This Privacy Notice explains how Tamim International Trading Limited (Hong Kong company registration no. 80857308) (“ECJOY.AI,” “ECJOY,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use ecjoy.ai, related applications, and services. ECJOY is the controller or business responsible for this processing except where stated otherwise.
ECJOY conversations may reveal or permit inferences about intimate interests, sex life, sexual orientation, health, relationships, or other sensitive matters. We treat private conversation content and related inferences as sensitive. We do not need your legal name, workplace, home address, medical record, or other unnecessary real-world identifiers for ordinary roleplay; do not enter information you do not want processed as described here.
2.1 Information we collect
| Category | Examples | Source |
|---|---|---|
| Account and profile | Email, username, password hash, declared adult eligibility, language and selected preferences | You; the sign-in method you use |
| Social login | Provider account identifier, verified email, display name, profile image, authentication tokens | Google or another provider you select |
| Conversation and character data | Prompts, private chats, character descriptions, choices, memories, drafts and outputs; public submissions only through a separately available sharing feature | You; AI systems; staff |
| Platform media and access | Official character assets, generated outputs supplied by ECJOY, viewing and unlock records, and avatar images submitted through an available authorized avatar-upload feature, including asset ownership, file type, dimensions and technical storage records. Uploaded files may retain embedded file metadata. Avatars are display images, not Studio generation references. | ECJOY; media providers; your use of available features |
| Age confirmation | For your 18+ self-declaration: the time, your country at that time and the policy version. Most users are checked once per account. Any additional check uses only the method and data handling described on the verification screen and in this notice at the time. | You; our systems |
| Purchase and entitlement data | Membership term and replies, Coins lots, unlocks, transaction ID, payment status, price, currency, tax, refunds, disputes and limited provider payment metadata (for cryptocurrency payments, the network, transaction hash and wallet address involved) | You; payment providers; entitlement records |
| Device, network, and usage | IP address, device and browser type, operating system, identifiers, logs, approximate location (country and, in the US, state) derived from your IP address, pages and features used, timestamps, crash and performance data | Your device; cookies; service providers |
| Safety and integrity | Moderation flags, report history, policy actions, evidence, fraud signals, account-linkage indicators, underage signals | Automated systems; users; providers; reviewers |
| Affiliate and marketing | Referral code, landing page, campaign, consent status, email engagement, attribution events | Cookies; affiliate platform; you |
| Support and legal requests | Messages, attachments, identity-verification details needed to process a request, complaint or DMCA records | You; authorized representative |
Do not submit a full card number, card security code, password or wallet secret in chat or a support ticket. Payment credentials belong in the selected payment provider’s authorized checkout. ECJOY uses transaction and limited payment metadata for entitlements, fraud review, support, accounting and legal obligations.
Where the avatar-upload feature is available, an authenticated account can upload a JPEG, PNG, WebP or GIF image of up to 5 MiB for an account-owned avatar. The service decodes the image and checks its format, dimensions and a limit of 25 million pixels. These technical checks do not verify identity, age or consent, and are not a promise that prohibited content is automatically detected. We do not promise that embedded metadata is stripped from an uploaded file. Where this feature is available, uploaded private-character avatars are accessed through an authenticated, owner-authorized image route that checks account ownership; availability and retention depend on the service configuration and this notice. Avatar uploads are not accepted as Studio reference inputs. Selecting a platform asset does not involve biometric identification.
We may use network location signals for fraud prevention, abuse prevention, and applicable age or access controls. We do not use device fingerprinting for this purpose. ECJOY may ask for additional age verification or a repeat check based on applicable law, your location, and risk signals. Where applicable law requires additional age checks, you must complete the required checks before accessing restricted features. If you refuse, cannot finish, or fail that check, ECJOY may limit that access. The method and the data handling are whatever the verification screen and this notice say at the time. Most users are checked once per account. More detail is on our Age Verification page.
2.2 How we use information
We use personal information to:
- create and secure accounts, authenticate users, and confirm adult eligibility;
- provide available AI conversations, private character continuity, platform media, purchases and support; any additional generation or public-sharing processing depends on separate feature release;
- personalize official character interactions and maintain user-directed memories, preferences, and continuity controls;
- process payments, refunds, credits, unlocks, and affiliate attribution;
- prevent fraud, abuse, exploitation, security incidents, prohibited content, and underage access;
- moderate content, investigate reports, enforce policies, preserve evidence, and comply with lawful requests;
- debug, measure reliability, develop features, and analyze de-identified or aggregated trends;
- send transactional messages and, with the required choice, marketing communications;
- protect legal rights, complete corporate transactions, and comply with tax, accounting, and regulatory duties.
