1. Data Controller
The data controller for this Service is Nibbo (operated by an individual proprietor). For privacy matters, contact us at support@nibbo.ai.
2. Personal Information We Collect
2.1 Information you provide
- Account information: such as your registration email.
- Pet photos you upload: used to generate your personal desktop-pet assets.
- Communications: the content of your exchanges with our support.
2.2 Information collected automatically
- Device & network information: such as device model, operating system, and IP address.
- Usage behavior: such as feature usage and generation records.
- Log data: technical logs necessary for security and troubleshooting.
The pet photos you upload are used only to generate your desktop-pet assets. We will not use them to train AI models without your explicit consent, nor share them with unrelated third parties.
3. Purposes & Legal Bases
We process your personal information for the following purposes on the corresponding legal bases:
| Purpose | Legal basis |
|---|---|
| Providing & delivering the service (generation, account, desktop sync) | Performance of a contract |
| Processing payments & refunds | Contract / legal obligation |
| Customer support & communications | Contract / legitimate interest |
| Security & fraud prevention | Legitimate interest / legal obligation |
| Service optimization & troubleshooting | Legitimate interest |
| Marketing communications (if you opt in) | Your consent |
We may aggregate or de-identify data for analytics and service improvement.
4. Cookies & Tracking
We use cookies and similar technologies to support the Service and improve the experience, in the following categories:
- Essential: enable core functions such as sign-in and security; cannot be disabled.
- Functional: remember your preferences.
- Analytics: help us understand how the Service is used.
- Marketing (optional): enabled only with your consent.
You can manage or clear cookies through your browser settings.
5. Sharing & Disclosure
We do not sell your personal information. We share it only in the following cases:
- Service providers: such as hosting, payment, and analytics, only to the extent needed to provide the Service.
- Legal & regulatory requirements: in response to lawful requests from law, regulation, or authorities.
- Business reorganization: such as a merger or acquisition, with advance notice.
- Other cases with your consent.
Payment card data is handled by our PCI-DSS-compliant payment processor, Waffo Pancake, and is never stored on our servers.
6. Data Security
- Encryption in transit: TLS / HTTPS throughout.
- Storage protection: sensitive data is encrypted or hashed.
- Access control: internal access is limited on a need-to-know basis.
- Security audits: regular assessment and hardening.
In the event of a personal-data breach, we will notify affected users and the relevant authorities within 72 hours of becoming aware, as required by law.
7. Retention Periods
| Data type | Retention period |
|---|---|
| Account information | For the life of the account; 90 days after deletion |
| Transaction records | As required by applicable law |
| Support & communication logs | 2 years from last contact |
| Security & audit logs | 12 months |
After the retention period, we delete or anonymize the relevant data.
8. Your Data Rights
Subject to applicable law, you have the following rights:
- Access and correct your personal information.
- Delete your personal information (the “right to be forgotten”).
- Restrict or object to certain processing.
- Data portability.
- Withdraw consent previously given.
You can exercise these rights via support@nibbo.ai, and we will respond within 30 days. You also have the right to lodge a complaint with your local data-protection authority.
9. Marketing & Opt-Out
We send marketing communications (e.g. by email) only after you opt in. You can unsubscribe at any time via the link in the email or by contacting support@nibbo.ai. Service-critical notices (such as billing and security) are unaffected.
10. Cross-Border Transfers
To provide the Service, your information may be transferred to and processed on servers or by providers outside your location. For such transfers, we apply appropriate safeguards (such as the EU Standard Contractual Clauses) to ensure your information receives an equivalent level of protection.
11. Protection of Minors
The Service is intended for adults, and we do not knowingly collect personal information from minors under 18. If you discover that a minor has submitted information to us, please contact support@nibbo.ai and we will delete it promptly.
12. Third-Party Links & Services
The Service may contain links to third-party websites or services. We are not responsible for their privacy practices, and we recommend reviewing their privacy policies yourself.
13. Changes to This Policy
We may update this policy from time to time. For material changes, we will notify you at least 14 days before the effective date via an in-app notice or email. Continued use after the change takes effect constitutes acceptance of the updated policy.
14. Contact Us
For any questions, requests, or complaints regarding this policy or your personal information, contact:
- Privacy / support: support@nibbo.ai
