Kivue AI Privacy Policy

How we collect, use, share and protect your personal data

Welcome to Kivue AI ("Kivue AI" or the "Platform"), including its official website and all other features, functions or services currently or potentially offered in the future (collectively, the "Services"). The Services are operated by Zhanjiang Xinghui Technology Co., Ltd. (湛江星辉科技有限公司) ("we", the "Company" or "our"). We value your privacy and are committed to protecting your personal data. This Privacy Policy (the "Policy") explains how we collect, use, share and protect your personal data when you access or use the Services, including any website or platform linking to this Policy. Please read and understand this Policy carefully before using or continuing to use the Services, and make your choices according to its instructions. By accessing or using the Services, you acknowledge and agree to this Policy. If you disagree, do not use the Services. This Policy does not apply to third-party products, services, websites or content ("Third-Party Services"). Those services are governed by their own privacy policies, which we recommend reading before use. 1. Personal data we collect and how we collect it Data you provide When you interact with the Services, you may voluntarily provide personal data, including the following: 1. Registration data: When you register an account, we collect details such as your username or nickname, password and email address. 2. User-generated content: We collect content you create, upload, generate or otherwise provide through the Services. This may include profile information such as your nickname and avatar, user-generated content, images, videos, prompts and other materials you create or share using the Services. Important notice: Users must not upload personal information, private information or sensitive data concerning themselves or others, or data that may involve national security or the public interest. This includes data meeting the important-data identification factors in China's Information Security Technology—Guidelines for Identification of Important Data, and types of data prohibited or restricted on this website by the laws of the user's country or region. Users bear legal responsibility for any penalties, losses or disputes resulting from uploads that violate this requirement. If such a violation causes penalties or losses to the website, we reserve the right to hold the user accountable. 3. Payment data: When you purchase paid services, as defined in our Terms of Service, we use third-party payment providers to process your transactions. They may collect card details or other financial data. We do not store your complete payment card details, but may retain transaction confirmations and records necessary for compliance and accounting. 4. Service feedback data: When you contact us for support, feedback or inquiries by email, feedback pages or other channels, we collect the data you voluntarily provide, including your messages and related details. Data collected automatically When you use the Services, including browsing without creating an account, we automatically collect certain data about your device and usage patterns. This may include: 1. Technical and device data: IP address, browser type, operating-system user agent, mobile carrier, time zone, device identifiers including advertising identifiers, device model, network type and screen resolution. 2. Usage data: We record usage information, including the website you visited before accessing the Services. 3. Other people's data: We may provide features for inviting others to the Services, and may collect invitees' telephone numbers, email addresses or other personal data for this purpose. Obtain their consent before referring them or sharing their contact details with us. Cookies and similar technologies We use cookies and similar technologies to operate and improve the Services: 1. Essential cookies enable you to browse the website and use its features. For example, they remember account information when you sign in. 2. Performance cookies help us understand how visitors use the website and improve its operation. We may use web analytics tools to analyze loading times, visitor interactions and the information visitors view most often. This helps us make information easier to find and identify and fix areas that do not work as expected. You can manage or disable cookies through your browser or device settings. Data from other sources 1. If you register or access the Platform using a third-party account, such as Google, we may receive your username, public profile details and other data you authorize that provider to share. We may also share limited data with the provider for authentication and account linking. 2. Marketing and event partners, such as joint marketing partners and event co-organizers. 3. Other sources, such as social media services, public records, service providers and other publicly available sources. 2. How we use your personal data Sharing with third parties We do not sell your personal data. We may share it with third parties for the purposes described in this Policy and as permitted by law. Such third parties must be bound by strict contractual requirements to process data only according to our instructions and this Policy. Recipients may include: (1) trusted service providers and business partners that help operate, improve and support the Services, including payment providers that securely process transactions; hosting and cloud providers that store and manage our infrastructure; analytics and measurement providers that assess performance and usage; and advertising and marketing partners where permitted by law and consistent with your preferences; and (2) professional advisers, including lawyers, auditors, banks and insurers, where necessary for their services to us. Company group We may share data with subsidiaries, parent companies and affiliates under common ownership or control to operate and improve the Services, develop products and features, and carry out internal reporting and business planning. Where entities are outside your country of residence, we apply appropriate safeguards for international transfers, as explained below. Legal and compliance obligations Where we believe in good faith that it is necessary, we may disclose data to law enforcement, regulators, courts or other third parties to comply with laws, legal proceedings or lawful requests; enforce our Terms of Service and other agreements or investigate potential violations; detect, prevent or address fraud, security or technical issues; protect the rights, property or safety of the Company, users or the public; or establish, exercise or defend legal claims. Sale or merger Data may be shared or transferred in a corporate transaction. In such a transaction, we will require the recipient to comply with this Policy or provide equivalent protection, and obtain your consent where required by law. With your consent With your consent or at your direction, we may share data with third parties for other purposes. Where required by law, we obtain your explicit consent before sharing. 