Privacy Policy

Privacy Policy

Last updated: April 24, 2026

Welcome to Banban ("the app"). We take your privacy seriously. This policy explains what we collect, why, how it's used, and your rights.

1. What we collect

Account info：When you sign in with Apple ID or Google, we receive the email, name, and Apple/Google user identifier you authorize. We never receive your password.

Conversation content：All text, voice messages, and social feed interactions with AI characters are stored to enable persistent memory and relationship progression.

Device info：iOS version, app version, device model (for troubleshooting).

Push token：If you enable notifications, we store the Apple push token (APNs token) to send message alerts.

Usage analytics：Anonymous feature events (e.g. "opened character," "sent message") to improve the product. No conversation content.

2. How we use your data

  • Provide core functionality (chat, voice calls, feed, diary)
  • Maintain character memory and relationship progression
  • Send push notifications (if enabled)
  • Subscription management and customer support
  • Anonymous analytics to improve the product

We do not use your conversations to train AI models. We do not sell your data to third parties.

3. Third-party services

To provide core features, we use these third-party services:

xAI (Grok 4.1) / DeepSeek (V3.2)
Purpose: generate AI character text replies. Data sent: your text messages, conversation context, character configuration. These providers do not retain this data and do not use it to train their models.
Fish Audio (S2-Pro)
Purpose: voice synthesis for voice calls. Data sent: AI character text replies. The provider does not retain this data and does not use it to train its models.
Alibaba Cloud DashScope (Qwen3-ASR)
Purpose: speech recognition during voice calls (speech-to-text). Data sent: your voice audio (real-time stream, no retention). The provider does not retain this data and does not use it to train its models.
Google Gemini (Imagen)
Purpose: auto-generation of imagery for AI character social-feed posts. Data sent: scene description text (does not include your conversation content).
Cloudflare (Workers / D1 / R2 / KV)
Purpose: backend infrastructure — application logic, database, object storage, real-time. All API requests are routed through Cloudflare. Cloudflare is never used for AI training.
Apple (APNs)
Purpose: push notifications. Data sent: notification title and short body.

The providers above receive only the minimum data needed for their specific task and are contractually prohibited from retaining it or using it for model training. We do not use your conversations to train any AI model, and we do not sell your data to any third party.

4. Storage & protection

  • Data in transit encrypted with TLS 1.3.
  • Server-side data stored in Cloudflare D1 with encryption at rest.
  • Regular permission audits; minimum employee access to user data.

5. Your rights

Access：View all your conversations, feed, diary, and albums in-app anytime.

Delete：Profile → Account lets you delete chat history or your entire account.

Export：For a data export, email support@banban.chat.

Withdraw consent：Disable notifications, voice, or analytics at any time. Full withdrawal = delete your account.

6. Data retention

  • Active accounts: data kept until you delete
  • Deleted accounts: removed from production DB within 7 business days, from backups within 30 days
  • Anonymous analytics events: auto-purged after 90 days

7. Children's privacy

Banban is for ages 17+. We do not knowingly collect data from users under 13. If we discover such data, we delete it immediately.

8. Changes to this policy

Material changes will be announced in-app or by email. Continued use means you accept the updated policy.

9. Contact us

Questions about this policy? Email support@banban.chat。