Privacy Policy

1. Data we process and why

We process only the data needed for the purposes below. If a purpose changes, we will tell you in advance as the law requires and ask for consent where needed.

We process this data to provide the service you request (PIPA Article 15(1)4) and, to the extent necessary, for our legitimate interests such as preventing abuse and keeping the service secure (Article 15(1)6). Consent to marketing messages is optional and processed only if you give it (Article 15(1)1); we do not send any marketing messages at present.

Faces and location in your photos

• Faces in your photos are used only to make the result you asked for. We do not create or store biometric data, such as facial feature templates, to identify anyone.
• Metadata such as the shooting location (GPS) and device details is removed by the app and the web page before upload, and again when the server re-creates the file. The audio of videos is not used or stored.
• We do not use your photos or results for promotion or to train our AI without your separate consent. What the processors that make the results do under their own policies is described in section 3.

Ailism account and ErOS

• One Ailism account signs you in to every Ailism service. A service that uses accounts (currently ErOS, Ailism Mate and the content portal) asks the account service who a signed-in browser belongs to and receives the account ID, email address, username, display name, profile picture address, date of birth and language setting. ErOS and Ailism Mate keep a copy of this information; the content portal keeps only the account ID, username, display name and profile picture address. These services also receive whether the account is adult verified with 18+ content turned on (yes or no) to decide whether 18+ works show; they never receive the check's result itself.
• Members upload a profile picture only if they want to, on the profile page of the account centre. An uploaded picture is visible to anyone, with your display name, in ErOS, the content portal, Photo and every Ailism service. Only the Ailism account service keeps the picture file; each service shows it from the address the account service gives. Do not upload a picture you do not want to make public, such as one showing your face. We do not create biometric data such as facial feature values from profile pictures. You can change or remove the picture at any time, and an operator may take down a picture that breaks the community rules. Guest accounts and accounts whose email address is not verified cannot upload a picture.
• Your date of birth is used to check your age. People under 14 cannot create an account, and ErOS and Ailism Mate do not show 15+ works and mates to users under 15. 18+ works show only to adults who completed the adult verification below and turned on 18+ content; the date of birth entered at sign-up never opens them.
• To stop password guessing, sign-in attempts are counted per email address and per IP address in server memory only; these counts are not stored.
• Your plan sets your daily credits and the features you can use; credits refill every day at 00:00 Korea time. Features that use AI, such as ErOS chats, transforms on the Photo web version, the AI panels and "Make with AI", take credits for their real cost each time. For this, each service reports the cost of each job to the Ailism account service, which keeps a record of the spending (the time, the service, what it was for, the credits, the cost and a number pointing to the job). The record holds no conversations, request text or pictures, and you can see your recent spendings under usage in the account centre. The camera app is used without signing in, so it keeps per-device limits instead of credits.
• ErOS chats are private: other users and the people who made a character cannot see them. Relationship photos drawn in a dating sim play are likewise seen only by the person playing it. Published works, and the username, display name and profile of the person who made them, are visible to anyone.
• When someone expresses thoughts of self-harm or suicide, ErOS and Ailism Mate show crisis-support contacts. The record kept of this holds only the category, the action (crisis contacts shown) and the time, with no link to the person, chat or message, so it is not personal information.

API keys

• For now only team (admin) accounts can make API keys, in the account centre. Requests sent with a key reach api.ailism.team (the API gateway), which checks the key and its permissions and passes each request on to the service as that account's request; each service processes information exactly as when the account uses it directly (chats and transforms use the account's credits).
• Keys never reach the services. The services get only a delegated session that lasts 15 minutes and cannot be used for what concerns the account itself, such as changing account details, the password or closing the account. Revoking a key ends its delegated sessions at once.
• mcp.ailism.team (the MCP server) does not store the key an AI tool sends; it passes it to the API gateway with each request.

Content portal (Ailism Original)

• Anyone can browse. Posting photos, posts, comments or works and pressing like, vote or follow is for Ailism members who have verified their email address; guest accounts cannot do it. In every scene except Ailism Scene, though, anyone can post and comment without signing in by choosing a nickname and a password (guest posts; no pictures).
• What you post and your username, display name and profile bio are public. Do not post information you do not want public, such as your real name, contact details or face.
• Guest posts and comments show the chosen nickname with a "guest" mark. The identifiers in section 1 are never shown and are used only against spam and to apply the community rules. The stored values cannot be turned back into the password, IP address or browser information. Anyone who knows a guest post's password can edit or delete it, so do not reuse a password from elsewhere. A forgotten password cannot be recovered.
• The server rebuilds every uploaded picture and removes metadata such as the shooting location (GPS) and device information. Videos are rebuilt on the server and the uploaded original is not kept.
• When a report comes in or something breaks the community rules, the operators take it down and show the poster why. Repeated breaches can pause posting on the content portal.
• You can edit or delete what you posted at any time. Deleted items disappear from the site at once, are kept for 30 days to undo mistakes and check reports, and are then erased for good, files included (section 2).
• Unless you use the AI panel, nothing you post on the content portal is sent to outside AI companies. If you use the AI panel, only what "AI panels and Make with AI" below and section 3 list is sent. We do not use what you post to train our AI.

