Privacy Policy

About this policy

Hey Ming values your privacy. This policy explains how we collect, use, retain and disclose personal data when providing our website, app and related services.

1. Data we collect

Depending on the features you use, we may process account data, including your email address, account identifiers and sign-in verification status; plan and usage data, including selected plans, usage and records of orders or interest in plans; voice, text, images, conversation summaries and reminder content you provide; location data obtained with permission; caregiver connections, access permissions and sharing settings; device, browser, connection and error records; and customer support enquiries, survey responses and your choices about receiving updates.

These categories do not mean we collect all of this data from every user. We process relevant data according to the features you actually use and what is needed to provide them.

2. How we use data

We use personal data to create and manage accounts, verify identity, answer questions, provide the features you use, manage plans and usage, handle applicable charges, provide authorised family or caregiver features, respond to enquiries and requests to exercise your data rights, maintain security, prevent misuse, understand demand for the Service, improve the user experience, meet legal obligations and handle related disputes.

If we need to use data for a new purpose unrelated to the original purpose, we will provide further notice and obtain the required consent in accordance with applicable law.

3. Conversations, images and location

Voice and image content may contain personal data about you or other people. Please provide only what is needed to answer your question.

We will explain the applicable data-handling arrangements within the relevant features, including any summaries, images or other records that need to be retained. Camera and location features require the relevant authorisation and device permissions.

General account consent does not authorise us to make private conversations public. Additional retention of recordings, public use or use for model training requires the relevant explanation and a lawful basis under applicable law.

4. Family and caregiver access

Relevant data is shared only according to the user's authorisation, a lawful representative's authority and the Service settings.

Paying for a plan does not, by itself, authorise access to private data. After authorisation is withdrawn, we will stop further relevant access according to the Service arrangements. If a recipient has saved separate copies, you may need to ask that recipient to handle those copies directly.

5. Who may receive data

To the extent necessary for the purposes above, data may be shared with authorised staff and contractors; providers of account verification, hosting, data storage, AI processing and communications services; payment and settlement providers needed for actual payments; family members or caregivers receiving data under applicable authorisation; legal, accounting or other professional advisers where needed; and organisations required or lawfully entitled to receive the data.

Registering an account does not, by itself, authorise other companies to use your email to market their products to you.

6. Processing outside Hong Kong

Some service providers may process data outside Hong Kong. We will put reasonable safeguards in place based on the nature of the data and the risks involved, including limits on use, access and retention.

7. Retention and security

We retain data only for as long as necessary to fulfil the purposes for which it was collected, handle related matters or meet legal obligations. We regularly review whether continued retention is necessary.

When data is no longer needed, we take appropriate steps to delete or anonymise it. Backup copies may be removed according to the backup cycle. Records that must be retained by law are handled separately.

We take reasonable organisational and technical measures to protect data, including restricting access and preventing unauthorised use. No system can guarantee that it is free of security risks.

8. Cookies and local storage

The website may use cookies or similar technologies to maintain sign-in, security and essential settings. We temporarily store campaign-source tags and referring website names for the current visit. When you create an account or select a plan, these details may be saved with the relevant records to help us understand demand from different channels. We do not save the original referring URL or search terms. You can manage related settings in your browser, but disabling essential storage may affect sign-in and some features.

We load Google Analytics only after you allow website analytics. It records page visits and button interactions to help improve the website. You can change your choice through “Analytics settings”. Refusing analytics does not affect sign-in or use of the website. We do not send email addresses, message content or payment details to Google Analytics.

9. Product updates and marketing

We use your email address to send updates on product development, launch news and offers only after obtaining the required consent.

You can stop receiving these messages at any time using the unsubscribe option in a message or by emailing us. Refusing or withdrawing marketing consent does not affect services you have already purchased. Necessary account, security and service notices are handled separately.

10. Access, correction and other requests

You may request access to or correction of the personal data we hold, and may also request account closure, data deletion or withdrawal of relevant consent.

We may ask for reasonable information to verify your identity and will handle requests according to applicable law. Some data cannot be deleted immediately because of legal retention requirements or dispute handling. If so, we will explain why.

Personal data contact: Privacy Officer. Email: service@heyming.app.

11. Policy updates

We show the latest version and date on this page. We will provide appropriate notice of significant changes. Where a use requires separate consent, we will obtain that consent before processing the data for that use.