Privacy Policy

1. Information We Collect

We collect information needed to provide the service, including account details (username, email, and display name), prompts and generated creations, transaction and subscription records, device and log information, feature usage, and preferences. Do not include unnecessary sensitive personal information in prompts.

User creations are private by default. When a user actively uses a sharing feature, other people may access the creation through the relevant sharing entry point.

2. How We Use Information

• Create and manage accounts and provide creative, portfolio, wallet, and subscription features.
• Screen content, prevent fraud, troubleshoot, and protect the service.
• Send verification, security, transaction, and other necessary service messages.
• Analyze and improve the product where permitted, obtaining consent when required. Product analysis and improvement do not include using user prompts or creations to train generative AI models.

3. Service Providers and Disclosure

Xiaobu Lab does not use user prompts or generated creations to train its own generative AI models, and does not provide this content to third parties for model training. To complete a generation request actively started by the user, necessary content may be processed by AI model, cloud storage, or related technical service providers; technical processing for the current request is not model training.

We may provide email, analytics, and payment providers with the minimum information needed for their services. Payment details are handled by payment providers. We do not sell children’s personal information or use it for targeted advertising.

4. Children’s Privacy

We give special care to children’s information. A child under 13 should use the service only with a parent or guardian’s consent and supervision. Guardians may request access, correction, export, or deletion. If we learn information was collected without appropriate consent, we will take reasonable steps to delete it.

5. Retention and Security

We retain information only as long as needed to provide the service, meet legal obligations, resolve disputes, and maintain safety. We use reasonable safeguards such as encryption in transit, access controls, logging, and backups, but no system can guarantee absolute security.

6. Your Rights

Depending on applicable law, you may request access, correction, deletion, export, restriction, withdrawal of consent, or object to processing. Some records may be retained for security, transactions, or legal obligations.

7. International Processing and Links

Providers may process information outside your region. We use safeguards required by applicable law. Third-party sites and services are governed by their own privacy policies.

8. Changes and Contact

We will provide reasonable notice of material changes. Send privacy requests to support@xiaobulab.com.