3. Legal grounds for processing your personal data Some countries' and regions' privacy laws require a legal basis for processing personal data. We primarily rely on the following grounds: 1. Contractual necessity: Processing necessary to enter into, perform and administer the Terms of Service, including account creation and management, core services and features, payments or subscriptions, invoicing, delivering requested content and responding to service-related requests. 2. Consent: Where required by law or for optional features, we rely on your consent. You may withdraw it through settings or by contacting us, as described under your rights below. Withdrawal does not affect processing before withdrawal. 3. Legal obligations: Compliance with legal and regulatory requirements, including tax and accounting rules, lawful public-sector requests, required identity checks for fraud prevention, sanctions or anti-money-laundering screening, and data-subject rights obligations. 4. Legitimate interests: Necessary processing for our or a third party's legitimate interests, provided these are not overridden by your rights and freedoms. Interests include protecting the Platform, preventing fraud, abuse or misuse, developing the Services, measuring engagement, personalizing non-intrusive experiences, and supporting internal analysis and research. We take appropriate measures or obtain consent where required. 5. Vital interests, in rare cases: Protecting an individual's vital interests, such as responding to serious safety risks. 6. Legal claims: Bringing or defending claims, resolving disputes, or protecting our rights and the interests of users and the public. 4. International data transfers and storage Your data may be stored and processed on servers outside your country of residence. We currently store data on secure servers in Singapore, and affiliates or providers in other countries may support our operations. When transferring data across borders for the purposes in this Policy, we ensure compliance with applicable privacy and data-protection laws. European data-protection laws in particular contain rules for transfers outside the European Economic Area. For such transfers, we implement appropriate mechanisms to maintain expected security and privacy protections, or ensure the destination provides an adequate level of protection. We generally retain information for as long as needed for its collection purposes, including providing the Services. Legal obligations or establishing, exercising or defending legal claims may require longer retention. After you stop using the Services, we may retain aggregated and anonymized information. We may also retain information reasonably necessary to comply with legal obligations and resolve litigation disputes. 5. Protecting children's personal data The Platform and Services are primarily intended for people aged 13 or older, or the applicable legal childhood age in their jurisdiction. We do not intend to collect data from children under 13, and ask them not to provide personal data. If evidence shows you have violated this requirement, we may stop providing the Services. If we discover you are under 13, we will delete or anonymize your data as soon as possible. 6. How we protect your personal data We use security technologies and procedures to protect data against unauthorized access, use, disclosure, alteration, damage or loss. Measures include encryption in transit and at rest, regular security assessments and updates, access controls and authentication, and protection of data centers and infrastructure. However, internet transmission is not completely secure. We cannot guarantee absolute security of data transmitted through the Services, and transmission is at your risk. We respond to personal-data security incidents according to our incident-management plan, report them to competent authorities as required by law, and take reasonably practicable protective measures. Please use a strong password, never share it, and do not reuse it on other websites or accounts. 7. Exercising your personal-data rights You can sign in to view and update most account data. Depending on your location and applicable law, you may have the following rights: 1. Access and confirmation: Ask whether we process your personal data and obtain a copy of the data we hold. 2. Correction: Request correction of inaccurate or incomplete personal data. 3. Erasure, or the right to be forgotten: Request deletion in certain circumstances, subject to legal or contractual obligations. 4. Restriction: Request restrictions on processing in certain circumstances. 5. Portability: Where technically feasible, receive a copy in a structured, commonly used, machine-readable format and request transfer to another controller. 6. Withdrawal of consent: Withdraw consent at any time where processing relies on it, without affecting earlier processing. 7. Objection: Object to certain processing of personal data. 8. Complaint: Complain to your local data-protection authority if you believe your privacy rights have been infringed. We normally verify and process requests within 15 days of receipt. We may first need to verify your identity. If we cannot verify it, or you act for someone else without authorization, we may be unable to respond promptly or provide data. We will tell you about any permitted fees under your country's or region's law for access or exercising other data rights. You will not receive discriminatory treatment for exercising applicable rights. To exercise these rights, email [email protected]. You may also contact the authority responsible for complaints concerning personal-data use in your country or region of residence. 8. Changes to this Privacy Policy We publish revised policies on the website. We will notify you of material changes to our processing practices and, where required by law, obtain consent or ensure another legal basis before implementing them. Continuing to use the Services after changes take effect constitutes your understanding and agreement to the revised Policy. This Policy was updated and became effective in January 2026. 9. Contact us For feedback, questions or concerns about our use of your personal data, email [email protected]. We will respond within 15 business days after receiving your request and verifying your identity.