Privacy Policy

Introduction

TapDoki (“TapDoki,” “we,” “us,” or “our”) takes the protection of your privacy and Personal Data seriously. We process and protect your Personal Data in accordance with applicable privacy and data protection laws.

This Privacy Policy explains how we collect, use, disclose, share, process, store, and protect Personal Data when you use the TapDoki mobile application, compatible Doki devices, and related products and services (collectively, the “Services”).

TapDoki is provided by Beijing Wentian Lanyue Technology Co., Ltd. (北京问天揽月科技有限公司).

For purposes of this Privacy Policy, “Personal Data” means information that identifies, relates to, describes, or can reasonably be linked to an identified or identifiable individual, as defined under applicable law. Information that has been anonymized so that it can no longer reasonably identify or be linked to an individual is not considered Personal Data.

1. How We Collect and Use Personal Data

The Personal Data we collect depends on the TapDoki features you choose to use. If you do not use a particular feature, we generally will not collect Personal Data solely required for that feature.

1.1 Information You Provide and Information Collected Through TapDoki Features

We collect and process Personal Data as necessary to provide the Services you request and to operate TapDoki.

Account Registration and Login

When you register for or log in to TapDoki, we may collect:

• Mobile phone number;
• Account identifier and authentication information.

After registration, you may choose to provide or manage profile information such as:

• Profile photo or avatar;
• Nickname;
• Gender;
• Date of birth.

We use this information to create and authenticate your account, maintain your profile, provide TapDoki features, protect account security, and provide customer support.

Bluetooth and Doki Device Connection

When you bind or connect a compatible Doki device, TapDoki may request Bluetooth, Nearby Devices, scanning, and connection permissions depending on your operating system.

We may process:

• Bluetooth MAC address, where available on supported Android devices;
• UUID or similar Bluetooth identifiers on Apple devices;
• Doki device identifiers;
• Device binding and connection status;
• Technical information necessary to discover and connect to nearby compatible Doki devices.

We use this information to discover, identify, bind, connect to, and communicate with compatible Doki devices.

QR Code Scanning and Character Binding

When you actively select “Scan” or another QR code or barcode scanning feature, TapDoki will request access to your device camera.

Camera access is used to recognize and process QR codes or barcodes for purposes such as:

• Binding a Doki character;
• Binding a compatible device;
• Activating relevant TapDoki features.

We do not access your camera for this purpose unless you initiate the relevant feature and grant the required permission.

AI Text and Voice Conversations

TapDoki allows you to communicate and interact with Doki characters through text and, where available, voice.

When you use these features, we may process:

• Text messages and prompts you submit;
• Voice or audio input you actively provide;
• Transcriptions generated from voice input;
• Conversation history or conversational context where necessary to maintain the interaction;
• AI-generated responses.

When you use voice features, TapDoki will request permission to access your microphone.

We process this information to:

• Understand your instructions and requests;
• Generate responses from Doki characters;
• Maintain conversational context;
• Provide personalized character interactions;
• Maintain the functionality, safety, and reliability of AI-powered features.

Your text, voice, or related content may be processed using our servers or by third-party artificial intelligence, speech-processing, cloud-computing, or other technical service providers acting on our behalf where necessary to provide the requested functionality.

TapDoki's AI features are intended for entertainment, companionship, and creative purposes and are not intended to make decisions that produce legal or similarly significant effects concerning you.

Photos, AI Image Processing, and AI Plog Creation

TapDoki allows you to take photos or select images from your device and use them with AI-powered creative features.

When you choose to use these features, we may request access to your camera and/or photo library and process:

• Photos captured using your device camera;
• Photos or images you select and upload;
• Text, prompts, or other instructions you submit together with those images;
• Doki character information used in the requested creation;
• AI-generated or AI-enhanced resulting images and content.

We use this information to provide features you request, which may include:

• AI image enhancement or stylization;
• Adding or integrating your Doki character into a photo;
• Generating AI Plogs, journals, memories, stories, or other creative content;
• Creating images or content that you may save or share;
• Displaying your generated content within your TapDoki account.