AI panels and Make with AI

• The photo upload, new webtoon episode and shorts upload screens of the content portal and ErOS's creation (Studio) screen have an AI panel. When you ask in your own words, the AI answers and makes pictures, videos and storyboards, or writes and edits the work, and fills them into the editing screen. Saving and posting are always done by you. The AI panel is only for members on a plan with this feature (Pro); everything else works without it.
• "Make with AI" in ErOS Studio opens a [Generate | Edit] picture window. From the description you write (and, in Edit, the reference pictures you pick), the AI writes a picture instruction and makes the picture from it. This window can be used with credits on any plan.
• Requests from the AI panels and the picture window go through Ailism's server (the AI hub) to the companies in section 3. Understanding the request and writing the answers and the picture and video instructions is done by OpenAI (for ErOS, by the company the operator chooses), and making pictures and videos by Higgsfield. Only pictures you uploaded or made and the pictures of the work being edited are used as references.
• Pictures and videos made by the content portal's AI panel are deleted 2 days after they are made unless you put them in a post or work and publish it; once published, they follow the same rules as everything else you post (section 2). Pictures made in ErOS are kept like pictures uploaded to ErOS (section 2).
• AI panel conversations (your messages, the AI's answers and working history, and records of the results made) are kept for 30 days from the conversation's last use so you can continue, and then deleted.
• The AI panels and the picture window take credits for their real cost each time they are used ("Ailism account and ErOS" above).

Ailism Mate

• Ailism Mate (mate.ailism.team) is Ailism's service for meeting a friend character (a mate) who remembers your days and sometimes messages you first. The mate started as an ErOS feature on October 26, 2026 and became Ailism Mate on October 27, 2026; the operator (the Company), the Ailism account it uses, the data processed and why, the AI companies (section 3) and the retention periods (section 2) are the same as when it was part of ErOS. We process this only for members (guests included) who start talking with a mate; you can use the other services and features without it.
• Records moved from ErOS: on October 27, 2026, the mate conversations, memories, diaries, About me, Keep with me and Talk first settings and shown screen pictures that members had in ErOS, and the mates members made in ErOS (with their pictures), were moved to Ailism Mate as they were. Only the place where the same operator processes them for the same purpose changed; nothing new was collected, and retention still counts from when each item was first made (for example, a screen picture is deleted 30 days after it was first sent). The copies left in ErOS are deleted once the move has been checked.
• Memories: after each conversation, the AI (the ErOS and Ailism Mate AI companies in section 3) notes what is worth remembering (facts about you, likes, people, dates and the like) and a short summary of the day. The mate uses these memories in later conversations. You can see, edit, pin and forget them one by one or all at once under "Memories" on the mate's page. A forgotten memory is never brought up again; its text is kept with a "forgotten" mark so it is not learned again (for the period in section 2). "Forget everything" deletes that mate's memories and diary and keeps the conversation.
• About me: an introduction you write yourself in the mate settings (what to call you, what you do and the like). All of your mates read it. It is optional.
• Show my screen: when you press "Show my screen", your browser asks which screen, window or tab to share; one picture is taken and the sharing stops at once. Nothing is watched or recorded continuously. The picture stays on the page until you send it, then goes to the mate with that message. Sent screen pictures can be seen only by you and the operators and are deleted 30 days after they were sent. Please check that no passwords or other people's information are on the screen before you send it.
• Talk first: when it is on, the mate sends you a message at the greeting times you chose (morning, lunch, evening) or around dates you mentioned, never in your quiet hours. Each message uses credits. You can turn it off in the mate settings at any time.
• Keep with me: when it is on, the mate stays in the bottom-right corner of every Ailism site (the ailism_mate cookie in section 5). It turns on when you first start talking with a mate and turns off with the corner's close button or in the mate settings. On other Ailism sites the corner shows Ailism Mate's mate page inside that site; that site does not receive your conversation.
• Together in the browser (the Chrome extension Ailism Mate): when you install the extension and link it with your Ailism account, the mate also stays in the bottom-right corner of the other websites you open in Chrome. If that browser is signed in to Ailism, the extension links itself with that account when you open an Ailism site (ailism.team, Original, ErOS, Photo, Ailism Mate; you can also link it through "Together in the browser" on Ailism Mate), and for that it asks the Ailism account system, on Ailism sites only, which account is signed in. If another account signs in on the web, it links again with that account and ends the earlier session; after you press "Unlink" it does not link by itself until you link it again. The extension runs on every site to show the mate there, but it never reads or sends us the page's content, what you type, its address or your browsing history, and the site does not receive your conversation (the mate in the corner is Ailism Mate's mate page). Only when you press Show my screen does it take one picture of the tab you are looking at (the mate hides for that moment); from there it works like Show my screen above. Linking creates one sign-in session for the extension alone (a sign-in session record as in section 1, with "Ailism Mate (Chrome extension)" in place of the browser details), kept in that browser's extension storage; you can see and end it on the account centre's security page like any other sign-in. The same storage keeps whether the mate is on, the addresses of sites where you hid her, the language, the mate you chose, and the linked account's name and profile picture address (to show in the settings window); none of these is sent to us except the chosen mate (used to show that mate in the corner). The toolbar button's settings window uses that session to load and change your list of mates and their settings (Keep with me, Talks first). The extension's "Unlink" ends that session, and removing the extension removes its storage.
• The desktop app (Ailism Mate for Windows, macOS and Linux): when a member installs and uses the app, the mate also stays in the bottom-right corner of the computer's screen. The app shows Ailism Mate's mate page (mate.ailism.team's corner page) as it is, and that page processes what is described above. You sign in with the Ailism sign-in page opened inside the app; that sign-in (a sign-in session record and sign-in cookie as in section 1) stays only in the app's own storage, and the app never sees your password. You can clear it with Sign out in the tray, or see and end it on the account centre's security page like any other sign-in. Only when you press "Show my screen" in the app does it take one picture of the display under the mouse cursor (the mate hides for that moment, and macOS asks for screen recording permission the first time); from there it works like Show my screen above. Messages a mate sends first are also shown as the computer's notifications. Apart from that, the app never reads or sends us your computer's other programs, files, typing or usage history, and it does not use the camera, microphone or location. Besides the sign-in and the mate page's storage, the app's storage keeps only the language, where the mate stands and whether you hid her; these are never sent to Ailism. The app asks mate.ailism.team whether there is a new version; on Windows it checks a downloaded new version against its checksum (SHA-256) before installing it, and on macOS and Linux it opens the download page.
• Make a mate: signed-up members can make their own mate in Ailism Mate's Make a mate and publish it to everyone, only to people with the link, or only to themselves; this is processed like ErOS Studio works. Members write settings such as the name, introduction, looks and personality, and upload pictures or make them with AI. When a picture is made with AI, the picture instruction built from the mate's looks and the description the member adds, and the reference pictures (the mate's pictures, pictures of the linked Ailism character, pictures the member uploaded), are sent through Ailism's server (the AI hub) to Higgsfield (section 3); pictures made are checked by AI before they are used, and each picture uses credits for its real cost. Published mates, and the username, display name and profile of the person who made them, are visible to anyone. When a mate is deleted, it leaves public lists at once and nobody can newly meet it; the records of people who were already talking with it stay until they delete them.
• Conversations with a mate are private; neither other users nor the mate's creator can see them. Deleting a conversation with a mate under "My mates" on Ailism Mate deletes its messages and that mate's memories and diary at once; to keep the conversation and delete only memories, use "Memories" on the mate's page. Deleting your Ailism account deletes the conversations, memories, diaries, About me, screen pictures, settings and the mates you made (section 2).

Adult verification

• 18+ works and mates in ErOS, Ailism Mate and the content portal are hidden by default. They show, and can be posted, only after you verify your age with a Korean mobile identity check on the profile page of the account centre and turn on 18+ content; turning it off hides them again. It is your choice; everything else works without it.
• The identity check window is run by identity verification agencies (mobile carriers, PASS and the like) and their agents. They receive what you type there, such as your name and phone number, directly, under the consent shown in that window and their own policies.
• When the check ends, the Ailism server asks PortOne (section 3) for the result itself and receives the date of birth and the connecting information (CI); what the browser reports is never trusted. Only a one-way transform of the CI, from which the original cannot be recovered, is stored, and it is used only to see whether one person verifies many accounts.
• Under the Korean Youth Protection Act, you are an adult from January 1 of the year you turn 19. If the proven date of birth shows you are still a minor, the check is kept and you can turn on 18+ content from the day you become an adult.
• If a check turns out to have used someone else's identity, an operator may cancel it, and the verification data is then deleted. Deleting your account deletes it at once.

Guest accounts

• When someone who has not signed up first uses a feature that keeps records or spends credits, such as starting a chat on ErOS, starting to talk with a mate on Ailism Mate or starting a transform on the Photo web version, we create a guest account for that browser and set the sign-in cookie (section 5). Just looking around does not create one.
• A guest account has no email address, password or date of birth. Because a guest's age is unknown, the services treat guests as minors and offer only works and features suitable for teenagers. Features that need a signed-up account, such as publishing works, are not available.
• Records made as a guest (ErOS chats and progress, Ailism Mate conversations and memories, Photo results and so on) are kept by each service the same way as for signed-up accounts, for the periods in section 2.
• If you sign up while using a guest account, that same account becomes your signed-up account, so your records stay. The values for preventing repeated guest accounts that are linked to it are deleted at once.
• If you sign in to an existing account in a browser that was using a guest account, the guest's records move into that account and the guest account can no longer be used. On a shared device, check that nobody else left guest records before you sign in.
• Only the browser's sign-in cookie opens a guest account. If you clear cookies, you cannot return to that guest account, not even in the same browser on the same network; using the services again creates a new guest account. Sign up to keep your records. A guest account is deleted automatically after 30 days without use, and each service then erases its records too.
• There are limits on how many guest accounts can be created by one browser on one network and on one network, and the guests of one browser on one network share one day's credits. Devices of the same model can have identical browser characteristics, so we never tell people apart by them alone and always combine them with the network address prefix. For this we store only the keyed one-way hashes in section 1, never the characteristics themselves or your IP address for this purpose. The stored values cannot be turned back into the original characteristics or IP address, and they never sign anyone in to a guest account.

2. Retention and deletion

We delete personal data without delay once its purpose is met. Retention by item is below; when a period ends, the server deletes the data automatically.

When you delete your Ailism account, each service also erases its records for that account. The same happens when a guest account is deleted after 30 days without use. ErOS checks for deleted accounts every 6 hours and erases all of the person's ErOS records within a day. "Delete my ErOS data" on ErOS's My page does the same thing at once; your Ailism account stays, and the next time you visit ErOS a new, empty ErOS profile is created. The records erased are your chats, relationship photos drawn in your dating sim plays, personas and their pictures, the works you made (published or not) and the pictures you uploaded or made with AI, likes, collected endings, follows and your ErOS profile, and other people's chats with your works are deleted too. Reports, safety records and AI usage records follow the periods in the table above. Ailism Mate also checks for deleted accounts every 6 hours and, within a day, erases the person's conversations with mates, memories, diaries, About me, screen pictures, settings, likes, Ailism Mate profile, and the mates they made with their pictures; other people's conversations with those mates are deleted too, and the person's reports, safety records and AI usage records lose the link to them. The content portal also checks for deleted accounts every 6 hours and, within a day, erases the person's photos and files, webtoons and shorts, likes, votes, follows, reactions, episodes read, views, usage events and AI panel conversations; their posts and comments become empty "deleted post" placeholders, and their reports lose the link to them.

Where another law requires us to keep data, we keep it separately for that period. Deleted data may remain in database backups for the backup retention period. For copies kept by processors, see section 3.

How we delete: files on the server are deleted, and database records are cleared or deleted. We do not process personal data on paper.

Anyone with the address (link) of a result page can view the result during the retention period. Links use numbers that cannot be guessed, but if you send a link to someone, they can see the result too. Results the app saved on your phone can be deleted by you.

3. Processors and transfers abroad

Credit payments: for now there are only operators' test payments, so nothing is sent to a payment company. Before real payments start, the payment companies (PortOne and the company handling card payments) will be added to this table and announced in advance.

To make results, to make the AI replies and pictures of ErOS and Ailism Mate, to make what members ask for in the AI panels of the content portal and ErOS, and to deliver the services securely, we have the following companies process personal data on our behalf. All of them except the adult verification company are outside Korea. As processing needed to perform our service agreement with you, these transfers are disclosed in this policy under PIPA Article 28-8(1)3.

OpenAI, L.L.C. (photo and video transforms)

Higgsfield Inc. (photo and video transforms)

ErOS and Ailism Mate use AI models to write character and mate replies, narrate stories, referee games, summarize conversations, organize a mate's memories, run safety checks and check pictures made, and for the writing done in the ErOS creation AI panel and the "Make with AI" picture window. Both services send through Ailism's server (the AI hub) to the same companies below, and the operator chooses which of them handles each function of each service.

OpenAI, L.L.C. (ErOS, Ailism Mate)

Anthropic, PBC (ErOS, Ailism Mate)

Google LLC (ErOS, Ailism Mate, Gemini API)

Higgsfield Inc. (ErOS Studio, Ailism Mate's Make a mate)

Eleven Labs Inc. (Read aloud on ErOS and Ailism Mate)

Higgsfield Inc. (ErOS dating sim relationship photos)

The content portal's AI panel (photo upload, new webtoon episode, shorts upload) sends data to the following companies only when a Pro member uses it.

OpenAI, L.L.C. (content portal AI panel)

Higgsfield Inc. (content portal AI panel)

Cloudflare, Inc. (all services)

Only for people who verify their age, we have the following Korean company process the identity check. It is in Korea, so nothing is transferred abroad.

