Effective Date: 5 August 2026

Operator: mybf LLC · Contact: support@mybf.bot

2. Privacy Policy

2.1. Controller and scope

2.1.1. This Privacy Policy explains how mybf LLC processes information when you use the Service.

2.1.2. Controller: mybf LLC. Contact: support@mybf.bot.\ We have not appointed a separate Data Protection Officer.

2.1.3. By using the Service, you acknowledge this Policy. Separate consent may be requested for specific processing where required.

2.2. Data we may process

2.2.1. Account data: email address, account identifiers, profile settings, language, preferences.

2.2.2. Usage data: login and access events, timestamps, free and paid feature usage, technical logs, error data.

2.2.3. User content: text messages and prompts; voice messages; photo and video generation requests; character descriptions; uploads; and generated outputs where retention is needed for Service operation, moderation, support, security, or legal purposes.

2.2.4. Payment data: purchase fact, amount, date, status, type, and internal transaction identifiers. Full card details entered with a payment provider are generally not received or stored by mybf.

2.2.5. Technical data: IP address, browser and device data, cookies and similar technologies, approximate region.

2.2.6. Support data: contents of support requests and information you voluntarily provide.

2.2.7. We do not require passport data or similar documents unless separately required by law or a specific verification process.

2.3. Purposes and legal bases (EU / EEA framing)

We process data to:

  • provide the Service and its features;\
  • perform the contract with you (Terms);\
  • process purchases and support requests;\
  • moderate content and prevent abuse;\
  • secure and stabilize the Service;\
  • improve the Service where permitted;\
  • comply with legal obligations;\
  • protect our legitimate interests, such as security, fraud prevention, and enforcement of rules, where not overridden by your rights.

Where consent is required (for example certain non-essential cookies), processing is based on consent, which you may withdraw.

2.4. Sharing

2.4.1. We do not sell your personal data.

2.4.2. We may share data with third parties as needed to operate the Service and on lawful grounds, including:

  • hosting, cloud infrastructure, and storage providers;\
  • AI model, media generation, moderation, and related infrastructure providers;\
  • payment processors;\
  • email, analytics, security, and support vendors;\
  • authorities, courts, and other parties where required by law.

2.4.3. Prompts, messages, and other inputs may be transmitted to AI and infrastructure providers to generate a response or media output.

2.5. International transfers

In the course of operating the Service, personal data may be processed using foreign information systems, infrastructure, contractors, and services. By using the Service, you are informed of this. Such transfers occur because they are necessary to provide the Service features.

Where required by applicable law, we rely on appropriate safeguards or other lawful transfer mechanisms available to us.

2.6. Retention and security

2.6.1. We retain data for as long as needed for the purposes described above, including Service delivery, security, accounting, legal retention, and dispute handling.

2.6.2. We take reasonable security measures. Absolute security of internet transmission and storage is not guaranteed.

2.7. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object, port data, or withdraw consent for certain processing.

EU / EEA / UK: You may also have the right to lodge a complaint with a supervisory authority.

California / United States: Subject to applicable law, you may request access, deletion, and information about certain sharing practices. We do not sell personal information as “sale” is commonly defined under the CCPA/CPRA. If you are a California resident, you may submit privacy requests to support@mybf.bot. We will not discriminate against you for exercising privacy rights under applicable law.

2.8. How to submit a request

2.8.1. Email support@mybf.bot from the address associated with your account where possible.

2.8.2. We aim to respond within 30 days, unless a different period is required by law.

2.8.3. We may request information reasonably needed to verify your identity.

2.8.4. Withdrawal of consent or deletion may make continued use of the Service impossible. Some records may be retained where required for law, security, accounting, fraud prevention, or disputes.

2.9. Children

The Service is not directed to children under 18. We do not knowingly collect personal data from children under 18. If you believe a minor has used the Service, contact support@mybf.bot.

2.10. Policy updates

We may update this Policy. The current version will be posted in the Service. Continued use after an update means acceptance of the revised Policy, except where mandatory law requires otherwise.