Images and related content may be processed through our servers or through third-party cloud computing, image-processing, or artificial intelligence service providers acting on our behalf.

Content that you choose to save may remain associated with your TapDoki account until you delete the content, delete your account, or we no longer need to retain it for the purposes described in this Privacy Policy.

If an image contains another identifiable individual, please make sure you have the appropriate permission before uploading or sharing that image through TapDoki.

Friends and Doki Social Interactions

To provide TapDoki's friend and Doki interaction features, we may process:

• Your in-app TapDoki friends list;
• User identifiers and profile information of your TapDoki friends;
• Friendship and interaction records;
• Doki-to-Doki or user-to-user interaction information;
• Relationship or affinity information generated through TapDoki interactions;
• Content you choose to create, share, or co-create with friends.

We use this information to enable social interactions, friend features, collaborative experiences, Doki interactions, and shared content.

TapDoki does not access your device's general address book or contacts unless we separately request permission and explain the purpose of such access.

Push Notifications

If you enable push notifications, we may process information necessary to send notifications to your device, including:

• Device or push notification identifiers;
• Device and app information;
• Notification delivery information;
• Your notification preferences.

We use this information to provide notifications relating to TapDoki features, account activity, Doki interactions, or other Services.

You can disable push notifications at any time through your device settings.

1.2 Usage, Device, Network, and Diagnostic Information

When you use TapDoki, we or our service providers may automatically collect certain technical or usage information, including, depending on your device and operating system:

• Device type and model;
• Operating system and version;
• TapDoki application version;
• IP address;
• Network type and related network information;
• Device or application identifiers;
• Date and time of access;
• Feature usage and interaction events;
• Daily active usage and similar analytics events;
• Application performance information;
• Crash logs;
• Diagnostic and error information.

We use such information to:

• Operate and maintain TapDoki;
• Diagnose and resolve technical issues;
• Analyze the performance and use of TapDoki features;
• Maintain service stability;
• Detect and prevent fraud, abuse, or security incidents;
• Improve our products and user experience.

Depending on applicable law and the circumstances, certain device, network, identifier, or usage information may constitute Personal Data.

Where information is aggregated or anonymized so that it can no longer reasonably be associated with an identifiable individual, we may use such information for analytics, research, service improvement, and other lawful business purposes.

1.3 Legal Bases for Processing

Depending on the jurisdiction in which you reside and the relevant processing activity, we may process your Personal Data based on one or more of the following legal grounds:

Performance of a Contract

We may process Personal Data where necessary to provide the Services you request, including:

• Creating and operating your account;
• Connecting Doki devices;
• Providing AI conversations;
• Processing photos and creating AI-generated content;
• Providing social and friend features.

Consent

Where required by applicable law, we process Personal Data based on your consent.

This may include processing associated with optional device permissions such as:

• Camera;
• Photos or media library;
• Microphone;
• Bluetooth or Nearby Devices;
• Notifications.

You may withdraw your consent at any time where processing is based on consent.

Legitimate Interests

Where permitted by applicable law, we may process Personal Data where necessary for legitimate interests such as:

• Maintaining and improving TapDoki;
• Protecting users and our Services;
• Preventing fraud and abuse;
• Maintaining security;
• Debugging and troubleshooting;
• Understanding service performance and usage.

Where required by law, we balance these interests against your privacy rights and interests.

Compliance with Legal Obligations

We may process or disclose Personal Data where necessary to comply with applicable laws, regulations, legal proceedings, court orders, or lawful requests from governmental or regulatory authorities.

Other legal grounds permitted under applicable privacy laws may apply in specific circumstances.

2. How We Process, Share, Transfer, and Disclose Personal Data

2.1 Service Providers and Data Processors

We may engage third-party service providers and authorized partners to process Personal Data on our behalf in order to operate TapDoki.

