How we collect, use, and protect your data
Last updated: August 20, 2026
简短版：我们收集的数据极少，且大部分由你主动选择提供。你的聊天内容端到端加密，我们无法阅读。我们不使用任何追踪器或广告 SDK。
KOA 让你爱的虚拟角色拥有真正的家，由独立开发者运营。核心功能完全在你的设备上运行，云端仅提供激活验证和可选的数据同步等辅助服务。
如有隐私相关问题，请联系：support@koasystem.com
我们遵循最小数据原则——能不收集就不收集，必须存储时优先使用哈希而非明文。
用途：验证激活码合法性、管理设备数量。
用途：账号安全（双因素验证）、找回激活码、设备管理。
用途：在多台设备间同步你的聊天记录、角色设定等数据。
用途：防止滥用（限制发送频率）。
用途：帮助定位和修复 Bug。
真实姓名、电话号码、物理地址——不收集
聊天内容明文——不收集（端到端加密，我们只有密文）
使用行为分析——不收集（没有埋点、没有 Analytics）
第三方追踪器——不使用（没有 Google Analytics、没有广告 SDK）
KOA 本身不运行 AI 模型。你需要自行配置第三方 AI 服务商的 API（如 OpenRouter、OpenAI 等），聊天内容通过你配置的 API 端点直接发送给该服务商。
这是你与该 AI 服务商之间的直接关系——KOA 不中转、不存储、不审查这些请求的内容。请自行了解你所选 AI 服务商的隐私政策。
| 数据类型 | 存储位置 |
|---|---|
| 激活 / 账号信息 | 海外服务器 |
| 同步数据密文 | 海外服务器 |
| 验证码邮件 | 第三方邮件服务 |
| 诊断数据 | 海外服务器 |
所有服务商均提供符合行业标准的数据保护措施及 GDPR 数据处理协议。
| 数据 | 保留时长 |
|---|---|
| 激活记录 | 激活码有效期内 |
| 同步数据 | 你主动删除或注销时清除 |
| 邮箱哈希 | 你解绑或注销时清除 |
| 验证码 | 10 分钟后过期并清理 |
| IP 限速记录 | 窗口期后自动清理 |
| 诊断数据 | 90 天后清理 |
无论你身处何地，你对自己的数据拥有以下权利：
我们采取合理的技术和组织措施保护你的数据安全，包括但不限于：端到端加密、哈希存储（不存明文）、访问限速、参数化数据库查询等。
KOA 仅面向 18 岁及以上的用户。未成年人请勿使用本产品。
如本隐私策略发生变更，我们将通过官网公告和产品内更新日志通知你。重大变更时，我们还会向已绑定邮箱的用户发送通知。
建议定期查看本页面获取最新信息。
如有任何隐私相关的问题或请求，请联系：
TL;DR: We collect minimal data, and most of it is provided voluntarily by you. Your chat data is end-to-end encrypted — we cannot read it. We do not use any trackers or advertising SDKs.
KOA brings the character you love to life, operated by an independent developer. Core features run entirely on your device; cloud services only provide activation verification and optional data sync.
For privacy inquiries, contact: support@koasystem.com
We follow a data minimization principle — if we don't need it, we don't collect it. When storage is necessary, we prefer hashes over plaintext.
Purpose: Verify activation code validity and manage device limits.
Purpose: Account security (two-factor authentication), activation code recovery, device management.
Purpose: Sync your chat history, character settings, and other data across devices.
Purpose: Abuse prevention (rate limiting).
Purpose: Help identify and fix bugs.
Real names, phone numbers, physical addresses — not collected
Plaintext chat content — not collected (end-to-end encrypted; we only have ciphertext)
Usage analytics — not collected (no telemetry, no analytics)
Third-party trackers — not used (no Google Analytics, no ad SDKs)
KOA does not run AI models. You configure your own third-party AI provider's API (such as OpenRouter, OpenAI, etc.), and chat content is sent directly to that provider through the API endpoint you configured.
This is a direct relationship between you and that AI provider — KOA does not relay, store, or inspect the content of those requests. Please review the privacy policy of your chosen AI provider.
| Data Type | Storage |
|---|---|
| Activation / account info | Overseas servers |
| Sync data ciphertext | Overseas servers |
| Verification emails | Third-party email service |
| Diagnostic data | Overseas servers |
All providers maintain industry-standard data protection measures and GDPR Data Processing Agreements.
| Data | Retention Period |
|---|---|
| Activation records | Duration of activation code validity |
| Sync data | Until you delete or deactivate your account |
| Email hash | Until you unbind or deactivate your account |
| Verification codes | Expire and are cleaned after 10 minutes |
| IP rate-limit records | Automatically cleared after the rate window |
| Diagnostic data | Cleaned after 90 days |
Regardless of where you are located, you have the following rights over your data:
We implement reasonable technical and organizational measures to protect your data, including but not limited to: end-to-end encryption, hash-based storage (no plaintext), rate limiting, and parameterized database queries.
KOA is intended for users aged 18 and above only. Minors should not use this product.
If this privacy policy is updated, we will notify you through our website and in-app changelogs. For significant changes, we will also send a notification to users with bound email addresses.
We recommend checking this page periodically for the latest information.
For any privacy-related questions or requests, please contact: