Privacy Policy

Last Updated: March 20, 2026

This Privacy Policy describes how Hangzhou Enpixi Intelligent Technology Co., Ltd. ("VarenChat," "we," "us," or "our") collects, uses, stores, and shares information when you use the VarenChat mobile applications for iOS and Android (the "App") and all related services (the "Services"). This Privacy Policy is incorporated into and forms part of our Terms of Service.

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Services.

For questions about this Privacy Policy, contact us at [email protected].

1. Information We Collect

1.1 Information You Provide

• Account Information. When you create an account, we collect your username, email address, and authentication credentials (including third-party login tokens if you sign in via Apple, Google, or other providers).
• Profile Information. Information you add to your profile, such as display name, avatar, gender, date of birth, and bio.
• Conversation Data. The messages you send and receive during interactions with AI characters, including text inputs and any content you share within conversations.
• Character Content. Characters you create, including character names, descriptions, personality settings, backstories, greeting messages, and associated images or media.
• Payment Information. When you purchase a VarenChat Pro subscription, transactions are processed by the Apple App Store or Google Play Store. We receive transaction confirmation and purchase history but do not directly collect or store your credit card or payment instrument details.
• Support Communications. Information you provide when contacting us for support, including email correspondence and any attachments.

1.2 Information We Collect Automatically

• Device Information. Operating system, device model, unique device identifiers, browser type, language settings, and mobile carrier.
• Usage Data. How you interact with the Services, including features used, characters engaged with, session duration, message frequency, buttons clicked, and navigation patterns.
• Log Data. IP address, access times, referring URLs, and error logs.
• Location Data. General location derived from your IP address (city or region level). We do not collect precise GPS location.

1.3 Cookies and Similar Technologies

If you access our website (varenchat.ai), we may use cookies and similar tracking technologies to collect browsing information, remember your preferences, and analyze site traffic. You can manage cookie preferences through your browser settings. The App itself does not use cookies.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Services. To operate and deliver the core features, including AI character conversations, character creation, and account management.
• Memory and Personalization. To power VarenChat's memory system, which uses your conversation history to provide contextually relevant and personalized AI responses. This may involve retrieval-augmented generation (RAG) techniques applied to your past interactions.
• AI Model Improvement. To improve the quality of AI-generated responses. When used for model improvement, conversation data is de-identified and aggregated. We do not use identifiable conversation content to train AI models without appropriate safeguards.
• Safety and Moderation. To detect, prevent, and address violations of our Terms of Service, including harmful content, abuse, fraud, and security threats.
• Customer Support. To respond to your inquiries and resolve issues.
• Analytics. To understand usage patterns, improve the Services, and develop new features.
• Communications. To send you service-related notices, updates, and (with your consent where required) promotional communications. You can opt out of promotional communications at any time.
• Legal Compliance. To comply with applicable laws, regulations, legal processes, or governmental requests.

3. How We Share Your Information

We do not sell your personal information. We do not share your data with advertisers. We may share information in the following circumstances:

• Service Providers. We engage trusted third-party service providers who perform services on our behalf, such as cloud hosting, data storage, analytics, customer support, and AI model providers (e.g., xAI for Grok). These providers are contractually obligated to use your data only as necessary to provide services to us and in accordance with this Privacy Policy.
• AI Model Providers. Your conversation inputs are sent to third-party AI model providers to generate responses. We take measures to minimize the personal information included in these transmissions and require providers to handle data in accordance with their privacy and security obligations.
• Legal Requirements. We may disclose information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of VarenChat, our users, or the public.
• Business Transfers. In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With Your Consent. We may share information with third parties when you give us explicit consent to do so.

4. AI-Generated Content and Conversation Data

4.1 Nature of AI Conversations. VarenChat uses third-party AI models to generate character responses. All AI-generated content is fictional and does not represent the views of VarenChat or any real person.

4.2 Memory System. VarenChat's memory feature stores and retrieves relevant information from your past conversations to create more personalized interactions. You can manage your conversation history and memory data through the App settings. Deleting a conversation removes it from the memory system.

4.3 Character Content. Characters you create may be visible to other users if you choose to make them public. Public characters and their descriptions are accessible to the VarenChat community. You can set characters to private at any time.

4.4 Sensitive Topics. Role-playing conversations may involve sensitive or mature themes. We implement content moderation systems to enforce our content policies. We process such content solely to provide the Services and ensure safety — never for advertising or marketing purposes.

5. Data Storage and International Transfers

5.1 Storage Locations. Your data may be stored and processed on servers located in the United States and/or the People's Republic of China. By using the Services, you consent to the transfer of your data to these jurisdictions.

5.2 International Transfers. If you are located outside the United States or China, your information may be transferred to and processed in jurisdictions that may not provide the same level of data protection as your home country. We implement appropriate safeguards, including contractual protections, to ensure your data remains protected in accordance with this Privacy Policy.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. Specifically:

• Account Data. Retained until you delete your account.
• Conversation History. Retained until you delete individual conversations or your account, unless otherwise required by law.
• Character Content. Retained until you delete the character or your account.
• Payment Records. Retained as required for financial, tax, and legal compliance purposes.
• Aggregated/De-identified Data. May be retained indefinitely as it cannot be used to identify you.

After account deletion, we will delete or de-identify your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, legal claims).

7. Data Security

We implement commercially reasonable technical and organizational security measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and authentication requirements
• Regular security assessments and monitoring
• Secure server infrastructure with firewall protection

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify you in accordance with applicable law.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

8.1 Access and Portability. You may request a copy of the personal information we hold about you in a structured, machine-readable format.

8.2 Correction. You may request correction of inaccurate or incomplete personal information.

8.3 Deletion. You may request deletion of your personal information. You can delete your account directly through the App settings, or by contacting us at [email protected]. Upon account deletion, we will remove your personal data in accordance with Section 6.

8.4 Restriction and Objection. You may request that we restrict or stop processing your personal information in certain circumstances.

8.5 Withdrawal of Consent. Where processing is based on your consent, you may withdraw consent at any time. This will not affect the lawfulness of processing prior to withdrawal.

8.6 Opt-Out of Communications. You may opt out of promotional communications by following the unsubscribe instructions in our emails or adjusting your notification settings in the App.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days (or sooner if required by applicable law). We may ask you to verify your identity before processing your request.

9. European Users (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following additional provisions apply:

9.1 Legal Bases for Processing. We process your personal data on the following legal bases:

• Contract: To perform our obligations under the Terms of Service.
• Legitimate Interests: To improve and secure the Services, prevent fraud, and conduct analytics.
• Consent: For optional features such as promotional communications and processing of sensitive information provided in conversations.
• Legal Obligation: To comply with applicable laws and regulations.

9.2 Data Controller. Hangzhou Enpixi Intelligent Technology Co., Ltd. is the data controller for your personal data.

9.3 Data Protection Rights. In addition to the rights listed in Section 8, you have the right to lodge a complaint with your local data protection authority if you believe we have violated your data protection rights.

9.4 International Transfers. Where we transfer your data outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

10. California Users (CCPA/CPRA)

If you are a California resident, the following additional provisions apply under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

10.1 Categories of Information. We collect the following categories of personal information: identifiers (name, email, IP address), internet/electronic activity (usage data, conversation history), and inferences drawn from the above.

10.2 Your California Rights. You have the right to:

• Know what personal information we collect, use, and disclose.
• Delete your personal information, subject to certain exceptions.
• Opt out of the sale or sharing of personal information. We do not sell your personal information or share it for cross-context behavioral advertising.
• Non-discrimination. We will not discriminate against you for exercising your CCPA rights.

10.3 How to Exercise Your Rights. Contact us at [email protected] or use the account deletion feature in the App. You may designate an authorized agent to make requests on your behalf.

10.4 Do Not Track. We currently do not respond to "Do Not Track" browser signals.

11. Children's Privacy

11.1 Age Restriction. The Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are between 13 and 18, you may use the Services only with the consent of a parent or legal guardian.

11.2 Parental Controls. Parents and guardians who believe their child under 13 has provided personal information to us should contact us immediately at [email protected]. We will promptly delete such information and terminate the associated account.

11.3 COPPA Compliance. In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or disclose personal information from children under 13 without verifiable parental consent.

12. Third-Party Links and Services

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through or in connection with our Services.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App, sending you a notification, or by other reasonable means. The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Hangzhou Enpixi Intelligent Technology Co., Ltd.
Email: [email protected]