Depending on the Services you use, these providers may include:

• Cloud hosting and data-storage providers;
• Artificial intelligence and generative AI providers;
• Image generation and image-processing providers;
• Speech recognition and voice-processing providers;
• Messaging and push-notification providers;
• Authentication and verification providers;
• Analytics and performance monitoring providers;
• Crash reporting providers;
• Security and fraud-prevention providers;
• Customer-support providers.

We require service providers acting on our behalf to process Personal Data only for legitimate, specific, and necessary purposes and only to the extent necessary to provide their services to us.

Where required by applicable law, such providers are contractually required to implement appropriate confidentiality, privacy, and security protections.

2.2 Third-Party SDKs

TapDoki integrates certain third-party software development kits (“SDKs”) to provide specific functions.

The SDKs used by the version of TapDoki installed on your device may vary depending on your operating system, geographic region, app version, and the features you choose to use.

The following SDKs may be integrated into TapDoki:

JPush SDK

Provider: Shenzhen Hexun Huagu Information Technology Co., Ltd. (深圳市和讯华谷信息技术有限公司)

Purpose: To provide push notification services to TapDoki users.

Information that may be processed, depending on the device and operating system:

• Device identifiers, including Android ID, OAID, MAC address, IMEI, and IMSI, where available;
• Device model and operating environment information;
• IP address;
• Network type;
• BSSID and SSID, where available;
• App version;
• Push SDK operation and diagnostic logs.

Privacy Policy: https://www.jiguang.cn/license/privacy

WeChat OpenSDK

Provider: Shenzhen Tencent Computer Systems Company Limited (深圳市腾讯计算机系统有限公司)

Purpose: When you actively choose to do so, to enable you to share TapDoki Plog images or other supported content to WeChat or WeChat Moments.

Information that may be processed:

• Basic device and application information;
• Network information;
• Sharing status or results;
• Other information reasonably necessary to complete the sharing operation.

The SDK is used for this purpose when you actively initiate the applicable sharing function.

Privacy Policy: https://weixin.qq.com/cgi-bin/readtemplate?lang=zh_CN&t=weixin_agreement&s=privacy

Douyin Open SDK

Provider: Beijing Douyin Technology Co., Ltd. (北京抖音科技有限公司)

Purpose: When you actively choose to do so, to enable you to share TapDoki Plog images or other supported content to Douyin.

Information that may be processed:

• Operating system information;
• User Agent information;
• Sharing records;
• Images or other content you actively choose to share.

Privacy Policy: https://developer.open-douyin.com/docs/resource/zh-CN/dop/operation-standard/service-protocol/douyin-sdk-privacy-policy

Xiaohongshu Share SDK

Provider: Xingyin Information Technology (Shanghai) Co., Ltd. (行吟信息科技（上海）有限公司)

Purpose: When you actively choose to do so, to enable you to share TapDoki Plog images or other supported content to Xiaohongshu.

Information that may be processed:

• Operating system;
• Operating system version;
• Device model;
• IDFV on iOS devices, where applicable;
• Information reasonably necessary to complete the requested sharing operation.

Privacy Policy: https://agree.xiaohongshu.com/h5/terms/ZXXY20230525001/-1

Third-party SDK providers may process information in accordance with their applicable privacy policies.

We periodically review the third-party SDKs integrated into TapDoki and will update this Privacy Policy where our relevant data practices materially change.

2.3 Sharing With Other TapDoki Users

When you voluntarily use social, friend, collaboration, or sharing features, certain information may become visible to other TapDoki users you interact with.

Depending on the feature, this may include:

• Nickname;
• Avatar;
• Doki character information;
• Shared Plogs;
• Interaction information;
• Content you choose to share or co-create.

Please carefully consider the information and content you choose to share with others.

2.4 Affiliates and Business Partners

We may share Personal Data with our affiliates or authorized partners where reasonably necessary to operate, maintain, secure, support, or improve TapDoki.

Recipients are required to handle Personal Data in accordance with applicable privacy laws and appropriate confidentiality and security obligations.

