Privacy Policy

1. Who We Are & Scope

This Privacy Policy explains how AllXOne ("we", "us", "our") collects, uses, shares and protects personal information when you use our websites, mobile apps and services. It applies to all of the apps in the AllXOne family, including (as applicable): AllXOne (web platform), Talkians (Ella), Mimiko, Imagions, Craftiq and Xaddict, together referred to as the "Services".

We are the data controller of your personal information. AllXOne is established in India with its registered office at 2nd Floor, SK Tower, Boring Road, Patna, Bihar 800001, India. Contact us at [email protected] for any privacy question or request.

2. Information We Collect

Depending on which Service you use, we collect the following categories of personal information:

• Account information — name, email address, profile photo and sign-in details when you register or sign in with Google or email.
• User content — chat messages, conversation history, uploaded images/photos, character profiles you create, memories, and other content you submit.
• Transaction data — subscription and purchase history. Payments are processed by the app stores (Google Play / Apple App Store) or by our payment providers; we do not store full card numbers.
• Usage & device data — app version, device model, OS version, language, approximate country/region, crash reports, and how you interact with the Services.
• Advertising identifiers — where you use ad-supported features, a mobile advertising ID generated by your device may be processed by our advertising partners to serve non-personalized ads, limit how often you see them and prevent fraud. It is not used to build an advertising profile about you.
• Support communications — if you contact us, we keep the contents of your messages.

3. How We Use Information

• To create and manage your account and keep you signed in.
• To operate the AI chat features: your messages and character context are processed by us and by third-party AI providers to generate responses (see Section 5).
• To remember context and preferences, including optional "memories" you allow us to keep about you and your conversations.
• To process subscriptions, purchases and in-app balances (sparks/credits/wallet).
• To serve rewarded ads where you choose to watch them, and to reward you accordingly.
• To send notifications you request (e.g. scheduled messages, push notifications).
• To maintain security, prevent fraud/abuse (including invalid ad traffic), debug and improve the Services.
• To respond to support requests and comply with legal obligations.

4. Legal Bases for Processing (EEA / UK)

If you are located in the EEA or the UK, we rely on the following legal bases under the GDPR / UK GDPR:

• Performance of a contract — to provide the Services you asked for (e.g. account creation, chat, purchases).
• Legitimate interests — to secure the Services, prevent fraud and invalid ad traffic, and improve our products, where those interests are not overridden by your rights.
• Consent — where required (e.g. some push notifications, optional "memories"), which you may withdraw at any time.
• Legal obligation — where we must retain or disclose data to comply with law.

5. AI Processing & Third-Party Model Providers

Our chat and image-generation features are powered by AI. To generate a response, we send your message, relevant conversation history, character context, and any memory you have enabled to third-party AI model providers under confidentiality and data-protection commitments. Those providers process the data only to generate the response, and we do not allow your content to be used to train their models.

Privacy toggle: where the app offers a "Save Memories" or similar control, we only keep long-term memories and summaries when you leave it ON. Turning it OFF stops new memory recall and storage. We do not sell your personal data, and we do not use your chat content to train third-party foundation models.

6. Advertising & Ad Choices

Some of our apps (e.g. Talkians, Mimiko) show rewarded video ads. We work with third-party advertising networks and their mediation partners to serve and verify these ads.

• Rewarded ads are optional — you always choose whether to watch one, and rewards are granted only for completed views.
• Non-personalized ads only: we do not serve personalized or behavioral ads. Your advertising ID is not used to profile you or to target ads across apps and websites, so no ad-consent pop-ups are required to show them.
• Server-side verification: rewards are verified server-side so a completed view is required; this also helps detect invalid traffic.

7. Sharing of Information

We share personal information only with the categories of recipients listed below, and only for the purposes described in this policy:

• AI/model providers (Section 5) — to generate responses and images.
• Hosting & infrastructure providers — secure cloud providers that host our databases, chat storage, content delivery and push notifications.
• Advertising networks — third-party networks and their mediation partners, for serving and verifying rewarded (non-personalized) ads.
• Payment processors — the app stores and payment providers you transact through, which handle billing on their own terms.
• Analytics & support tools — to measure performance and handle support.
• Authorities & legal — when required by law, legal process, or to protect rights/safety.

8. International Data Transfers

Your information may be processed in countries other than your own (including the United States and India). When we transfer personal data from the EEA, UK or Switzerland to countries not recognized as providing an adequate level of protection, we rely on appropriate safeguards, such as the European Commission's / UK's Standard Contractual Clauses, and/or the EU-US/UK-US Data Privacy Framework where applicable. You can request a copy of the relevant safeguards by contacting us.

9. Data Retention

We keep your personal information only as long as needed for the purposes described above: for the life of your account plus a reasonable period afterwards where required for backups, fraud/security, or legal obligations. Chat history, memories and other account data are deleted or anonymized when you delete your account, subject to legal/backup retention.

10. Your Privacy Rights (Global)

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase ("right to be forgotten") your data;
• Restrict or object to certain processing;
• Data portability — receive your data in a machine-readable format;
• Withdraw consent at any time where processing is based on consent;
• Not be discriminated against for exercising your rights.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by law (usually 30 days; up to 45 days for US state-law requests). You may also lodge a complaint with your local data-protection authority (e.g. your EU supervisory authority or the UK ICO).

11. US State Privacy Rights (incl. California CCPA/CPRA)

If you live in California or another US state with a comprehensive privacy law (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others), you have additional rights under the CCPA/CPRA and similar state laws:

• Right to Know the categories and specific pieces of personal information we collected about you, and how it is shared.
• Right to Delete your personal information (with exceptions).
• Right to Correct inaccurate personal information.
• Right to Opt Out of Sale/Sharing: we do not sell your personal information, and we do not engage in cross-context behavioral advertising — we serve only non-personalized ads (Section 6).
• Shine the Light: California residents may request a list of third parties to whom we disclosed personal information for their own direct-marketing purposes in the prior year (we do not make such disclosures).
• Authorized agent: you may designate an authorized agent to make a request on your behalf.
• Minors: we do not "sell" or "share" personal information of consumers we know are under 16.

To exercise any US privacy right, email [email protected] with the subject "Privacy Request" and let us know which of our apps you are using. We will verify your identity and respond within the legally required period.

12. Children's Privacy

Our Services are not directed to children under 13 (and where applicable under 16), and we do not knowingly collect personal information from children. Some of our apps are restricted to users 18 or older. If you believe a child has provided us personal information, contact us and we will delete it.

13. Data Security

We protect your privacy and data with robust technical and organizational measures, including strong encryption in transit (TLS) and at rest, strict access controls, continuous monitoring and regular security reviews. No method of transmission or storage is 100% secure — you use the Services at your own risk.

14. Cookies & Similar Technologies (Web)

Our website uses strictly necessary cookies/local storage for sign-in and preferences, and may use analytics cookies to understand aggregate usage. Where required by law (EEA/UK), we ask for consent before non-essential cookies. You can manage cookies in your browser settings.

15. Account & Data Deletion

You can delete your account and associated personal data at any time:

• In-app: use the "Delete account" option in the app's Settings/Profile area (available in Talkians, Mimiko, Imagions, Craftiq, Xaddict and AllXOne).
• Online request form: submit a deletion request on our Account & Data Deletion page.

We will process deletion requests within 30 days (sooner where possible), removing personal identifiers, chat history, memories and related account metadata in accordance with applicable law, except where retention is required for legal, billing or anti-fraud reasons.

For the full step-by-step instructions, the types of data deleted vs. kept, and our retention periods, please see our dedicated Account & Data Deletion page.

16. Changes to This Policy

We may update this policy from time to time. Material changes will be notified in-app or by email where required. The "Last updated" date above reflects the latest revision; continuing to use the Services after changes means you accept the updated policy.