Usage statistics for the websites are not necessary to provide the services, but we use the following tool to improve them. Section 5 says how to refuse it and what that changes.

Google LLC (Google Analytics, usage statistics)

What you should know about Higgsfield

• Under its own privacy policy, Higgsfield may use the inputs it receives (photos, videos, instructions, the picture and video instructions and reference pictures from the content portal's AI panel and ErOS Studio, the picture instructions and reference pictures from Ailism Mate's Make a mate, shorts being edited, and the photo instructions and reference pictures of ErOS relationship photos) and the results to train and improve its own and its affiliates' AI models. It states that data already used in training cannot be removed from trained models.
• To make results, Higgsfield may pass data to a different AI model provider for each theme or feature (OpenAI, Google, Alibaba, xAI, ByteDance, Kuaishou).
• Copies sent to Higgsfield stay in the Company's Higgsfield account and are kept under Higgsfield's policy, independently of deletion on Ailism's servers. Material deleted from a Higgsfield account may remain on Higgsfield's servers for 30 days.
• If you do not want this processing, do not upload photos or videos to transform in the camera app or its web version, and do not use the content portal's AI panel, the ErOS creation AI panel, "Make with AI" or making pictures with AI in Ailism Mate's Make a mate. ErOS relationship photos are drawn in endless mode, or at events set to draw a photo, of dating sim works whose author turned drawing on, so if you do not want them, do not play such plays. To have material already sent deleted, email ailismcorp@gmail.com with the result link or the address of the work or post, and we will ask Higgsfield to delete it.

Refusing transfers abroad

Photo and video transforms, ErOS's AI chats and Ailism Mate's conversations with mates cannot be provided without these companies. If you do not want your data transferred abroad, do not use the transform feature, ErOS or Ailism Mate; you will not be able to use those services. The content portal's AI panel, the ErOS creation AI panel and the "Make with AI" picture window, and making pictures with AI in Ailism Mate's Make a mate also need these companies, so if you do not want this, do not use them. Without them, the rest of the content portal (browsing, posting yourself, comments, likes and the like), making works yourself in ErOS Studio and making a mate with pictures you upload yourself in Ailism Mate's Make a mate work as before. For data already transferred, contact ailismcorp@gmail.com. Read aloud sends nothing to ElevenLabs as long as you do not press Listen and keep automatic reading off; everything else works as before.

Web fonts are loaded from Google LLC (Google Fonts, United States) and jsDelivr (United States). When you open a page, your browser sends your IP address and browser details to them, which they process under their own policies.

4. Sharing with third parties

We do not provide personal data to third parties, except where a law specifically requires it or investigative authorities request it through the procedures set by law.

5. Data stored on your device, and cookies

We use no tracking tools for advertising. We use Google Analytics for website usage statistics (the first item below); apart from that we store on your device only what the services need to work. We use only the cookies listed below.

• Usage statistics (ailism.team, eros.ailism.team, mate.ailism.team, play.ailism.team, photo.ailism.team): the Google Analytics cookies _ga and _ga_9WNM719XMD. They are set for all of .ailism.team so that one visitor counts once across the Ailism sites, and last up to 2 years from your last visit. To refuse, block these cookies in your browser settings or use Google's Analytics opt-out browser add-on; the services work the same either way
• Ailism account: the sign-in cookie ailism_sid. It is created when you sign in and is set for all of .ailism.team so that every Ailism site receives it. It is protected with the HttpOnly, Secure and SameSite=Lax attributes, is valid for 30 days and is extended while you use it. It is strictly necessary for signing in and is not used for advertising or analytics tracking. It is removed when you sign out. It is also set when a guest account is created
• When you sign in with Google or Kakao: the ailism_oauth cookie ties the sign-in in progress to this browser. It is sent only to the account service's address on ailism.team (/api/account/oauth/), is protected with the HttpOnly, Secure and SameSite=Lax attributes, and is removed when the sign-in finishes (30 minutes at most)
• Language (every Ailism site): the language you chose (ko or en) is stored in the ailism_lang cookie for 1 year. It is set for all of .ailism.team so that every Ailism site opens in the same language, and it is written again in the page's language each time you open a page or switch KO / EN. It is used only to choose the language (pages whose address has no language, a guest account's language setting), never for advertising or analytics tracking
• Theme (every Ailism site): when you choose the light or dark theme it is stored in the ailism_theme cookie for 1 year. It is set for all of .ailism.team so that every Ailism site opens the same way, and it is removed when you choose "Device". It is used only to choose the theme, never for advertising or analytics tracking
• Ailism Mate Keep with me (every Ailism site): while Keep with me is on, mate.ailism.team keeps the number of your conversation with that mate in the ailism_mate cookie. It is set for all of .ailism.team and read only to decide whether another Ailism site shows the mate in its corner (up to 400 days); it is removed when you turn Keep with me off. It is never used for advertising or analytics tracking
• When a guest account is created: the service's page reads your browser's characteristics (section 1), turns them into a one-way hash inside your browser and sends only that hash to the Ailism account service. Nothing is stored on your device
• ErOS (eros.ailism.team): the only cookies are the usage statistics, sign-in, language, theme and mate cookies above. The eros_lang cookie ErOS once used for the language is no longer created; if it is still in your browser and there is no ailism_lang, it is only read to choose the language. In browser storage ErOS keeps: the dating sim's sound volume (ds-volume), the last message seen in each messenger chat room (eros:read:<play number>, to mark unread messages), and the picture jobs being drawn at once in the Studio (eros.studio.batch.<work number>, so they can be picked up again when you reopen the page; removed when they are done). In storage that is cleared when you close the tab (sessionStorage) it keeps whether you already opened a simulation play's lock screen in that tab (eros:os:<play number>)
• Ailism Mate (mate.ailism.team): the only cookies are the usage statistics, sign-in, language, theme and mate cookies above. In browser storage it keeps where the corner mate stands and how big she is (mate:corner, so she stands in the same place in the corner of the other Ailism sites too), and in storage that is cleared when you close the tab (sessionStorage) whether you already saw the message a mate sent first in that tab (mate:seen). What the Chrome extension and the desktop app keep on your device is described under "Ailism Mate" in section 1
• AI panel (play.ailism.team, eros.ailism.team): whether you collapsed the AI panel is remembered in browser storage
• App: the device ID (a file in the app's storage) and temporary copies of results you received
• Web version (photo.ailism.team): the device ID (the ailism.device entry in browser storage)
• Content portal (play.ailism.team): in browser storage, the visitor number and episodes read while signed out. The display setting it once kept in browser storage is moved into the ailism_theme cookie above the first time you open it, then removed. When you sign in, it also uses the Ailism account's sign-in cookie
• Camera service admin console: a sign-in cookie for operators only (valid for 12 hours). Not used for users