2.5 Corporate Transactions

Except as described in this Privacy Policy, we do not transfer ownership of your Personal Data to another organization without an appropriate legal basis.

If we are involved in a merger, acquisition, restructuring, financing, sale of assets, or similar corporate transaction, Personal Data may be transferred as part of that transaction.

Where required by applicable law, we will provide appropriate notice regarding any material changes concerning ownership or use of your Personal Data and the choices available to you.

2.6 Legal and Safety Disclosures

We may disclose Personal Data where we reasonably believe it is necessary to:

• Comply with applicable laws or regulations;
• Respond to valid legal proceedings, court orders, or governmental requests;
• Protect the rights, property, or safety of TapDoki, our users, or others;
• Investigate suspected fraud, abuse, security incidents, or unlawful activity;
• Establish, exercise, or defend legal claims.

2.7 Public Disclosure

We may make Personal Data public only where:

1. You have expressly consented to the disclosure or have deliberately chosen to make the information publicly available through a TapDoki or third-party sharing feature; or
2. Disclosure is required or permitted under applicable law or valid legal process.

2.8 Sale and Targeted Advertising

TapDoki does not sell your Personal Data in exchange for monetary consideration.

TapDoki does not use or share your Personal Data for cross-context behavioral advertising or targeted advertising as defined under applicable U.S. state privacy laws unless we separately disclose such practices and provide any choices required by applicable law.

3. Data Storage, Retention, and International Transfers

3.1 Data Retention

We retain Personal Data only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy or as required or permitted by applicable law.

Retention periods may vary depending on the nature of the information and the purpose for which it is processed.

For example:

• Account and profile information may be retained while your account remains active;
• AI conversations or creative content that you choose to save may remain associated with your account until deleted or until your account is deleted;
• Uploaded photos and AI-generated Plogs may be retained as necessary to provide the requested service and maintain content you choose to save;
• Technical, security, and diagnostic information may be retained for an appropriate period necessary for security, debugging, fraud prevention, or service reliability.

When the purpose for collecting Personal Data has been fulfilled, when we confirm a valid deletion or account deletion request, or when we discontinue the relevant Services, we will delete or anonymize the relevant Personal Data within a reasonable period unless retention is required or permitted by applicable law.

We may retain certain information for longer where necessary to:

• Comply with legal or regulatory requirements;
• Comply with court orders or other legal proceedings;
• Prevent fraud or abuse;
• Resolve disputes;
• Protect our legitimate legal interests.

3.2 International Data Transfers

TapDoki is provided internationally.

Your Personal Data may therefore be transferred to, stored in, accessed from, or processed in countries or regions outside the country where you reside, including China and jurisdictions in which our service providers or technical infrastructure operate.

Data protection laws in those jurisdictions may differ from those in your country.

Where applicable law requires safeguards for international transfers, we will implement appropriate measures designed to protect your Personal Data.

For example, where required for transfers from the European Economic Area or United Kingdom, we may rely on legally recognized transfer mechanisms such as adequacy decisions, approved Standard Contractual Clauses, or other applicable safeguards.

4. How We Protect Your Personal Data

4.1 Security Measures

We take reasonable administrative, technical, and organizational measures designed to protect Personal Data against:

• Unauthorized access;
• Unauthorized disclosure;
• Loss;
• Destruction;
• Misuse;
• Alteration.

Depending on the nature of the information and Services, these measures may include:

• Encryption during data transmission;
• Appropriate protection of stored data;
• Access controls;
• Authentication mechanisms;
• System and infrastructure protections;
• Security monitoring;
• Internal security and privacy procedures.

Personal Data collected by us is stored on systems designed to provide appropriate security protections.

However, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure.

4.2 Personal Data Security Incidents

If a Personal Data security incident occurs, we will take reasonable and appropriate measures to investigate, contain, mitigate, and remediate the incident.

Where required by applicable law, we will notify affected individuals and/or relevant regulatory authorities.