ECJOY may use automated systems to screen prompts, outputs, transactions, age-risk signals, and public content for safety, fraud, security, and policy compliance. Where applicable law requires human review or an appeal of a significant automated decision, users may request it through the Complaint Policy.
2.3 AI processing and model improvement
To answer a chat request, an AI model provider processes the prompt, relevant conversation context, character instructions, selected memory and necessary technical metadata. Platform media is generated only from internally approved character reference assets.
Your chats are private. We do not sell them and we do not use them for advertising. To generate a reply, the content passes through our servers and the model provider. Staff may look at a chat only for safety, support, or when the law requires it.
The permission to process private content for Service delivery is not permission to use it for general generative-model training or public advertising. We do not use your private conversations to train general-purpose generative AI models. If we ever want to do so, we will first give you a separate, clear notice and obtain any consent required by law.
Character memory supports continuity but is not permanent storage or a guarantee of accurate recall. Use available memory controls or submit a correction or deletion request through the Help Center or [email protected]. Deleting or resetting visible memory does not automatically erase billing, fraud, complaint or legally preserved records, or replenish lifetime free allowances.
Private characters and conversations are not public merely because they were created in ECJOY. Sharing occurs only through a separately available feature that you choose to use; this Notice does not enable public sharing, remixing or a creator program.
2.4 Legal bases where required
Where applicable law requires a legal basis for processing, service delivery and purchases rely on contractual necessity; legal recordkeeping and compliance with legal obligations rely on legal obligation; and proportionate security, abuse prevention and reliability processing rely on legitimate interests or, where applicable, the protection of vital interests. Processing of sensitive information in your conversations is necessary to provide the Service you ask for. Optional marketing requires consent where the applicable law requires it. You may withdraw consent prospectively by the available control or by contacting [email protected]. Contract acceptance alone is not consent to every sensitive-data use.
2.5 How we disclose information
We may disclose information to:
- hosting, database, content-delivery, security, customer-support, email, analytics, payment, affiliate, moderation, and AI service providers acting under contract;
- professional advisers, auditors, insurers, and financing parties subject to appropriate duties;
- authorities, regulators, courts, NCMEC or comparable bodies, and other parties when reasonably necessary to comply with law, protect safety, or establish or defend rights;
- a buyer, successor, or other participant in a merger, financing, reorganization, bankruptcy, or sale, subject to applicable notice and protection; and
- other users or the public when you intentionally publish User Content or direct us to share it.
We do not disclose private chat content to a service provider for review. Staff may look at a chat only for safety, support, or when the law requires it. An AI model provider receives chat content to generate a reply.
A list of the categories and names of our current service providers and their processing locations is available on request from [email protected].
We do not sell personal information for money. Private conversation content and sensitive inferences are never provided to affiliate or advertising partners, and are never used for audience targeting. Affiliate attribution uses limited referral and transaction data, as described in the Cookies Notice. If you live in a US state that gives you the right to opt out of the “sale” or “sharing” of personal information or of targeted advertising, and any of our affiliate-attribution activity is treated as such under that law, you may opt out by emailing [email protected] with the subject “Do Not Sell or Share”.
Affiliates do not receive your private chats, private character descriptions, account credentials or full payment details through the Program. ECJOY may share limited attribution, qualifying transaction and fraud-review information with an approved partner as needed to operate the assigned Offer and comply with applicable law.
2.6 Cookies and similar technologies
The Cookies Notice addresses browser storage, tracking and related choices. Essential security and account functions can require storage. Optional tracking is not treated as essential merely because it supports advertising or affiliate attribution. Contact [email protected] to ask about or exercise a privacy choice.
For website measurement we use Google Analytics 4, and selected standalone public pages use masked Microsoft Clarity analytics. The collection scope, exclusions and browser choices are described in the Cookies Notice. Private conversations and private-character content are excluded from both providers’ analytics payloads.
2.7 Data retention
Retention depends on the purpose, account relationship, valid deletion requests, unresolved transactions, security investigations and applicable recordkeeping obligations. The criteria below do not assert a fixed deletion job or an unverified backup-erasure deadline. Information retained for a legal or security exception should be limited to what that exception requires.
| Data | Retention criteria and limits |
|---|---|
| Account, private characters, chats, memories and drafts | Retain as needed to provide account features, subject to valid deletion requests and legal exceptions. Paid/free status is not an automatic chat or memory deletion rule. A private-character soft expiry releases a slot; it is not erasure. Removing or deleting a private character clears its avatar association in the character record; it does not by itself guarantee physical deletion of the uploaded file, its technical records or backup copies. Avatar deletion requests can be submitted through the existing Help Center or [email protected] and follow this notice’s retention criteria and legal exceptions. |
| Media acquired with Coins | Retained for as long as your account exists so that unlocked items remain available for replay, subject to lawful removal and to revocation of the related entitlement after a refund or payment dispute. |
| Age confirmation (self-declaration) records | Retain while your account exists so that you do not have to confirm again on each device, and afterwards only as long as needed to demonstrate that adult access was restricted to users who confirmed they are 18 or older. |
| Payment, tax, attribution and reward ledgers | Retain for applicable accounting duties, unresolved refunds or disputes and proportionate fraud prevention. Keep the minimal usage record necessary to prevent deletion from recreating free benefits. |
| Support, safety and security records | Retain as needed to resolve the request, protect people, investigate abuse and meet legal holds; minimize sensitive evidence and restrict access. |
| Browser choices and consent records | Retain as needed to apply the choice and demonstrate compliance; browser expiration and server records can differ. |
| Backups and provider-held information | Deletion from the active account does not instantly erase backup or processor copies. Backup copies are overwritten in the ordinary backup rotation, and providers delete or return data in line with their contracts with us. |
We may retain minimal suppression, fraud, consent, or policy-enforcement records after deletion where necessary and lawful. Data subject to a valid legal hold will be retained until the hold ends.
2.8 Security
ECJOY uses safeguards designed to protect account and Service information, including authenticated access and restrictions on authorized access to records. No system is perfectly secure. Protect your account credentials and report a suspected incident to [email protected].
2.9 International transfers
ECJOY and its providers may process information in countries other than yours. The operator is located in Hong Kong. Where required, we use recognized transfer mechanisms and safeguards, such as contractual clauses, adequacy decisions, or other lawful methods. Contact [email protected] for information about current hosting regions, service providers, and applicable transfer safeguards.
2.10 Your privacy rights
Depending on your location, you may have rights to know or access personal information; receive a portable copy; correct inaccurate information; delete information; restrict or object to processing; withdraw consent; opt out of sale, sharing, targeted advertising, or certain profiling; limit certain uses of sensitive personal information; and appeal a denied request. You will not be discriminated against for exercising a right.
Submit a request through ECJOY’s in-app Help Center or [email protected]. We may verify your identity and authority. Authorized agents may be required to provide signed permission and verify the consumer’s identity. You will never be asked to provide intimate conversation content as proof of identity. We will respond within the time required by applicable law and explain any denial and appeal method.
Residents of US states that provide an appeal right may appeal by replying to the decision or using the existing support ticket or [email protected]. If an appeal is denied, we will provide information about contacting the relevant regulator where required.
You may also complain to a data protection authority, for example the New Zealand Office of the Privacy Commissioner, the Office of the Privacy Commissioner of Canada, or the authority where you live. We would appreciate the chance to address your concern first.
2.11 Children and underage users
The Service is for adults only and is not directed to children. We do not knowingly collect personal information from a person under 18. If we learn that a minor used the Service, we lock adult content, freeze the account, and may delete the account and associated information, retain limited safety evidence, and make legally required reports. Parents or guardians may contact [email protected] without creating an account. See the Underage Policy.
2.12 Communications choices
Security, transaction and account-operation messages are distinct from optional marketing. Use an unsubscribe method supplied with a marketing message or contact [email protected] to stop it. Necessary Service messages may continue. Browser deletion of a cookie does not itself submit an account-deletion request.
2.13 Changes and contact
We may update this Notice as the Service or law changes. We will post the revised date and provide additional notice for material changes when required.
Controller: Tamim International Trading Limited (Hong Kong company registration no. 80857308), Room 106, 2/F, Eton Tower, 8 Hysan Avenue, Causeway Bay, Hong Kong. Privacy contact: [email protected]. Contact us to exercise rights or request information about processing and transfers.