Clearing site data in your browser settings or deleting the app removes what is stored on your device. Removing the sign-in cookie signs you out. If you remove the device ID, a new one is created and you can keep using the services.

6. Your rights and how to use them

You may at any time ask to access, correct, delete or stop the processing of your personal data, and ask for an explanation or review of an automated decision.

If you have an Ailism account, you can use the account page to see your account information, change your display name, username, language and marketing consent, upload, change or remove your profile picture, change your password, and delete the account after entering your password again. You can withdraw your consent to marketing messages at any time. Your email address and date of birth cannot be changed on the account page, so email us to change them.

A guest account cannot be changed or deleted on the account page; it is deleted automatically after 30 days without use. To delete it sooner, sign up and then delete the account: signing up keeps the same account, so the guest records are deleted with it.

In the settings of ErOS's My page, "Download my data" gives you your ErOS profile, personas, chats (with messages and memory summaries), the full content of the works you made, likes, collected endings and follows as a file (JSON). "Delete my ErOS data" deletes all your records on ErOS at once, as described in section 2, and your Ailism account stays. You can also delete chats one by one.

On Ailism Mate, under "My mates" you can delete a conversation with a mate (with that mate's memories and diary) and edit or clear your About me; under "Memories" on a mate's page you can see, edit and forget memories; and in Make a mate you can edit or delete the mates you made. To get your Ailism Mate records as a file or delete them all at once, email us at the address below.

Send any other request to ailismcorp@gmail.com. For requests about your Ailism account, include the email address you signed up with. Records from the camera app and its web version are kept without an account, so to help us find them, include the result link or the date, time and theme of the request. What you posted on the content portal you can edit and delete yourself, from each item's menu or "My works". We may ask for more information as needed to confirm it is you.

We will act on your request and tell you the outcome within 10 days of receiving it. If the law requires us to refuse or limit a request, we will tell you why and how to object.

A legal representative or someone you authorize may also make requests, with documents showing their authority, such as a power of attorney.

7. Children and teenagers

People under 14 cannot create an Ailism account. Because the date of birth is checked at sign-up, features that need a signed-up account (such as creating works on ErOS or making mates on Ailism Mate) are not available to children under 14.

Guest accounts do not ask for your age. Children under 14 must have the consent of a legal guardian to use the services as a guest; if we learn that personal data of a child under 14 was processed without a guardian's consent, we delete it without delay. The services treat guests as minors and offer only works and features suitable for teenagers.

For the services that need no account (the camera app, its web version and browsing the content portal), children under 14 must have the consent of a legal guardian. Posting on the content portal is for Ailism members only, so children under 14 cannot do it. These services do not ask for your age; if we learn that personal data of a child under 14 was processed without a guardian's consent, we delete it without delay. Guardians can exercise the child's rights as described in section 6.

