App Name: BoboBru
Developer: BoboBru
Effective Date: September 24, 2026
Last Updated: September 24, 2026
Copyright: © 2026 BoboBru. All rights reserved.
Cross-Border Data Processing and Your Rights (Explanatory Summary)
This section is an explanatory summary provided only to help you quickly understand the key points of this Policy. It does not supplement or modify this Policy; the operative provisions of this Policy prevail over this section.
- No registration, no identification: The App does not use phone numbers, email addresses, names, precise location, contacts, or advertising IDs, or other identifying information; all features can be used anonymously (Sections 2 and 11)
- Photos are used only for the current generation: Photos you voluntarily upload are processed only for as long as necessary to complete the current generation and are not retained for other purposes; they are transmitted over an encrypted HTTPS / TLS connection; the AI provider states that they are automatically deleted within 24 hours. Your photos are not used by us for advertising, user profiling, or training AI models (Sections 3, 7, and 9)
- Equivalent safeguards for cross-border processing: Your photos and necessary records may be transferred outside your country or region for processing; depending on the actual deployment, we apply safeguards such as data minimization, HTTPS / TLS encryption, the standard contract provided for under China’s Measures for the Standard Contract for the Export of Personal Information, and the EU Standard Contractual Clauses (SCCs) (Section 7)
- You remain in control: You may delete your local history at any time, revoke granted permissions in your system settings, and uninstall the App to erase all local data; you may also withdraw your separate consent or request deletion of server-side records via the email address in Section 13 (Sections 9 and 11)
The above commitments apply consistently no matter which country or region you are located in. This Policy is provided in multiple languages; see Section 14 for language versions and their effect. For our service commitments to users worldwide, see also the Global Service Statement in the Terms of Service. If you have any questions about cross-border data processing, please contact us using the details in Section 13.
This Privacy Policy applies to the mobile application “BoboBru” (the “App”), developed and published by BoboBru (the “Developer”, “we”, or “us”). The App is an AI hairstyle preview tool: you upload a local photo, select a hairstyle and hair color, and the App generates hairstyle preview images via a third-party AI API.
We value your privacy. This Policy explains what information is involved when you use the App, how that information is used and protected, and what rights you have. Our design principle is to process only the minimum information necessary to deliver the core functionality of the App.
Please read this Policy carefully before using the App. By downloading or using the App, you acknowledge that you have read, understood, and agree to this Policy. If you do not agree, please stop using and uninstall the App.
Scope: This Policy applies only to our own data processing. Information processing by third-party services integrated into the App (such as the AI Provider, app stores, and services provided by Google) is governed by their respective privacy policies, and we are not responsible for those third parties’ processing (see Section 7).
The App does not collect, store, or transmit to any third party the following:
About sharing: We do not sell your personal information. To provide and maintain the service as described in this Policy, we may share the necessary information with:
California residents: We do not “sell” personal information and we do not “share” personal information for cross-context behavioural advertising. If you are a California resident, you may still exercise your rights under the CCPA/CPRA (including rights to know, delete, correct, and non-discrimination) by contacting us at the email in Section 13, and we will verify and handle your request in accordance with law.
To generate hairstyle previews, you may provide a photo by:
The photo you select is used only for the following purposes:
To secure the service, prevent abuse, troubleshoot faults, and carry out necessary internal quality and compliance reviews, we may perform technical processing on photos (for example, anomalous-call detection, automated detection of unlawful content, and resolution/format validation). We do not use this to identify you.
The following data is stored only on your device and is not uploaded to any server:
| Data type | Storage | Purpose |
|---|---|---|
| History records (hairstyle ID, color ID, remote links and local file paths of generated images, timestamps) | App private directory | Showing your generation history |
| Theme (dark/light, theme color) and language preference | App private directory | Remembering your interface preferences |
| In-progress generation task information | App private directory (expires after 24 hours) | Resuming unfinished generations after interruption |
Note on “service usage statistics”: The App itself does not maintain a separate local “usage statistics” database. The anonymized events collected by Firebase Analytics (Section 7) are the App’s only source of application-level usage statistics. Locally we retain only a “last generation timestamp” for task recovery (see “in-progress generation task information” above), and no other statistics fields.
You can delete all of the above local data at any time by uninstalling the App; history records can also be deleted manually within the App.
To verify subscription entitlements, manage AI generation quota, send generation-completion notifications, and prevent abuse, we store the following records on the Developer’s own servers (Firebase Firestore, provided by Google Cloud):
| Data | Description | Purpose |
|---|---|---|
| Random device identifier (UUID) | As described in Section 2, generated on your device by the App | Request-signature verification, quota counting, anomalous-call detection |
| Free-trial usage record | Number of free trials already used by that device | Administering the free trial allowance (see Section 2.5 of the Terms of Service) |
| Subscription credential identifier and entitlement status | Purchase credential, subscription product, validity period, and status returned by the app store | Determining whether a subscription is valid; determining per-period quota and reset cycle |
| Device list linked to that credential | Device identifiers and timestamps that have used the same purchase credential | Supporting use of one entitlement across multiple devices on the same app store account; detecting account sharing and bulk abuse |
| Generation quota usage count | Generations used in the current billing period | Rate-limiting in accordance with plan quota |
| Push token (FCM token) | Issued by Google | Sending you a system notification when an asynchronous generation completes (requires your notification permission) |
| Security and anti-abuse records | Integrity-verification failure counts, call-behaviour characteristics, and similar metrics | Detecting emulators, scripts, or automated bulk calls |
| Service and security logs | Request time, endpoint path, response status, and error codes | Maintaining service stability and security, troubleshooting, and handling billing and entitlement disputes |
These records do not include your name, contact details, precise location, or photos you upload. We retain them for as long as necessary to fulfil the purposes above, maintain service security and stability, handle disputes, and comply with legal obligations (retention periods are set out in Section 4.4). Other than the cloud services hosting this data and the service providers listed in Section 7, we do not sell or rent these records to any third party; to fulfil the purposes in this Policy or comply with legal obligations, we may share necessary information within the scope described in Section 2. Deletion is described in Section 9.
Anonymized and aggregated data: Data that has been irreversibly anonymized or de-identified such that no individual can be identified (for example, aggregate call volumes, feature usage rates, and success rates) is not personal information, and we may use it for service operations, statistical analysis, security risk control, and product improvement without being subject to the purposes and retention limits stated in this Policy.
The periods in the table below are the maximum periods for which we retain each category of data; where the actual period needed to fulfil the relevant purpose is shorter, we will delete or anonymize earlier:
| Data | Maximum retention period |
|---|---|
| Random device identifier (UUID) and free-trial usage | 36 months from your last use of the App |
| Subscription credential identifier and entitlement status, generation quota count | 36 months after expiry of the subscription (or longer where applicable law requires) |
| Device list linked to that credential | As above; historical device records beyond the cap are cleared after 24 months |
| Push token (FCM token) | Deleted within 90 days after you disable notification permission or uninstall the App |
| Security and anti-abuse records | 24 months after creation |
| Service and security logs | 24 months after creation |
Adjustments to and exceptions from retention periods: Records necessary to comply with legal obligations, respond to regulatory requirements, handle billing and refund disputes, or assert, exercise, or defend legal rights within a necessary scope may be retained beyond the periods above until those obligations or proceedings conclude, or may be irreversibly anonymized in the meantime. Data that has been irreversibly anonymized or de-identified such that no individual can be identified is not subject to the periods above. However, we will not extend the retention of identifiable personal information for new purposes.
After the applicable period expires, we will delete the relevant records or irreversibly anonymize them.
In the event of a merger, acquisition, reorganization, financing, asset sale, or insolvency proceeding, your information may be transferred to a successor entity as part of the business assets. We will notify you before the transfer by in-App announcement or other reasonable means and will require the transferee to remain bound by this Policy; where applicable law requires fresh consent for the transfer, we will obtain it as required by law.
The App requests only the permissions necessary for its core functionality:
| Platform | Permission | Purpose |
|---|---|---|
| Android | INTERNET | Calling the AI API to generate hairstyles and downloading generated images |
| Android | CAMERA | Taking a photo for hairstyle generation (triggered only when you tap to take a photo) |
| Android | READ_MEDIA_IMAGES (Android 13+) / READ_EXTERNAL_STORAGE (Android 12 and below) | Selecting a photo from the library for hairstyle generation; on Android 14+ the App supports access limited to the photos you select (READ_MEDIA_VISUAL_USER_SELECTED) |
| Android | POST_NOTIFICATIONS (Android 13+) | Sending a system notification when an asynchronous generation completes (requires your authorization) |
| iOS | NSCameraUsageDescription | Taking a photo for hairstyle generation |
| iOS | NSPhotoLibraryUsageDescription | Selecting a photo from the library for hairstyle generation |
| iOS | NSPhotoLibraryAddUsageDescription | Writing generated images you choose to save into the system photo library |
Note: The App no longer requests WRITE_EXTERNAL_STORAGE; generated images are saved through the system media-library APIs (MediaStore / PhotoKit), which require no additional storage permission. All permissions are triggered only when you actively use the corresponding feature, and the App does not invoke them in the background. You may refuse or revoke these permissions at any time; after refusal or revocation the corresponding features may be unavailable, but this does not affect other features and does not constitute a breach by us of any obligation to provide those features.
The App is a free download and offers in-app subscriptions. Subscription purchases and payment are handled entirely by the app store, subject to the app store’s terms of service and privacy policy.
We do not access, collect, or store any of your payment information, including but not limited to card numbers, billing addresses, or Google account payment details. Please process refunds through the app store’s official channels.
Please note: to confirm whether your subscription is valid and to grant generation quota accordingly, the App sends the purchase token returned by the app store to the Developer’s servers for verification and retains it server-side (see Section 4.2). That credential is issued by the app store and is used only to identify a particular subscription; it does not contain your card number, billing address, or other payment information, and we cannot use it to initiate a charge. Entitlements are keyed to that credential rather than to any device; see Section 2.4 of the Terms of Service.
Subscriptions, billing, renewal, taxes, exchange rates, and refunds are determined and executed by the app store under its rules. We do not participate in those billing processes and are not liable for the app store’s billing rules, payment-channel, tax, or exchange-rate changes, or for refund decisions made by the app store; to the extent applicable law requires our cooperation, we will provide necessary assistance via the contact channel in Section 13.
The App uses the following third-party services, which may process data under their own privacy policies:
| Third-party service | Purpose | Data involved |
|---|---|---|
| Third-party AI image processing service (its name and privacy policy link constitute our trade secrets and are not listed in this Policy, and are available on request under Section 13; the “AI Provider”) | Processing photos and generating hairstyle previews | Photos you upload, and the selected hairstyle and color parameters |
| Firebase Analytics (Google) | Anonymized app usage statistics | Anonymized events (page views, feature usage counts, etc.) and anonymous attributes such as device language/theme preference |
| App stores (Apple App Store / Google Play) | App distribution, subscription purchase, and billing | Subscription-related information you provide (such as purchase credential, subscription identifier, order number); the App does not receive card numbers, billing addresses, or similar sensitive data |
| Firebase Cloud Messaging (Google) | Sending you system notifications when asynchronous generations complete | Push token (FCM token) and the random device identifier; notification content does not include your photos |
The AI Provider’s name and the link to its privacy policy constitute our trade secrets and are not listed in this Policy; you may request the AI Provider’s name, the link to its privacy policy, and a description of the information-protection obligations it bears, via the email in Section 13. Photos you upload are transmitted to that provider over an encrypted link and solely for real-time generation. To carry out that processing, the AI Provider uses its own upstream providers (category: AI model inference and image processing services) within the necessary scope; the specific names of those upstream providers are likewise trade secrets and may be requested under Section 13. The AI Provider states that it automatically deletes uploaded images within 24 hours; that deletion is performed and controlled by the AI Provider — we do not control its systems and we neither warrant the outcome of that deletion nor bear any liability for it. We require the AI Provider to apply reasonable security measures to protect your information.
Firebase Analytics is provided by Google and collects anonymized app usage statistics (such as feature usage frequency and page views) to help us improve the product experience. Firebase Analytics does not collect personally identifiable information such as your name, email, device identifiers, precise location, or photos you upload. You may limit the use of advertising identifiers in your device settings; to opt out of anonymized event collection, please contact us at the email in Section 13. See the Firebase Privacy Policy.
Firebase Cloud Messaging (also provided by Google) is used to push system notifications to you when AI generations complete asynchronously, and is enabled only after you grant notification permission; you may disable the App’s notification permission in your system settings at any time (disabling it affects only the “generation complete” alert and not other features). This service does not transmit your photos to Google.
We recommend that you review the privacy policies of the third parties above (for the AI Provider, its name and privacy policy link are available on request under Section 13) to understand their data processing practices. Apart from these services, the App integrates no advertising, social-sharing, or other analytics SDKs. The availability, data processing conduct, security measures, and compliance status of those third-party services are the responsibility of the respective providers; we shall not be liable to you for their acts or omissions (except where mandatory applicable law provides otherwise). For operational, compliance, or cost reasons, we may add, replace, or discontinue third-party services; where such changes occur, we will update this Policy in accordance with Section 12.
Cross-border transfers and safeguards for recipients outside your jurisdiction: The third-party services integrated into the App may be deployed in different jurisdictions. We describe each separately based on the actual deployment:
Firebase Analytics (Google, deployed across multiple regions including the US and the EU): This service may transfer data outside your jurisdiction. We rely on the Google Ads Data Processing Terms / Google Cloud Data Processing Addendum and the 2021/914 Standard Contractual Clauses contained therein as cross-border transfer safeguards, and we enable data-minimisation settings such as anonymized events, limited IP collection, and disabled ad personalisation. The specific form of those safeguards is governed by Google’s current terms and the actual configuration.
Firebase Firestore and Firebase Cloud Messaging (Google, deployed across multiple regions including the US and the EU): The server-side records described in Section 4.2 are stored in Firebase Firestore for subscription verification, quota management, and push notifications (including the FCM token used for push). We likewise rely on Google’s data processing terms and the Standard Contractual Clauses contained therein, store only the minimum necessary fields listed in Section 4.2, and transmit over HTTPS/TLS. The specific form of those safeguards is governed by Google’s current terms and the actual configuration.
In all cases, we apply the following general safeguards: (1) transmitting only the minimum data necessary for the relevant function; (2) using HTTPS/TLS encryption for all cross-border transmission paths; (3) periodically reviewing the privacy policies, compliance status, and regulatory developments relating to third-party SDKs; and (4) providing you with channels to access, correct, delete, and withdraw consent to the extent required by the laws of your jurisdiction.
The deployment locations, data flows, processing practices, and cross-border transfer mechanisms of the third-party services above may change at any time; the specific position is governed by those providers’ public policies (for the AI Provider, its policy is available on request under Section 13) and our actual service deployment. Where such changes constitute a material change under this Policy, we will handle it in accordance with Section 12.
We take the following measures to protect your information:
allowBackup=false) to prevent accidental export of local data;Please note that internet transmission and electronic storage cannot be guaranteed to be absolutely secure, but we will continue to apply reasonable and feasible technical and organisational measures to protect your information.
Scope of liability: To the extent permitted by applicable law, you understand and agree that: (a) we are not liable for any disclosure, loss, or misuse of information caused by reasons beyond our reasonable control (for example, compromise of your device or network environment, disclosure by you, a security incident affecting a third-party service, or force majeure); and (b) any liability arising from a security incident is subject to the liability cap in Section 7.2 of the Terms of Service.
The App is available to users as follows:
Minors under 18 should use the App with parental or guardian consent and guidance. For children below the age thresholds above (the specific threshold depending on your jurisdiction), parents or guardians should supervise the child’s use of the App and are responsible for acts such as photo uploads. If you are a child’s guardian and discover that the child has used the App without your consent, you can delete all local data by uninstalling the App; photos already uploaded to the third-party AI service will be automatically deleted within 24 hours according to that provider’s statement.
The App is not designed for children below the age thresholds above and does not knowingly collect children’s personal information. We may use technical means or age-verification mechanisms to restrict such users. If we discover or reasonably suspect a user is below the applicable threshold, we may in our sole discretion restrict or terminate that user’s access without refunding fees already paid (except where mandatory applicable law provides otherwise); for these purposes we may retain the necessary determination and handling records to comply with our legal obligations.
You have the following rights in relation to data processed by the App (the App operates no account system and requires no registration or login):
Conditions and limits on exercising rights: To protect your data, we may require you to provide necessary information (such as the random device identifier generated on your device or purchase-credential details) to verify the requester; until verification is completed, we may be unable to process your request. In addition, we may refuse, partially fulfil, or delay a request where: (a) applicable law permits or requires us to retain the data; (b) the request involves third-party rights or our confidentiality obligations; (c) the request is manifestly unfounded, excessively repetitive, or would require disproportionate technical effort (in which case we may require you to bear reasonable costs or refuse the request); or (d) it is necessary to handle billing, refunds, or disputes, or to assert, exercise, or defend legal rights. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal; after withdrawal we may continue to process necessary information on other lawful bases (such as performance of contract, legal obligation, or our legitimate interests).
We may update this Privacy Policy from time to time to reflect changes in app functionality, third-party services, or legal and regulatory requirements. Updated versions will be published on this page with an updated “Last Updated” date, and updates apply to processing carried out after the date of publication (or the effective date stated in the notice) and do not apply retroactively. “Material changes” include, without limitation: adding data collection items or fields; changing third-party services or SDKs; adjusting cross-border transfer mechanisms; changing your rights or the way they are exercised; and changing retention periods. For material changes, we will provide prominent notice within the App (such as a pop-up or announcement) and a reasonable advance notice period as required by law; except where mandatory applicable law requires your express consent, such changes take effect on the effective date stated in the notice, and your continued use of the App after that date constitutes acceptance. Where a change involves using previously collected personal information for a new purpose and applicable law requires separate consent for that processing, we will obtain it as required by law. For non-material changes, your continued use of the App after the update constitutes acceptance. If you do not agree with any change, please stop using and uninstall the App. We recommend reviewing this Policy periodically for the latest version.
If you have any questions, comments, or requests regarding this Privacy Policy or the App’s data processing practices, please contact us:
If you are in the European Union, you may contact us directly at the email above to exercise your rights. We will respond as promptly as reasonably possible. Where applicable law (such as the GDPR or China’s PIPL) prescribes a statutory response period for personal-data rights requests, we will respond within that statutory period; where an extension is necessary, we will inform you of the reason as required by law. To process your request we may require you to provide necessary information for verification; until verification is completed, we may be unable to process your request.
This Policy is provided in multiple languages, and all language versions are equally authentic. If any ambiguity arises between the different language texts, we will interpret it in good faith in light of the purpose and context of this Policy and in conjunction with applicable mandatory law. Where this Policy and the Terms of Service are inconsistent on matters of personal information protection, this Policy prevails; on other matters, the Terms of Service prevail.