01Operator and scope
June Jung is the operator and controller of personal information for Naru and this website, operating from the United States. Contact support@naru.im about privacy.
This notice covers the Naru app, this privacy webpage, and inquiries you send us. External websites and providers also apply their own notices to their independent processing. Reading this notice or using the app does not constitute consent to optional AI sharing.
02Information and purposes
We process information needed to provide the service and information you choose to provide. Information for optional features is processed when you use those features.
| Category | Information | Purpose |
|---|---|---|
| Account and profile | Username, display name, password hash, language preference, and optional profile photo | Registration, authentication, user identification, friend search, and profile display |
| Friends and conversations | Friend relationships and requests, conversation membership, messages and attachments, read and deletion state, and call events | Delivery, conversation history, notifications, and search |
| Media and files | Files you select, including photos, videos and voice recordings; names, types, sizes, previews and related metadata | Upload, display, download, and playback |
| AI features | Content needed for translation or transcription, generated results, consent choice, notice version, and change time | Provide optional AI features and retain your choice |
| Device and access | Installation identifier, notification tokens, device and app information, connection IP addresses, request and error records | Notification delivery, session management, troubleshooting, and security |
| Inquiries | Sender email address, message, attachments, and correspondence | Support and privacy requests |
The device may store authentication information, preferences, and message or media caches. Photo, camera, microphone, and notification permissions support their respective features and can be managed in device settings. Information you put inside a message or file may also be transmitted.
03When information is shared
Messages and attachments are delivered to the other conversation participant. Your display name, username, and profile photo appear in relevant app screens such as friend search and conversations. Deleting your Naru account does not recall copies another person has saved or shared independently.
We provide necessary information to the service providers listed below. We may also process information to comply with legal requirements or protect users’ and the service’s rights, limited to what is needed for that purpose.
04OpenAI and optional AI features
Message translation and voice transcription use the OpenAI API. New AI processing starts only when both conversation participants have consented to the current notice.
- Translation: We send the text to translate, up to eight recent text messages with display names for context, and source and target languages.
- Transcription: We send the original voice file, its filename and media type. The resulting text may go through the same translation process when needed.
- Photos, videos, and ordinary file attachments are not sent to OpenAI as inputs to these translation or transcription features.
You can continue using regular chat without consenting. Sending messages and files and playing voice messages remain available; AI translation and transcription are disabled.
You can change your choice in app settings under Privacy and AI. Withdrawal stops new processing; it does not recall requests already sent for processing or automatically delete existing translations and transcripts.
Our organization’s training-data sharing setting is disabled. Text requests use store=false to disable response storage, but OpenAI may retain content in abuse-monitoring logs for up to 30 days, or longer for legal or safety reasons. Its published policy lists no abuse-monitoring or application-state retention for the audio transcription endpoint. See OpenAI’s data controls.
AI results may be inaccurate. Naru stores translations and transcripts with the conversation so participants can read them later.
05Providers and international processing
The US-based operator manages the service as needed. Information is transmitted over the network to the providers below during use and may be processed outside your country.
| Provider | Information and purpose | Verified location settings |
|---|---|---|
| Railway | Account and conversation database, uploaded files, and operational logs for hosting the service | The current app server, database, and active media bucket are in Singapore. An older media bucket remains in California, USA. |
| OpenAI | Consented text, context, display names, languages, and voice files for translation and transcription | A global project is used without restricting processing to a particular country. |
| Apple | Device notification tokens and information needed to deliver iOS notifications | Processed through Apple’s global services under its policies. |
| Namecheap and Google Gmail | Forwarding, storage, and handling of messages, attachments, and correspondence sent to support@naru.im | Global email services. We have not identified every storage, backup, or support-access country. |
These locations reflect verified service settings; they do not mean all provider security, support, or administrative records remain only in those places. See the notices from Railway, OpenAI, Apple, Namecheap, and Google. You can contact our public support address about international processing and applicable rights.
06Retention and removal
Account information is retained while the account exists. On deletion, login, profile, friend, and related information is removed or disconnected as described below.
Conversations, attachments, and AI results currently have no automatic expiry. Unsending a message hides it from the conversation; it does not immediately erase the database original or attached files. Identify the content in a request if you also want personal information in the original removed.
Operational records support troubleshooting and security. Our current Railway plan provides access to the most recent seven days of logs. This is not a guarantee that every provider-held copy is erased after seven days. Railway automatic backups are not currently configured for the production database.
Older media copies in the previous storage bucket require separate manual cleanup and currently have no automatic deletion schedule. When reviewing a deletion request, we also check for relevant personal information remaining in that bucket.
Providers apply their own retention rules to information they independently process. Information required by law or needed for disputes and rights protection may be retained for the necessary scope and period.
Support emails and correspondence are deleted within 180 days after the inquiry is resolved. Records needed for legal retention or an ongoing dispute may be kept for the necessary scope and period.
07Deleting your account
Use Settings → Delete account in the app. We remove or reset login information, the original username and display name, profile, friends and requests, registered devices, personal read state, and AI consent information. Profile images and unsent files in active storage are also deleted.
Messages, photos, videos, files, voice messages, and AI results already sent remain in the other participant’s conversation. The sender is displayed as a deleted account. Internal identifiers needed to preserve conversation references and deletion state are retained. Personal information written in a message or included in a file is not automatically removed.
The app used to delete the account clears that account’s login session and message cache. This does not recall content saved by other people, copies on other devices, or provider records at the same time. Contact support@naru.im for help with content deletion.
08External links and device storage
Naru’s server accesses linked websites to create message previews. Some previews are fetched directly by the device. Loading previews, images, or external pages can disclose the connection IP address, requested URL, and browser, language, or other request information to the provider. These connections are separate from consent to share with OpenAI.
This privacy webpage uses no analytics or advertising scripts or tracking cookies. Its fonts and images are served by the same service. The server and hosting provider may process access records when you request a page. App storage for authentication, preferences, and caches is used to provide the service as described above.
09Your choices and rights
Depending on applicable law, you can request access, a copy, correction or deletion of personal information, restriction of or objection to processing, withdrawal of consent, or other applicable rights. We may request information needed to verify that you or an authorized representative made the request. If a request is limited, we will explain the reason as required by applicable law.
- Change your profile and language in app settings.
- Change AI sharing in Privacy and AI settings.
- Manage device permissions through the operating system.
- Use in-app account deletion or request deletion of specific information by email.
Please identify your username and the information your request concerns. You do not need to send your password or unnecessary identity-document copies. A guardian who believes a child’s personal information was provided without appropriate authorization can contact the same address.
10Safeguards and updates
We store password hashes and restrict access through authentication and conversation-membership checks. Conversation content and files are also processed on the server to provide the service. Naru is not represented as an end-to-end encrypted service whose operator cannot access content.
We update this page and its revision date when the service or its processing changes. We provide notices or obtain separate consent for changes when required by applicable law. Including this page’s revision date in an inquiry helps us identify the notice you read.