Updated: July 10, 2026

Effective: July 10, 2026

BunToon Privacy Policy

Welcome to BunToon. Shanghai Yizhitu Information Technology Co., Ltd. ("we," "us," or "our") respects and protects your privacy and personal information. This Privacy Policy explains how we collect, use, store, share, disclose, and protect your personal information when you download, install, open, browse, register, sign in to, or use BunToon and related services (collectively, the "Services").

Before using the Services, please read and understand this Privacy Policy carefully. Important information about your rights and sensitive personal information is highlighted in bold where appropriate. If you do not agree with this Privacy Policy, please do not use the Services.

This Privacy Policy explains:

1. Scope of Application2. How We Collect and Use Personal Information3. Cookies and Similar Technologies4. How We Share, Transfer, and Publicly Disclose Personal Information5. How We Store Personal Information6. How You May Delete Your Account7. Updates to this Privacy Policy8. Protection of Minors9. Contact Us10. Other Terms

1. Scope of Application

This Privacy Policy applies to the Services provided by BunToon.

The specific Services may vary depending on your device model, operating system, app version, region, account status, and the features you use. The actual product and service features are subject to the version of BunToon and related Services that you use.

2. How We Collect and Use Personal Information

We collect and use personal information under the principles of lawfulness, legitimacy, necessity, and transparency.

2.1 Device permissions you may grant

  1. Camera permissionWhen you use photo-taking or image creation features, we may request access to your camera and collect the image content you provide. If you decline this permission, you may be unable to use the related feature, but this will not affect other features that do not require camera access.

  2. App tracking permission and advertising identifierWhere required by your device system or applicable rules, we may request tracking permission and collect your device advertising identifier, such as IDFA, for identity recognition, analytics, security, attribution, or service improvement purposes. If you decline this permission, you may still use core features of the Services.

  3. Photo library permissionWhen you select photos from your device to create or process images, we may request access to your photo library and collect the selected image content. If you decline this permission, you may be unable to use the related feature, but this will not affect other features that do not require photo access.

  4. Storage permissionWhere applicable, we may request storage access to save generated works to your local album, cache necessary service data, or support normal app operation. If you decline this permission, you may be unable to save works locally or use related functions.

  5. Clipboard accessWhen you actively use paste-related features, we may read clipboard content to provide convenient input, invite-code recognition, link recognition, or similar functions. We do not continuously monitor or store your clipboard content in the background.

2.2 Information we collect directly

  1. Information necessary for service operation and securityWhen you use BunToon, we may collect device model, operating system version, app version, network type, IP address, operation logs, Android ID, OAID, IDFV, device language, time zone, crash logs, and other information necessary to operate, secure, troubleshoot, and improve the Services.

  2. Registration, authentication, and login informationYou may use guest access, mobile number login, Sign in with Apple, or other third-party login methods supported by us. When you use third-party login, you authorize us to obtain the public information necessary for login and account linking, such as nickname, avatar, email address, or third-party account identifier, subject to your authorization.

  3. Photo-to-image and AI generation featuresPhoto stylization and AI generation are core features of BunToon. To provide these features, we may process photos that you upload or select. Photos may contain face images.

To improve generation quality, we may perform face detection during processing to locate facial areas, facial bounding boxes, facial landmarks, optional face masks, hair masks, or similar analysis results. We use this information only for face alignment, distortion reduction, quality optimization, and completion of the generation request you initiate.

We do not use face data to identify you, authenticate your identity, build advertising profiles, or track you across apps. We do not create or store face recognition templates, biometric vectors, embeddings, or biometric profiles for identity recognition. Facial landmarks, masks, and similar analysis results are used temporarily during processing and are deleted or destroyed after processing is completed.

To provide cloud generation services, your uploaded photos and generated results may be transmitted to and processed by our cloud servers and trusted service providers that support computing and storage. These providers are required to process the data only for the purposes instructed by us and not for unrelated purposes.

  1. Information from third partiesWhen you use a third-party account to sign in, we may receive information from that third-party platform after your authorization, such as nickname, avatar, email address, or account identifier.

2.3 Changes in purpose

If we need to collect or use your personal information for a purpose that is not directly or reasonably related to the original purpose, we will notify you again and obtain your consent where required by applicable law.

2.4 Exceptions to consent

To the extent permitted by applicable law, we may collect and use personal information without your separate consent in the following circumstances:

  1. where necessary for national security or public security;

  2. where necessary for public health or major public interests;

  3. where necessary for criminal investigation, prosecution, trial, or enforcement of judgments;

  4. where necessary to protect your or another person's life, property, or other major lawful rights and interests and it is difficult to obtain consent;

  5. where the information has been publicly disclosed by you;

  6. where the information is collected from lawful public sources;

  7. where necessary to enter into or perform a contract at your request;

  8. where necessary to maintain the safe and stable operation of the Services;

  9. where otherwise permitted by laws and regulations.

3. Cookies and Similar Technologies

Cookies and similar technologies are commonly used on the internet. When you use the Services, we may use cookies, local storage, device identifiers, or similar technologies to collect and store information.

We use these technologies mainly to ensure secure and efficient operation, verify login status, prevent fraud, improve response speed, remember preferences, and provide a smoother user experience.

We will not use cookies or similar technologies for purposes outside this Privacy Policy.

4. How We Share, Transfer, and Publicly Disclose Personal Information

4.1 Sharing and transfer

We do not share or transfer your personal information to third parties unless:

  1. we have obtained your prior authorization or consent;

  2. the information has been de-identified or anonymized and cannot identify you;

  3. sharing is necessary to provide a feature or service you request;

  4. sharing is required by laws, regulations, legal procedures, or competent authorities.

To provide certain Services, we may work with cloud computing, storage, analytics, customer support, payment processing, app store, security, or technical service providers. We only provide information necessary for the specific purpose and require them to protect the information and use it only according to our instructions.

We do not share your photos, generated works, face landmarks, face masks, or similar face-analysis results with unrelated third parties for advertising or identity recognition.

4.2 Business transfers

If our business is involved in a merger, acquisition, restructuring, asset transfer, bankruptcy, or similar transaction, your personal information may be transferred as part of that transaction. We will require the successor to continue protecting your personal information under standards no lower than those described in this Privacy Policy, or require the successor to obtain your consent again where required by law.

4.3 Public disclosure

We do not publicly disclose your personal information unless required by law, authorized by you, or necessary to publish limited information relating to account violations, fraud prevention, or legal compliance.

5. How We Store Personal Information

We retain personal information only for the shortest period necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

For photo-to-image and AI generation features:

  1. facial landmarks, masks, and similar analysis results are temporarily used during processing and deleted or destroyed after processing is completed;

  2. photos you upload or select and generated results are retained for the period necessary to provide the Services and are deleted or anonymized after the retention period expires;

  3. if you actively delete relevant works in the product, we will delete the corresponding data earlier where technically feasible and legally permitted.

After the necessary retention period expires, we will delete or anonymize your personal information unless otherwise required by laws or regulatory authorities.

6. How You May Delete Your Account

You may delete your BunToon account through the account settings page where this feature is available. After account deletion, we will stop providing account-based products and services to you and will delete or anonymize personal information related to your account in accordance with applicable laws, unless laws or regulatory requirements require a longer retention period.

7. Updates to this Privacy Policy

We may update this Privacy Policy from time to time as our Services, technology, business, or legal requirements change. Updated terms form part of this Privacy Policy.

For material changes, we will provide a more prominent notice where required, such as an in-app notice, pop-up notice, or other appropriate method. If new sensitive personal information is collected or a new processing purpose requires separate consent, we will request your consent again where required by law.

Material changes may include:

  1. material changes to the purpose, type, or method of personal information processing;

  2. material changes in our ownership structure or organizational structure;

  3. material changes to the main recipients of shared, transferred, or publicly disclosed personal information;

  4. material changes to your personal information rights and how to exercise them;

  5. changes to our contact information or complaint channels.

8. Protection of Minors

If you are under 18 years old, you should read this Privacy Policy and use the Services under the guidance and consent of your parent or legal guardian.

We protect minors' personal information in accordance with applicable laws and regulations. We collect, use, share, or disclose minors' personal information only where permitted by law, with guardian consent where required, or where necessary to protect minors. If we discover that we have collected a minor's personal information without verifiable guardian consent where such consent is required, we will take steps to delete the relevant information as soon as reasonably practicable.

If you are a parent or guardian and have questions about a minor's personal information, please contact us through the channels below.

9. Contact Us

If you have questions, complaints, suggestions, requests related to personal information, or questions about this Privacy Policy, you may contact us at:

Company: Shanghai Yizhitu Information Technology Co., Ltd.Email: support@yitu.art

We will respond to your request within a reasonable period and within the period required by applicable law.

10. Other Terms

"BunToon" refers to software and services operated by Shanghai Yizhitu Information Technology Co., Ltd., including but not limited to websites, apps, mini programs, and other service carriers.

To the extent permitted by law, we reserve the right to interpret and update this Privacy Policy.