Privacy Policy

Last updated: May 3, 2026

Letmfly ("we", "our", or "the app") is operated by MPV.Tokyo, an individual proprietorship registered in Japan. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application.

By using Letmfly, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

We collect the following types of data:

• Email address — used for account creation, authentication, and account-related communications.
• Password — stored in hashed form by our authentication provider; we cannot read your password.
• User ID — a unique identifier automatically generated when you create an account.
• Profile photo — if you choose to upload a profile image (optional).
• User-created content — the text you post within the app, encrypted at rest.
• Subscription status — managed via our payment provider.
• Device identifiers and advertising identifiers — collected by our advertising partner (Google AdMob) for the purpose of serving ads to free-tier users.
• Push notification tokens — collected by Firebase Cloud Messaging to deliver notifications.

2. How We Use Your Information

• To provide and maintain the app's core functionality, including account management, content storage, and content delivery.
• To generate AI character responses to your posts.
• To send push notifications when AI responses are ready or for other service-related purposes.
• To manage subscriptions and verify in-app purchases.
• To display advertisements to free-tier users through Google AdMob.
• To prevent fraud, abuse, and unauthorized access.
• To comply with legal obligations.

3. Legal Basis for Processing (For EU/UK Users)

If you are located in the European Union or United Kingdom, we process your personal data under the following legal bases:

• Performance of a contract — to provide the services you have signed up for.
• Consent — for advertising and optional features. You may withdraw consent at any time.
• Legitimate interests — for fraud prevention, security, and service improvement.
• Legal obligations — to comply with applicable laws.

4. AI-Generated Responses

Your posts are processed by an AI system to generate character responses. The AI processing happens on our servers located in Japan. Posts are stored on our servers, encrypted at rest, and are not publicly visible. Only you can see your own posts and the AI-generated responses.

AI responses are generated automatically and are intended for entertainment and emotional support purposes only. They should not be relied upon as professional advice.

5. Data Sharing and Third-Party Services

We do not sell your personal data. We share data with the following third parties only as necessary to provide our services:

• Supabase (Northeast Asia / Tokyo region) — hosts our database, authentication, and storage. Encrypted user content, account information, and metadata are stored here.
• Firebase Cloud Messaging (Google LLC) — delivers push notifications. Push tokens and notification metadata are processed.
• Google AdMob (Google LLC) — displays advertisements to free-tier users. Device identifiers and advertising identifiers are shared for ad serving and personalization. Paid subscribers (Plus and Premium) do not see ads, and their advertising identifiers are not shared with AdMob.
• RevenueCat (RevenueCat, Inc.) — manages in-app subscriptions and purchase verification. User identifiers and subscription status are processed.
• Cloudflare — provides email routing, content delivery, and security infrastructure.
• Self-hosted AI infrastructure (Tokyo, Japan) — processes your posts to generate AI character responses.

Some of these services are operated by companies based outside of your country. By using Letmfly, you consent to the transfer of your information to these jurisdictions.

6. International Data Transfers

Our primary data processing infrastructure is located in Japan. If you are located outside Japan (including the EU, UK, or US), your data will be transferred to and processed in Japan. For users in the EU and UK, we rely on appropriate safeguards to ensure your data is protected in accordance with GDPR.

Some third-party services we use (such as Google AdMob, Firebase, and RevenueCat) may process data in other jurisdictions, including the United States.

7. App Tracking Transparency (iOS)

For users on iOS 14.5 or later, we use Apple's App Tracking Transparency framework. We will request your permission before tracking your activity across other companies' apps and websites for advertising purposes. You can change your tracking preferences at any time in your device settings (Settings > Privacy & Security > Tracking).

If you decline tracking, you will still see ads as a free-tier user, but they will not be personalized.

8. Data Storage and Security

Your data is stored securely using industry-standard cloud infrastructure. All data is transmitted over encrypted connections (HTTPS/TLS). Your posts are encrypted at rest using a per-user encryption key.

We implement reasonable technical and organizational measures to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

9. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected users and relevant authorities in accordance with applicable laws, including notification within 72 hours where required by GDPR.

10. Data Retention

We retain your data for as long as your account is active. When you request account deletion, all associated data — including your posts, AI responses, profile information, and account credentials — will be permanently deleted immediately, except where we are required to retain certain information for legal or regulatory purposes.

11. Your Rights

You have the following rights regarding your personal data:

• Access — you can view your account information within the app.
• Deletion — you can delete your account and all associated data at any time through the app or via our account deletion page.
• Correction — you can update your account information within the app.
• Withdrawal of consent — you can revoke previously granted permissions through your device settings.
• Data portability (EU/UK users) — you may request a copy of your data in a portable format.
• Objection to processing (EU/UK users) — you may object to certain types of processing.
• Lodging a complaint (EU/UK users) — you have the right to lodge a complaint with your local data protection authority.

To exercise these rights, please contact us using the form below.

12. Children's Privacy

Letmfly is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16.

• In the United States, we comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect data from children under 13.
• In the European Union and United Kingdom, we do not knowingly collect data from children under 16, in accordance with GDPR.
• In Japan, we do not knowingly collect data from children under 16 without parental consent.

If we become aware that we have collected data from a child below the applicable age, we will take steps to delete that information promptly.

13. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect about you.
• The right to delete your personal information.
• The right to opt-out of the sale of your personal information (we do not sell your data).
• The right to non-discrimination for exercising your CCPA rights.

To exercise these rights, please contact us using the form below.

14. Advertising

Free-tier users will see advertisements served by Google AdMob. AdMob may collect device identifiers and usage data to deliver personalized ads. You can opt out of personalized advertising through your device settings or by declining App Tracking Transparency on iOS.

Paid subscribers (Plus and Premium plans) do not see advertisements, and their device identifiers are not shared with AdMob for advertising purposes.

For more information about how Google uses data, please see Google's Privacy Policy.

15. Cookies and Tracking Technologies

The Letmfly mobile application does not use cookies. However, some third-party services we use may use similar tracking technologies on our servers or within their SDKs.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. For material changes, we will provide notice through the app or by email. Continued use of the app after changes constitutes acceptance of the updated policy.

17. Contact

If you have questions or concerns about this Privacy Policy, or if you wish to exercise your rights, please use the form below.

MPV.Tokyo
Nishishinjuku Mizuma Bldg. 2F, 3-3-13 Nishishinjuku, Shinjuku-ku, Tokyo 160-0023, Japan