Privacy Policy

Introduction

Wibu.ai is an anime AI companion and creator platform operated by GEN A LIMITED (“we”, “us”, “our”). This Privacy Policy explains how we collect, use, store, share and protect your personal information when you use our mobile applications, our website at wibu.ai and all related services (together, the “Services”).

GEN A LIMITED is the data controller for the personal data described here.

Terms used but not defined here have the meaning given in our Terms of Service. Questions: support@wibu.ai.

1Age Requirement

The Services are intended for users 16 years of age or older. We do not knowingly collect personal information from anyone under 16. If we become aware that a user is under 16, we will promptly terminate the account and delete the associated data.

Some features carry their own age or regional requirements, which are shown in the App. Creator cash-out requires you to be of the age of majority where you live, because our payment providers require identity verification. See section 1 of the Terms of Service.

If you believe someone under 16 has created an account, contact support@wibu.ai and we will act promptly.

2Information We Collect

2.1 Information you provide

• Account information — name, email address, or unique identifiers from a third-party login provider such as Apple, Google or Telegram, depending on your settings with that provider.
• Profile data — username, profile photo, date of birth or age confirmation, pronouns, and your taste profile (genres, art style, personality preferences, content settings).
• Chat inputs — messages you send to characters, prompts, custom character descriptions, lore, and group messages.
• Uploaded media — reference photos used for character generation, profile pictures, and images you share in chat.
• Voice data — where you use voice features, any voice sample you upload so a character can use a custom voice. Handled under section 4.
• Creator content — characters, posts, games, captions, pricing and scheduling settings.
• Payment and payout information — Gem purchase and subscription transaction history, Gem balance and usage, and for creators: payout method, wallet address, identity documents and tax documentation. We do not store full payment card details; those are handled by the app stores and our payment providers.
• Support and reports — messages you send to support, copyright or content reports, moderation appeals, and the content you report.

2.2 Information we collect automatically

• Device and network data — device type, manufacturer and model, operating system, app version, browser, device and cookie identifiers, language, mobile carrier, IP address and coarse location (city or region) derived from it.
• Usage data — features used, session length and frequency, screens visited, links and buttons tapped, feed and search activity, characters followed, and Gem spending patterns.
• Chat metering data — token counts per message (input, output and cached), model used, and timestamps. This is how we operate the subscription allowance described in section 6 of the Terms.
• Content metadata — generation timestamps, content type and category, generation parameters, and performance metrics such as views and unlocks.
• Engagement data — missions completed, check-in streaks, referrals, Bond XP and relationship levels, Gems earned and spent, and Lucky game rounds and outcomes.
• Log data — access logs, error reports and crash diagnostics.

2.3 Information from third parties

• Basic profile information from login providers (Apple, Google, Telegram and others we may add), according to your settings with them.
• Purchase validation and subscription status from Apple and Google.
• Verification results from identity and anti-money-laundering providers, for creators who request a payout.
• Aggregate attribution and analytics data from advertising and measurement partners.

3How We Use Your Information

We process personal data on the legal bases set out below. Where we rely on consent, you may withdraw it at any time.

3.1 What we never do with your conversations

4AI Processing & Model Improvement

4.1 Your inputs go to AI providers

To make a character reply, generate an image, produce music or video, or speak a voice note, we send the necessary inputs to third-party AI providers. Each provider, the data it receives and the feature it powers are listed in the AI Disclosure & Data Sharing notice.

• Consent is requested per feature and per provider, before the first request to that provider, and is never pre-checked.
• You can review and withdraw each consent in Settings → Privacy → AI permissions, which also shows the date you last consented.
• Withdrawing a consent blocks that feature only — the rest of the app continues to work.

4.2 Model improvement

We may use de-identified and aggregated interaction data to evaluate quality, tune prompts and improve our systems. We take steps to remove personally identifying information before this use.

• We do not use your creative content, characters or conversations to train public or third-party foundation models.
• Where consent is required by law, we will ask for it or provide an opt-out at Settings → Privacy → Data Use.
• Content flagged by moderation may be retained and reviewed by humans for safety purposes regardless of this setting.

4.3 Voice data

If you upload a voice sample so a character can use a custom voice, we process it only with your separate consent, only to produce the voice you requested, and only through the provider named in the AI Disclosure. Depending on where you live, a voice sample may be treated as sensitive or biometric data, and we handle it accordingly.

You may delete your voice sample and any derived voice model at any time in Settings → Privacy → AI permissions → Voice, or by emailing support@wibu.ai. On request we instruct the provider to delete it as well. Absent an earlier request, voice samples and derived models are deleted within 90 days of the voice feature last being used or of account deletion, whichever is earlier.

Only upload your own voice. Uploading someone else's voice without their consent breaches the Community Guidelines.

4.4 Automated decision-making

We use automated systems to filter and flag content, detect fraud and abuse, apply spend and rate limits, and rank content in the feed. Decisions that materially affect you — account termination, permanent earnings forfeiture, or an upheld copyright strike — are subject to human review on appeal via support@wibu.ai. See section 11 of the Terms.

5How We Share Information

We do not sell your personal data. We share it only as described here.

All service providers are bound by contract to confidentiality and to use your data only for the purposes we specify.

5.1 What other users can see

• Public: your username and profile photo, the characters you publish, your posts and games, and your public creator stats.
• Visible in a group: your username, profile photo and the messages you send there.
• Private: your 1:1 conversations, your unpublished characters, your Gem balance, your earnings and your payout details are never shown to other users.

6Gems, Payments & Financial Data

Records of Gem purchases, subscriptions, creator earnings and payouts are retained as required by applicable accounting, tax and anti-money-laundering law — generally up to 7 years.

Creators who request a cash-out must complete identity verification and provide tax documentation. That data is used only to verify identity, meet legal obligations, and pay you; it is shared with our verification, payout and tax providers, and with financial institutions or regulators where required by anti-money-laundering, sanctions or tax regulations.

We monitor transaction patterns for fraud, chargeback abuse and money laundering. Suspicious transactions may be delayed, refused or reported, and the associated account may be restricted. See the Creator & Payout Terms.

7International Data Transfers

GEN A LIMITED is headquartered in Hong Kong and the Services operate globally. Your information may be transferred to, stored in and processed in countries other than your own, including Hong Kong, Vietnam, Singapore, the United States, Japan and the European Economic Area, depending on where we and our providers operate.

These countries may have data protection laws that differ from those in your country. Where required, we apply appropriate safeguards — including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum — and we assess each provider before transferring data to it. You may request a copy of the relevant safeguards at support@wibu.ai.

8Data Retention

We keep data only as long as needed to provide the Services and to meet our legal obligations.

If you downgrade to a plan with a shorter retention or smaller memory limit, data above the new limit may be deleted after a 30-day grace period. Export anything you want to keep before downgrading.

We may retain limited data beyond these periods where necessary to comply with a legal obligation, resolve a dispute, enforce our agreements, or prevent a banned user from re-registering.

9Security

We apply industry-standard technical and organisational measures, including:

• SSL/TLS encryption for data in transit and encryption at rest for sensitive stores
• Role-based access controls and the principle of least privilege
• Firewalls, network segmentation and continuous security monitoring
• Optional two-factor authentication and secure password requirements
• Regular security reviews, dependency scanning and access audits

Your part: keep your credentials confidential, use a strong unique password, sign out on shared devices, and report anything suspicious immediately to support@wibu.ai.

No system is entirely secure. In the event of a personal data breach that is likely to result in a risk to you, we will notify you and the relevant supervisory authority as required by applicable law.

10Cookies & Similar Technologies

We and our providers use cookies, local storage, SDKs, device identifiers and similar technologies for the following purposes:

Most browsers let you remove or block cookies. Blocking strictly necessary cookies may prevent parts of the Services from working. Where required by law, we ask for consent before setting non-essential cookies.

11Your Rights & Choices

Depending on where you live, you may have the following rights over your personal data:

11.1 Exercising your rights

• In app: Settings → Privacy — export your data, manage AI permissions, adjust data use and delete your account.
• By email: support@wibu.ai.
• Response time: within 30 days. Complex requests may take longer; we will tell you if so.
• We may need to verify your identity before acting on a request. We will not discriminate against you for exercising a right.

11.2 Marketing and advertising

Opt out of marketing email using the unsubscribe link in any message, or in Settings → Notifications. You will still receive essential service messages such as purchase confirmations, security alerts and policy changes. To reduce personalised advertising, use your device's ad-tracking controls, or subscribe to any paid plan — Wibu+ and Wibu+ PRO have no ads.

11.3 EEA, UK and Switzerland

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the rights above under the GDPR and UK GDPR, and the right to lodge a complaint with your local supervisory authority. Our legal bases are set out in section 3.

11.4 California

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, use, disclose and retain; to delete it; to correct it; to limit the use of sensitive personal information; and to opt out of “sale” or “sharing”. We do not sell personal information and we do not knowingly “share” it for cross-context behavioural advertising as those terms are defined by the CPRA. We do not sell or share the personal information of anyone under 16. Categories collected, the purposes and the recipients are set out in sections 2, 3 and 5.

11.5 Other regions

Residents of Vietnam, Japan, Brazil, Canada, Australia and other jurisdictions with comparable laws may have similar rights; we honour requests from any user regardless of location. Contact support@wibu.ai.

12Third-Party Links & Services

The Services may link to third-party websites, app stores, social platforms and services, including our official channels on Facebook, YouTube, TikTok and Discord. We do not control those services and are not responsible for their privacy practices. Review their policies before providing personal information.

Content and characters published by other creators are subject to this policy while on Wibu, but anything you choose to share off-platform is outside our control.

13Children's Privacy

The Services are not intended for anyone under 16, and we do not knowingly collect personal data from them. If you believe a person under 16 has provided us with personal data, contact support@wibu.ai and we will delete the account and its data promptly.

Content involving minors is strictly prohibited on Wibu. Where we identify such content we remove it, terminate the account permanently and report it to the appropriate authorities. See the Community Guidelines.

14Changes to This Policy

We may update this Privacy Policy. We will update the “Effective” and “Published” dates at the top of this page, and for material changes we will notify you by in-app notice or email before they take effect. Where a change requires your consent under applicable law, we will ask for it.

Continued use of the Services after the effective date constitutes acceptance of the updated policy. The current version is always at wibu.ai/privacy.

15Contact Us

For privacy questions, requests or complaints:

We aim to respond to every privacy request within 30 days.