18+ works and mates in ErOS, Ailism Mate and the content portal are shown only to members proven adult by a mobile identity check who turned on 18+ content, never to minors, guests or members who have not verified. ErOS and Ailism Mate do not show 15+ works and mates to users under 15.

8. Security measures

• All traffic is encrypted with HTTPS. Ailism's services do not open server ports to the internet directly; they are reached only through Cloudflare tunnels.
• Ailism account passwords are stored only as one-way bcrypt hashes, so no one, including the Company, can see the original password.
• The values for preventing repeated guest accounts are stored only as keyed one-way hashes (HMAC-SHA256), so they cannot be turned back into the original browser characteristics or IP address.
• The session token in the sign-in cookie is stored on the server only as a hash (SHA-256).
• Sign-in attempts are limited to stop password guessing.
• To prevent abuse, ErOS keeps a block list of IP addresses that an operator has blocked, with the reason, until the operator removes the block.
• Access to personal data is limited to the people who operate the service. The camera service's admin console is protected by sign-in, limits on sign-in attempts, secure cookies and request forgery protection.
• Keys and sign-in details for outside services are stored encrypted.
• Sign-ins and settings changes in the admin console are kept in the operational log for 1 year.
• Uploaded photos and videos are re-created on the server to remove metadata, and are deleted automatically when the retention period ends.
• Profile pictures are also re-created on the server to remove metadata, and are processed only after their format and size are checked.

9. Automated processing

Transform requests are checked automatically by AI (OpenAI), which looks at the photo and the request text. Requests that break the Terms of Service, such as sexualizing someone, insulting or mocking a real person, or fabricating evidence, are refused without making a result. Higgsfield, which makes the results, may also filter results by its own standards. When OpenAI cannot be reached, requests are processed without the AI check, and only Higgsfield's standards apply.

In ErOS and Ailism Mate, AI writes the replies of characters and mates and moves the stories along automatically. Chats are also checked automatically: when someone expresses thoughts of self-harm or suicide, crisis-support contacts are shown (Korea: 109, 1388, 1577-0199; US: 988), and sexual content involving minors is blocked. These measures are kept as safety records; records about self-harm or suicide keep only the category, the action and the time, with no link to the person, chat or message (section 1).

Before the content portal's AI panel sends the picture and video instructions the AI wrote to Higgsfield, it checks them automatically against the rules for the work's rating (all ages, 15+, 18+) and does not make anything that breaks them, such as sexual depictions of minors or sexual or degrading composites of real people. Higgsfield, which makes the results, may also refuse by its own standards (sexual content, another work's characters or trademarks); the AI panel then tells you why.

This processing does not make decisions that significantly affect your rights or obligations. To ask for an explanation or review of a refused request or a safety measure of ErOS or Ailism Mate, use the method in section 6.

10. Privacy officer

For questions, complaints or requests for remedies about how we process personal data, contact us below. We will answer and act without delay.

11. Remedies

For advice or dispute resolution about a privacy infringement, you can contact the following Korean agencies.

• Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
• Personal Information Infringement Report Center (KISA): 118, privacy.kisa.or.kr
• Supreme Prosecutors' Office, Cyber Investigation Division: 1301, www.spo.go.kr
• Korean National Police Agency, Cyber Bureau: 182, ecrm.police.go.kr

12. Changes to this policy

If we change this policy, we will announce it on this page 7 days before it takes effect, or 30 days before for changes that are important or unfavorable to you.

The October 17, 2026 version took effect on October 17, 2026. The provisions it added about the Ailism account and ErOS applied from their publication on October 17, 2026, because they concerned new services that people choose to sign up for. Nothing changed in how the existing services (the camera app and its web version, and the content portal) process information. Future changes follow the 7-day and 30-day notice above.

The provisions about guest accounts and the values for preventing repeated guest accounts (sections 1, 2, 5, 6, 7 and 8) take effect on October 20, 2026.

The provisions about signing up and signing in with Google (sections 1, 2 and 5) take effect on October 20, 2026. Google sign-in is a new option used only by people who choose it; nothing changes in how existing users' information is processed.

The provisions about signing up and signing in with Kakao (sections 1, 2 and 5) take effect on October 20, 2026. Like Google sign-in, it is a new option used only by people who choose it.

The provisions about website usage statistics with Google Analytics (sections 1, 2, 3 and 5) take effect on October 20, 2026. This change applies to every visitor, but it took effect on the day it was published rather than after the 7-day notice above. You can refuse it at any time as section 5 describes.

The provisions about member activity on the content portal (posting, comments, likes and the like; sections 1, 2, 5, 6 and 7) take effect on October 21, 2026. They cover new features used only by signed-in members who choose to post or press something; nothing changes in how visitors who browse are processed (the visitor number and usage events).

The provisions about posting in scenes on the content portal without signing in (sections 1 and 2) take effect on October 22, 2026. They cover a new feature used only by people who choose to post in a scene without signing in; nothing changes in how visitors who browse are processed.

