Hiyo (the “Service”) is operated by DIDI Co., Ltd. (“we,” “us,” or “Company”). This Privacy Policy explains how we collect, use, store, and protect personal information when you use our mobile service. We comply with applicable laws in the Republic of Korea, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc. Because the Service is available to users outside Korea, we provide this notice in English for clarity.
We collect the minimum personal information necessary to operate the Service.
We do not ask you to submit special categories of sensitive data. Please avoid entering government ID numbers or unnecessary sensitive information in free-text fields.
For users under 14, we may need information about a parent or legal guardian where required by law.
We collect information when you register, use the Service, contact support, or when information is generated automatically (e.g. logs). If you sign in through a third-party provider, we may receive identifiers allowed by that provider within the scope you authorize.
Device permissions (camera, photos, location, etc.) are used only when you grant them and only for the features disclosed to you.
We retain personal data only as long as necessary for the purposes above, unless a longer period is required by law (e.g. commercial and tax records, communications metadata under Korean law).
When retention ends, we delete or anonymize data using methods that are difficult to restore.
We do not sell your personal data. We disclose personal data to third parties only with your consent where required, or when permitted by law (e.g. lawful requests from competent authorities).
To operate the Service, we entrust processing to the following categories of providers. Generative AI features use OpenAI and Google services (including Gemini and related APIs) to generate responses from text and context you provide.
| Provider | Role | Retention (processor) |
|---|---|---|
| OpenAI, LLC | Generative AI responses (e.g. character chat, suggested replies); processing of text and conversation context | As required to provide the API service and under OpenAI’s policies and settings |
| Google LLC (Gemini and related generative AI) | Generative AI responses; processing of text and conversation context | As required to provide the API service and under Google’s policies and settings |
| KT Alpha Co., Ltd. (Giftishow Biz API) | MMS dispatch and related customer support (recipient phone number) | Until the processing purpose for that message is completed |
OpenAI and Google may process data on servers located outside your country, including in the United States and other regions where they operate. Transfers occur when you use AI features, typically over encrypted network connections. The categories of data transferred are limited to what is needed to generate responses (e.g. conversation input, context, and related logs).
If you do not wish your data to be processed through these providers, AI-dependent features may be unavailable. You may contact us using the details in Section 11.
We may use cookies, device identifiers, and tools such as Google Analytics, including features like Google Signals or User-ID where enabled, to understand usage and improve the Service. You can limit cookies through your browser or device settings; some features may not work fully if you do.
Depending on applicable law, you may request access, correction, deletion, restriction of processing, or withdrawal of consent. You may also delete your account in-app where available. We will respond in line with Korean law and our operational capacity. Some requests may limit certain features.
We implement technical and organizational measures (access controls, encryption where appropriate, staff training). No method of transmission over the internet is completely secure; please protect your credentials.
If you are under 14 (or the minimum age required in your region), a parent or guardian may need to consent as required by law. We apply youth-protection measures consistent with our Youth Protection Policy and Korean regulations where applicable.
Personal Information Protection Manager
Department / Title: Head of New Business Division
Email: cddchingudeul@gmail.com
Personal Information Protection Officer
Department / Title: Service Development Team Leader
Email: cddchingudeul@gmail.com
Youth Protection Manager
Location-based service provider registration (Korea, No. 752)
Email: cddchingudeul@gmail.com
Korean supervisory and reporting bodies (for users who wish to file complaints in Korea):
We may update this Privacy Policy to reflect legal, technical, or business changes. We will post the revised policy in the Service with a new effective date. Material changes may be announced more prominently as required by law.
For apps distributed through Apple’s App Store, Apple’s standard End User License Agreement may also apply: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/
This Privacy Policy is effective as of April 30, 2026.
Previous notice date: February 12, 2022. Prior implementation dates may apply to earlier versions.
Summary of latest update: Added generative AI (OpenAI and Google Gemini), international transfer disclosures, and restructured sections for international users.