Data Safety

Understand how VikiViki collects, uses, and protects your data

Last Updated: May 1, 2026

1. Overview

This page helps you understand our data practices for VikiViki ("we," "us," or "our"), an AI Character Roleplay Chat application. It is designed to complement our Privacy Policy and provide clear, concise information about how your data is collected, used, shared, and protected — as required by the Google Play Data Safety section.

2. Data Collection Summary

The following table summarizes the types of data we collect and why:

Data TypeCollected?Purpose
Personal info (name, email)YesRequired for account creation and management
MessagesYesFor AI chat functionality and conversation history
Device infoYesFor analytics and crash reporting
Purchase historyYesFor subscription management and purchase verification

3. Data Sharing with Third Parties

We share data with the following third-party service providers, solely for the purposes stated below. See our Privacy Policy § 4 for full details on each SDK / provider including links to their privacy policies.

  • AI Text Generation — OpenAI, Anthropic, Google (Gemini) used directly, plus optionally OpenRouter, Inc. as an aggregation gateway (which can additionally route to Meta Llama and Mistral AI), depending on the model configured for the character: chat message text, recent conversation context, and character configuration are transmitted to generate AI responses. We configure these providers to disable training on your conversation data where the provider exposes that option.
  • Image Generation Infrastructure — VastAI / self-hosted ComfyUI: image-generation prompts are sent to GPU servers we operate on rented compute, running open-source diffusion models. This is our infrastructure rather than an independent AI vendor.
  • Marketing Attribution — Adjust GmbH: device identifiers (IDFA / GAID, where authorized), IP address, install / session events, used to attribute installs to ad campaigns and detect fraud.
  • Marketing Events — Meta Platforms, Inc. (Facebook App Events): install and in-app conversion events sent to Facebook Ads Manager for ad-campaign optimization.
  • Authentication — Google LLC, Apple Inc.: only when you choose Google / Apple Sign-In; these providers receive only OAuth credentials you authorize.
  • Payments — Apple App Store (iOS), Google Play Billing (Android): all in-app purchases are processed by the platform store. We receive only an opaque purchase token used to verify the transaction; we do not receive your payment credentials.
  • Cloud Hosting — Amazon Web Services (AWS): backend servers, databases, and S3 object storage for user-generated content and AI-generated images.

We do not sell your personal data to any third party.

4. Data Security

We take the security of your data seriously and implement the following measures:

  • Encrypted in transit — All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security).
  • Encrypted at rest — Stored data is encrypted at rest using industry-standard encryption methods.
  • Access controls — Access to user data is restricted to authorized personnel only, with role-based permissions and audit logging.

5. Data Deletion

You can request deletion of your data at any time through the following methods:

  • In-app — Navigate to your account settings and select the option to delete your account.
  • Account deletion page — Visit our account deletion page to submit a deletion request.
  • Email — Contact us at support@vikiviki.cc to request data deletion.

6. Data Retention

Your data is retained while your account remains active. Upon account deletion, all associated personal data and conversation history will be permanently deleted within 30 days. Certain anonymized or aggregated data may be retained for analytics purposes and cannot be linked back to individual users.

7. Contact

If you have any questions about our data practices, please contact us: