns to the App on your device with its requests, and when you sign in, a Google Play Integrity check that confirms the request comes from the App as distributed on Google Play, on a genuine device. We store only a keyed hash of that digest. It is used for nothing but deciding whether a device has already opened an account or collected the day’s top-up, and it is never combined with your advertising ID.
We do not collect your phone number, contacts, precise location or biometric data. Your device’s advertising ID is collected by Google AdMob for the advertising described in section 7, not by us.
Your conversations are stored on our servers, under your account. That is what lets you sign in on another device and find them there, and what keeps them separate from anyone else who uses the same phone. Your device also keeps a copy so the App works without a connection.
To generate each reply, the message you just sent is transmitted to our server, which assembles it with the earlier messages of that conversation and sends the result to our AI provider.
We also store what the characters remember about you: durable facts drawn from what you have said, a short rolling summary of each conversation, and how far the relationship has progressed. Reply texts held for request recovery — so that an interrupted request can be completed without charging you twice — are cleared after seven days.
We may read conversations for quality and safety review. Conversations are stored under your account rather than anonymously, so we can see which are yours. We read them to improve how the characters write and to investigate reports and abuse, and we do not use them for advertising or sell them. Please do not share information in conversations that you would not want read.
You can remove them from the App. Deleting a conversation or clearing your history removes it from every device signed in to your account — not only from the device you are holding — and you will not see it in the App again. The messages themselves stay on our servers for the quality and safety review described above, for as long as your account exists. Deleting your account erases them.
The characters in the App are fictional and every message and image they send is generated by an AI model. They are not real people, and nothing they say should be treated as advice.
Generation is performed by Google (Gemini models on Google Cloud Vertex AI) through our own serving layer. Content sent for generation is processed under Google Cloud’s terms and is not used to train their models.
You can report any message, image or character from inside the App. Reports are reviewed and can result in a character being removed.
Credit packs and the Plus subscription are sold through Google Play. Google processes the payment; we never see your card details.
We verify each purchase with the Google Play Developer API and store a one-way hash of the purchase token, the product purchased and the credits granted. The purchase token itself is not retained.
Google AdMob: free users are shown banner, native, interstitial and app-open advertisements. AdMob collects your device’s advertising ID and your interactions with the ads in order to serve, cap and measure them, and may derive an approximate location from your IP address. See Google’s Privacy Policy at https://policies.google.com/privacy.
In the EEA, the United Kingdom and Switzerland we ask for your consent before any personalised advertising, through Google’s User Messaging Platform. You can change that choice at any time in Settings → Ad settings.
Buying a credit pack suppresses interstitial and app-open ads for 24 hours. A Plus subscription removes interstitial, app-open, banner and native ads entirely.
Account data and server-side data, including your conversations, are retained for as long as your account exists. Conversations you delete in the App are retained on the same basis: deleting one removes it from your devices, and we keep the messages for the quality and safety review described in section 3 until the account is deleted. Reply texts held for request recovery are cleared after seven days. Reports are retained for moderation purposes.
Deleting the App removes the conversation history stored on your device. Deleting your account (below) erases the server-side data, including conversations you had already deleted in the App.
Two keyed hashes outlive a deleted account: one of its e-mail address and one of the device it was opened on (section 2). Neither can be turned back into the address or the identifier. They are kept only so that deleting an account and signing up again does not pay the welcome credits a second time.
You can delete your account at any time from Settings in the App. This removes your account, your conversations, your wallet, purchase records, remembered facts, match history and every device link, and deletes your Firebase user. Credits and any unused subscription time are forfeited when you do.
If you no longer have access to the App, you can request deletion at /delete-account or by e-mailing founder@luckyhanstudio.com from the address on the account.
Depending on where you live — including the EEA and UK under GDPR, and California under the CCPA — you may have additional rights of access, correction, deletion and objection. Contact us to exercise them.
The App is for adults and is not directed to children. We do not knowingly collect information from anyone under the age required in their country. Characters are always adults, and the App refuses content involving minors. Our full child safety standards, including how to report and what we do with a report, are published at /csae.
Questions about this policy: founder@luckyhanstudio.com