Such notice may include:

• The nature of the incident;
• The Personal Data that may be affected;
• The potential impact of the incident;
• Measures we have taken or plan to take;
• Steps you may take to reduce potential risks;
• Contact information for further assistance.

We may provide such notices through in-app messages, push notifications, email, public notices, or other appropriate methods.

5. Your Privacy Rights and Choices

Depending on where you live, applicable privacy laws may provide you with certain rights regarding your Personal Data.

These rights may include the right to:

• Access your Personal Data;
• Obtain a copy of your Personal Data;
• Correct or supplement inaccurate Personal Data;
• Request deletion of Personal Data;
• Withdraw consent;
• Restrict certain processing;
• Object to certain processing;
• Request data portability where applicable;
• Opt out of certain uses or disclosures where applicable;
• Submit a complaint to an applicable privacy or data protection authority.

Certain rights may be subject to limitations or exceptions under applicable law.

5.1 Device Permission Settings

You can manage TapDoki permissions through your device settings, including:

• Microphone;
• Camera;
• Photos or media library;
• Bluetooth or Nearby Devices;
• Notifications.

You may enable, disable, or modify these permissions at any time.

After a permission is withdrawn, we will no longer access information through that permission unless you grant it again.

Withdrawal does not affect the lawfulness of processing performed before the permission or consent was withdrawn.

Certain TapDoki features may no longer function if the corresponding permission is disabled.

5.2 Accessing and Managing Your Personal Data

You may manage certain Personal Data directly within TapDoki.

Profile Information

Go to:

Me → Profile / Account

to view and manage information such as your:

• Avatar;
• Nickname;
• Gender;
• Date of birth.

Friends

Go to:

Home → My Friends

or the applicable friends section to view and manage your TapDoki friends.

If you are unable to exercise a relevant privacy right through TapDoki, you may contact us through the in-app feedback function or at:

legal@haivivi.com

To protect your Personal Data, we may request information reasonably necessary to verify your identity before processing certain requests.

We will respond to valid requests within the period required by applicable law.

5.3 Withdrawing Consent

Where our processing of Personal Data is based on your consent, you may withdraw that consent at any time.

You may:

• Change device permissions through your operating system settings; or
• Contact us at legal@haivivi.com.

After receiving a valid withdrawal request, we will stop the relevant consent-based processing as required by applicable law.

Withdrawal of consent does not affect the lawfulness of processing performed before your consent was withdrawn.

Withdrawing consent may prevent certain TapDoki features from functioning.

If you wish to withdraw from TapDoki entirely, you may delete your account.

5.4 Account Deletion

If you no longer wish to use TapDoki, you may request deletion of your account.

Within TapDoki, go to:

Me → Account and Security → Delete Account

Account deletion is irreversible.

Once your account deletion request has been completed, we will stop providing Services associated with that account and delete or anonymize Personal Data associated with it within a reasonable period, except where applicable law requires or permits us to retain certain information.

If you are unable to access TapDoki, you may also contact:

legal@haivivi.com

to request account or Personal Data deletion.

We may also provide an online account deletion request page accessible outside the TapDoki application.

6. Age Requirements and Children's Privacy

TapDoki is designed for adults and is not intended for children under the age of 18.

You must be at least 18 years old, or have reached the age of majority in your jurisdiction if a higher age applies, to create a TapDoki account or use the Services.

We do not knowingly collect Personal Data from children through the Services.

If we become aware that Personal Data has been collected from an individual who does not meet the applicable minimum age requirement, we will take reasonable steps to delete the relevant information and terminate the associated account, unless retention is required by applicable law.

If you believe that a minor has provided Personal Data to TapDoki, please contact us at:

legal@haivivi.com

7. Additional Privacy Rights in Certain Jurisdictions

7.1 European Economic Area and United Kingdom

If you are located in the European Economic Area (“EEA”) or United Kingdom and applicable data protection law applies to our processing, you may have rights including:

• The right to be informed about how your Personal Data is processed;
• The right to access your Personal Data;
• The right to correct inaccurate or incomplete Personal Data;
• The right to request deletion of Personal Data in certain circumstances;
• The right to restrict processing in certain circumstances;
• The right to object to certain processing;
• The right to data portability where applicable;
• The right to withdraw consent at any time where processing is based on consent;
• The right to lodge a complaint with an applicable data protection authority.