The provisions about API keys and API request records (sections 1 and 2) take effect on October 22, 2026. They cover a new feature that only team (admin) accounts use for now; nothing changes in how other users' information is processed.

The provisions about adult verification and 18+ works (sections 1, 2, 3 and 7) take effect on October 22, 2026. They cover a new feature processed only when someone chooses to verify their age; nothing changes in how other users' information is processed.

The provisions about the AI panels, the "Make with AI" picture window and credits (sections 1, 2, 3, 5 and 9) take effect on October 23, 2026. The AI panels and the picture window are processed only when members choose to use them. Credits and their spending records apply to every member and guest who uses AI, but they took effect on the day they were published rather than after the 7-day notice above.

On the same day (October 23, 2026), we corrected what this policy left out or described differently from processing already in place (sections 1, 2, 3 and 5): the language cookie of every Ailism site (ailism_lang), what ErOS keeps in browser storage, the Higgsfield processing and retention of ErOS dating sim relationship photos, and the checking of pictures made with AI.

The provisions about profile pictures (sections 1, 2, 3, 6 and 8) take effect on October 24, 2026. They cover a new feature processed only when a member chooses to upload a picture; nothing changes in how other users' information is processed.

The provisions about ErOS Mate (sections 1, 2, 3 and 5) take effect on October 26, 2026. They cover a new feature processed only when a member chooses to talk with a mate or links the Chrome extension; nothing changes in how other users' information is processed.

On the same day (October 26, 2026), we added to section 5 the theme cookie (ailism_theme), in use since October 25, 2026, which this policy had left out.

The provisions about Ailism Mate (sections 1, 2, 3, 5, 6, 7 and 9) take effect on October 27, 2026. The mate, an ErOS feature since October 26, 2026, became its own service Ailism Mate (mate.ailism.team): the operator, the data processed and why, the AI companies and the retention periods are unchanged, only the place of processing changed, and the mate records in ErOS were moved as they were (section 1). Make a mate is processed like ErOS Studio works, and the desktop app only when a member installs and uses it. So, like the earlier mate provisions, they apply from the day the service opened; nothing changes in how the information of people who do not use mates is processed.

The provisions about buying credits (sections 1, 2 and 3) take effect on October 30, 2026. They cover a new feature processed only when members choose to buy credits, so they apply from their publication.

The provisions that name the company and its details as the controller (the introduction, sections 10 and 13, and the wording elsewhere that names the Company as the party processing the data) take effect on October 30, 2026. They name the company that runs these services (hjbrain Co., Ltd.) and its privacy officer; the data processed and why, the processors and the retention periods have not changed and nothing new is processed, so they apply from their publication.

If this translation differs from the Korean policy, the Korean policy prevails.

Revision history

• October 14, 2026: first version
• October 17, 2026: added the Ailism account and ErOS
• October 20, 2026: added guest accounts and the values for preventing repeated guest accounts
• October 20, 2026: added signing up and signing in with Google
• October 20, 2026: added signing up and signing in with Kakao
• October 20, 2026: added usage statistics with Google Analytics
• October 21, 2026: added member activity on the content portal (posting, comments, likes and the like)
• October 22, 2026: added posting in scenes on the content portal without signing in (nickname and password)
• October 22, 2026: added API keys and API request records (API gateway, MCP server)
• October 22, 2026: added adult verification (mobile identity check, PortOne) and 18+ works
• October 23, 2026: added the content portal's AI panel, the ErOS creation AI panel and "Make with AI" picture window, and credits (plans' daily credits and spending records)
• October 23, 2026: corrected the language cookie (ailism_lang), ErOS's browser storage, ErOS dating sim relationship photos (Higgsfield) and picture checks to match what is done
• October 24, 2026: added profile pictures (the round picture shown in every Ailism service)
• October 26, 2026: added ErOS Mate (memories, About me, Show my screen, Talk first, the Keep with me cookie ailism_mate, Together in the browser with the Chrome extension); corrected the theme cookie (ailism_theme)
• October 27, 2026: the mate left ErOS and became Ailism Mate (mate.ailism.team), with ErOS's mate records moved as they were; added Ailism Mate's Make a mate and the desktop app
• October 27, 2026: Read aloud on ErOS and Ailism Mate (Eleven Labs Inc.) added to sections 1, 2 and 3
• October 27, 2026: the Chrome extension links itself in a browser signed in to Ailism, and its settings window chooses the mate and her settings (section 1)
• October 30, 2026: named the company that runs Ailism (hjbrain Co., Ltd.) as the controller; added the privacy officer (the representative) and Company information (section 13)
• October 30, 2026: added buying credits (order records kept 5 years) and held credits

13. Company information

The company that processes personal data under this policy (the controller) is: