Privacy policy
PRIVACY POLICY
Revision date: 9 September 2026
This Privacy Policy describes how Mobile Boost, a company registered with the Trade and Companies Register (RCS) of Nice under number 834428963, with its registered office at 25 avenue de Verdun, 06500 Menton, France ("we", "us"), collects, uses and protects your personal data when you use dollyfan.ai and the associated services (the "Services").
It supplements our Terms of Use and Sale (the "Terms"). Capitalized terms not defined here have the meaning given to them in the Terms.
We apply to all our users, regardless of their country of residence, the level of protection provided by the General Data Protection Regulation (GDPR). You also benefit from any additional rights provided by the law of your country of habitual residence.
1. Data controller
The data controller is Mobile Boost.
Contact for any question relating to your data: [email protected].
2. Data we collect
Account data: email address, password (hashed), account preferences, language.
Content: your conversations with the AI Companions, your prompts, the characters you create and their attributes, the media generated at your request. We draw your attention to the fact that your conversations may contain information you freely choose to include in them, including intimate information. We recommend that you do not disclose sensitive information about yourself or third parties (see section 1.3 of the Terms).
Payment data: subscribed plan, transaction history, subscription status. Credit card data is processed directly by our payment provider () and never passes through our servers.
Technical data: IP address, device and browser type, operating system, session identifiers, connection logs, Service usage data.
Age verification data: where required by applicable law, the information strictly necessary to verify that you are of legal age.
We do not collect any data from third parties for advertising profiling purposes.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Provision of the Services (account, conversations, content generation, AI Companion memory) | Performance of the contract |
| Billing, management of subscriptions and tokens | Performance of the contract |
| Content moderation, platform security, fraud and abuse prevention | Legitimate interest and legal obligations |
| Reporting of illegal content to the competent authorities | Legal obligation |
| Improvement of the Services (usage statistics, error correction) | Legitimate interest |
| Training and improvement of our AI models using your conversations | See section 4 |
| Age verification | Legal obligation |
| Service-related communications (confirmations, invoices, changes to the Terms) | Performance of the contract |
| Marketing communications (where applicable) | Consent, withdrawable at any time |
4. AI model training
We may use your conversations and prompts to train, develop and improve our AI models, our moderation tools and our algorithms, under the following conditions:
- data used for this purpose is first pseudonymized: it is dissociated from your identity (email address, account identifiers, payment data);
- you may object at any time to the use of your conversations for training purposes, from your account settings or by writing to [email protected], without this affecting your use of the Services;
- the objection applies for the future; it has no effect on improvements already made to the models.
5. Recipients and processors
Your data is accessible only:
- to our authorized personnel, within the limits of their duties (in particular moderation, under the conditions of section 4.4 of the Terms);
- to our technical processors, acting on our instructions and bound by confidentiality obligations:
- hosting: UpCloud Ltd (Helsinki, Finlande);
- payment: ;
- provision of AI models: ;
- to the competent authorities, where required by law.
We never sell your personal data and never share it with any third party for advertising purposes.
6. Transfers outside the European Union
Our Services are hosted in the European Union. Where certain processors process data outside the EU/EEA, such transfers are governed by appropriate safeguards (adequacy decision or standard contractual clauses of the European Commission). You may obtain a copy of these safeguards by writing to [email protected].
7. Retention periods
| Data | Period |
|---|---|
| Account data | Lifetime of the account, then deletion within 30 days |
| Conversations and Content | Lifetime of the account; deletion upon request (see section 8) subject to legal obligations and moderation needs |
| Billing data | 10 years (accounting obligations) |
| Technical logs | 12 months maximum |
| Flagged or moderated content | Period necessary to process the report and comply with legal retention obligations |
8. Your rights
You have the following rights over your data:
- access: obtain a copy of the data we hold about you;
- rectification: correct inaccurate data;
- erasure: request the deletion of your data, including your conversations (see also section 5.1 of the Terms);
- objection: object to processing based on our legitimate interest, as well as to AI model training (section 4);
- restriction: request the temporary freezing of a processing operation;
- portability: receive your data in a structured, machine-readable format;
- withdrawal of consent: at any time, for processing based on consent;
- post-mortem directives: define the fate of your data after your death (French law).
To exercise these rights: [email protected]. We respond within one month, extendable by two months for complex requests. Proof of identity may be requested in case of reasonable doubt.
You can also delete your account directly from its settings.
If you believe your rights are not being respected, you may lodge a complaint with the competent supervisory authority — in France, the CNIL (www.cnil.fr) — or with the authority of your country of residence.
9. Security
We implement appropriate technical and organizational measures to protect your data: encryption of communications (TLS), password hashing, access segregation, logging, hosting within the European Union.
As no system is infallible, we will notify you, as well as the competent supervisory authority, of any data breach likely to result in a high risk to your rights, under the conditions provided by law.
10. Cookies and trackers
We use:
- strictly necessary cookies for the operation of the Services (session, authentication, security, language preference) — exempt from consent;
- where applicable, audience measurement and preference cookies, placed only with your consent, collected via the banner provided for this purpose and modifiable at any time from the Services.
We do not use any third-party advertising cookies.
11. Minors
The Services are strictly reserved for adults. We do not knowingly collect data concerning minors. If you believe a minor is using the Services, contact us immediately at [email protected]; the account concerned will be deleted.
12. Changes
We may modify this Policy at any time. The revision date appears at the top of the document. In the event of a substantial change, you will be informed by any appropriate means (notice in the application or email). Your continued use of the Services constitutes acceptance of the version in force.
13. Contact
For any question relating to this Policy or to your data: [email protected].