The availability of a particular right depends on the circumstances and applicable law.

7.2 California and Certain Other U.S. States

If you reside in California or another U.S. state that provides applicable consumer privacy rights, you may have rights including:

• The right to know what Personal Data we collect and process;
• The right to access certain Personal Data;
• The right to request correction;
• The right to request deletion;
• The right to obtain certain Personal Data in a portable format;
• The right to opt out of the sale or sharing of Personal Data where applicable;
• The right to opt out of certain targeted advertising where applicable;
• The right to limit certain uses of sensitive Personal Data where applicable;
• The right not to receive discriminatory treatment for exercising applicable privacy rights.

Depending on how you use TapDoki, the categories of Personal Data we may process include:

• Identifiers, such as phone numbers, account IDs, IP addresses, or device identifiers;
• Profile information, such as nickname, avatar, gender, or date of birth where provided;
• Internet or electronic activity information, such as feature usage, app interactions, and diagnostics;
• Audio information, such as voice input you actively provide;
• Visual information, such as photos you actively upload;
• User-generated content, such as prompts, conversations, Plogs, and AI-generated content;
• Social information, such as TapDoki friend and interaction information.

You may submit a privacy request by contacting:

legal@haivivi.com

We may take reasonable steps to verify your identity before fulfilling your request.

7.3 Canada

If you reside in Canada, you may have rights under applicable Canadian privacy laws to request access to Personal Data we hold about you and request correction of inaccurate or incomplete information.

You may contact us using the information provided below to exercise applicable privacy rights or raise questions regarding our privacy practices.

7.4 Singapore and Other Asia-Pacific Jurisdictions

If you are located in Singapore or another Asia-Pacific jurisdiction, you may have rights under applicable local privacy or data protection laws.

Depending on your jurisdiction, these may include rights to:

• Request access to certain Personal Data;
• Request correction of inaccurate Personal Data;
• Withdraw consent;
• Request deletion where provided by applicable law;
• Request information regarding the use or disclosure of Personal Data;
• Submit a privacy complaint.

We will respond to valid requests in accordance with applicable local law.

8. Third-Party Services and External Platforms

TapDoki may allow you to interact with or share content to third-party platforms, including social media services.

When you actively choose to share content to a third-party platform, that platform may independently process information in accordance with its own privacy policy and terms.

Once your information or content has been transferred to a third-party service at your request, that service's independent processing of the information may not be governed by this Privacy Policy.

We encourage you to review the privacy practices of any third-party service before using it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to TapDoki features or Services;
• Changes to our data-processing practices;
• Changes to third-party SDKs or service providers;
• Changes to applicable laws or regulatory requirements;
• Security or operational developments.

If we make material changes, we will provide notice as required by applicable law, which may include an in-app notification, push notification, or other appropriate notice.

The “Last Updated” date at the top of this Privacy Policy indicates when this Privacy Policy was most recently revised.

We encourage you to review this Privacy Policy periodically.

10. Contact Us

TapDoki is provided by:

Beijing Wentian Lanyue Technology Co., Ltd. (北京问天揽月科技有限公司)

If you have questions, requests, or complaints regarding this Privacy Policy or our processing of your Personal Data, please contact us at:

Email: legal@haivivi.com

Address:

Room 1306, 13th Floor, Building 1

No. 186 Beiyuan Road

Chaoyang District

Beijing, China

We will respond to valid privacy requests within the period required by applicable law.

If your request involves a significant privacy or security matter, we may request additional information reasonably necessary to understand your request or verify your identity.

If you are not satisfied with our response, you may have the right to lodge a complaint with the privacy or data protection authority in the jurisdiction where you reside.