Wisteria legal

Privacy Policy

How Vimo Technology Co., Ltd. collects, uses, discloses, retains, and protects information through Wisteria

Effective date	September 22, 2026
Provider	Vimo Technology Co., Ltd.

This Privacy Policy explains how Vimo Technology Co., Ltd. (“Vimo,” “we,” “us,” or “our”) handles personal information when you use the Wisteria mobile application, wisteria.chat, AI companions, stories, subscriptions, and related services (collectively, the “Services”). It also explains the choices and rights that may be available to you.

Wisteria is available only to adults age 18 or older. It is available to everyone while being designed with the LGBTQ+ community in mind. Because profile fields and conversations may reveal sexual orientation, gender identity, intimate interests, or other sensitive information, please read this Policy carefully and avoid sharing information that is not necessary for your experience.

1 Scope and controller

Vimo Technology Co., Ltd., a company registered in California, is the controller or business responsible for personal information processed under this Policy, except where a service provider acts independently under its own terms. This Policy applies to the Services and communications with us. It does not govern third-party websites, platforms, or services that we do not control.

2 Personal information we collect

We collect information from you, automatically from your device and use of the Services, and from service providers and business partners.

Information you provide

Account and authentication information, including information received through Sign in with Apple, such as an email address or Apple private relay address and account identifier.
Profile and age-gating information, including name, username, display name, date of birth, gender identity, sexual orientation, pronouns, preferences, and onboarding responses you choose to provide.
Conversation and content information, including prompts, messages, AI responses, chat history, reports, feedback, and information you voluntarily include in conversations.
Photos, images, audio, voice recordings, or other files if you choose to upload them or use features that require camera, photo-library, or microphone access.
Communications and support information, including messages and attachments you send to us and information needed to address your request.
Purchase-related information, including subscription status, product, transaction identifier, trial status, and purchase history received from Apple or RevenueCat. We do not receive your full payment-card number from Apple.

Information collected automatically

Device and network information, such as device type, operating system, app version, language, IP address, time zone, network or carrier information, and device or app identifiers.
Usage and interaction information, such as screens viewed, features used, companions or stories opened, message and session events, clicks, subscription interactions, referral information, timestamps, and general engagement patterns.
Diagnostic and security information, including crash logs, performance data, error reports, authentication events, fraud indicators, and records used to secure and troubleshoot the Services.
Advertising and attribution information, such as advertising identifiers when permitted, campaign source, install and conversion events, and interactions used to measure or personalize marketing.

We do not request your contacts or precise or approximate device location. We do not offer health-care or mental-health services and do not intentionally collect medical records or health data as dedicated profile fields. However, messages and other content you voluntarily provide may contain health, mental-health, or other sensitive information. If you include such information, we will process it as part of your content under this Policy.

3 How we use personal information

Provide, operate, maintain, personalize, and improve the Services, including generating AI responses and maintaining conversation context or memory.
Create and manage accounts, confirm eligibility, authenticate users, provide free and paid features, and administer subscriptions and trials.
Store chat history and provide memory. The amount or duration of available history may differ between free and subscribed accounts.
Moderate content, investigate reports, enforce our Terms, detect prohibited conduct, prevent fraud or abuse, and protect users and the Services.
Analyze performance and usage, debug errors, test features, conduct research and product development, and improve the quality, relevance, safety, and reliability of Wisteria.
Communicate about the Services, respond to support requests, provide security or policy notices, and send push notifications when you permit them.
Measure marketing campaigns, understand referrals and conversions, and, where permitted, personalize or evaluate advertising for Wisteria.
Comply with law, legal process, regulatory obligations, and enforceable government requests; establish, exercise, or defend legal claims; and complete corporate transactions.
Create aggregated or de-identified information that cannot reasonably be linked to you and use it for lawful business purposes.

We do not use profile fields identifying sexual orientation or gender identity, or the contents of private conversations, to target third-party advertisements. We do not permit advertising partners to use private chat content to advertise to you. Wisteria does not currently display third-party ads in the app.

4 AI processing and conversation memory

To generate AI responses, we transmit prompts, relevant conversation context, and technical information necessary to process the request to BytePlus, an AI service associated with ByteDance. BytePlus processes this information on our behalf or as otherwise described in its applicable legal terms. AI processing may occur in countries outside your residence.

We store conversation history to provide continuity and memory, operate safety systems, troubleshoot, and support the Services. Retention or memory limits may vary by account type and product configuration. We may use conversations and related signals to evaluate and improve Wisteria’s quality and safety, including through automated analysis and limited review by authorized personnel or contractors where reasonably necessary. We do not authorize BytePlus to use Wisteria customer content to train its general-purpose models except where disclosed to and agreed by us under the applicable service terms.

Automated moderation may analyze prompts, messages, outputs, files, and reports to detect prohibited or unsafe content. Content may be blocked, restricted, or escalated for authorized review. Automated systems may make mistakes. You can report content or contact us about a moderation concern.

BytePlus privacy information: https://docs.byteplus.com/en/docs/legal/docs-privacy-policy

BytePlus AI model information: https://docs.byteplus.com/en/docs/legal/AI_Models_FAQ

5 Legal bases for users in the EEA, UK, and similar jurisdictions

Where applicable law requires a legal basis, we rely on:

Contract, to create and administer your account, generate responses, provide requested features, maintain conversation history, and manage subscriptions.
Legitimate interests, to secure and improve the Services, prevent fraud and abuse, conduct analytics, support users, enforce our Terms, and market Wisteria, provided those interests are not overridden by your rights.
Consent, where required for sensitive profile information, certain device permissions, push notifications, tracking, personalized advertising, or other processing. You may withdraw consent through relevant app or device settings or by contacting us.
Legal obligation, to comply with applicable law, valid legal process, and regulatory requirements.
Vital interests or public interest, in limited circumstances where processing is necessary to protect a person from serious harm or as otherwise authorized by law.

Where information about sexual orientation, gender identity, sexual life, health, or another specially protected category is processed under laws such as the GDPR or UK GDPR, we rely on explicit consent where required, or another lawful condition that applies to the particular processing. You may decline optional profile fields, but information you choose to place in a prompt must be processed to provide the requested conversation.

6 How we disclose personal information

We may disclose personal information to the following recipients for the purposes described in this Policy:

AI and infrastructure providers, including BytePlus and Firebase or related Google services, to host data, authenticate users, generate responses, store content, and operate the Services.
Subscription and commerce providers, including Apple and RevenueCat, to process purchases, verify entitlements, manage trials, and support billing.
Analytics and diagnostics providers, including Amplitude, Firebase Analytics, and Crashlytics, to understand usage, measure performance, and resolve errors.
Advertising and attribution partners, including Meta and similar SDK providers, to measure campaigns, attribute installs or purchases, and, where legally permitted and authorized, support targeted advertising.
Safety, moderation, customer-support, communications, professional-adviser, and other vendors that help us operate, secure, support, and improve the Services.
Authorities, courts, litigants, or other parties when we reasonably believe disclosure is required by law or necessary to protect rights, safety, security, users, or the public.
A buyer, investor, lender, adviser, or successor in connection with financing, due diligence, a merger, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to appropriate confidentiality protections.
Other parties at your direction, with your consent, or when you intentionally make information public.

Our provider list may change as the Services evolve. We may use additional vendors that perform functions similar to those described above. We require service providers to handle personal information under contractual and legal restrictions appropriate to their role.

We do not sell personal information for money. We may disclose device identifiers, advertising identifiers, campaign information, and usage or conversion events to advertising and attribution partners. Under California and certain other privacy laws, some of these disclosures may be considered a “sale,” “sharing,” or processing for targeted advertising even when no money is exchanged.

You may opt out of tracking through Apple’s App Tracking Transparency prompt and device privacy settings. You may also email wisteriasupport@gmail.com with the subject “Do Not Sell or Share” to request that we stop disclosures treated as sale, sharing, or targeted advertising for your account or device, subject to legal verification and technical limitations. Where legally required, we honor applicable browser-based opt-out preference signals, such as Global Privacy Control, on our website.

We do not knowingly sell or share personal information of anyone under 18. Wisteria does not permit anyone under 18 to use the Services. We do not sell or share private conversation content, sexual orientation, gender identity, date of birth, voice content, photos, or other sensitive profile information for cross-context behavioral advertising.

8 Data retention

We retain personal information for as long as reasonably necessary to provide the Services and for the purposes described in this Policy. Retention depends on the type of information, account type, feature configuration, sensitivity, legal requirements, and operational need. In particular:

Account and profile information is generally retained while your account is active.
Conversation history and memory are retained according to the limits and features associated with your free or subscribed account, unless you delete the content or account earlier or longer retention is required for safety or law.
Support, security, fraud-prevention, moderation, transaction, and legal records may be retained after account deletion for a limited period needed to resolve requests, prevent abuse, comply with accounting or legal duties, enforce agreements, or defend claims.
De-identified or aggregated information may be retained where it cannot reasonably be used to identify you.
Backups may retain residual copies for a limited period before deletion through ordinary backup cycles.

When retention is no longer necessary, we delete, anonymize, or securely dispose of the information, subject to technical and legal limitations.

9 Account and data deletion

You can request deletion of your account and associated personal information by using Delete Account in Wisteria Settings or by emailing wisteriasupport@gmail.com. We may need to verify your identity or account ownership. Deleting your account may permanently remove profile information, chat history, memory, and other content and may not be reversible.

Deleting your Wisteria account does not cancel an Apple subscription. You must separately cancel through your Apple account settings. We may retain limited information after deletion where required or permitted for security, fraud prevention, legal compliance, transaction records, dispute resolution, and enforcement. We will not use retained information for unrelated purposes.

10 Your privacy rights and choices

Depending on where you live, you may have rights to:

request access to or a copy of personal information;
request correction of inaccurate information;
request deletion of personal information;
request a portable copy of information you provided;
object to or restrict certain processing;
withdraw consent without affecting prior lawful processing;
opt out of sale, sharing, targeted advertising, or certain profiling;
limit certain uses or disclosures of sensitive personal information where the right applies;
appeal our denial of a privacy request where applicable; and
complain to your local data-protection authority.

To exercise a right, use available in-app settings or email wisteriasupport@gmail.com. Describe the request and identify the account using the email or Apple private relay address associated with it. We may request reasonable information to verify identity and authority. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct verification from the user.

We will not discriminate against you for exercising a privacy right. Rights are subject to legal exceptions, and we may deny or limit a request where permitted. To appeal a decision, reply to our response with “Privacy Appeal” in the subject line and explain why you believe the decision should be reconsidered.

11 California privacy notice

This section supplements the rest of this Policy for California residents. The categories below describe personal information we may have collected and disclosed during the preceding 12 months and expect to continue processing. Whether a category applies to you depends on how you use the Services.

Category	Examples	Business purposes
Identifiers	Name, username, email or relay address, account, device, IP, and advertising identifiers	Service, security, support, analytics, attribution, legal compliance
Customer records	Account, subscription, transaction, and support information	Account and subscription administration, support, legal compliance
Protected classifications	Age, gender identity, sexual orientation, and related optional profile information	Age gating and user-requested personalization
Commercial information	Subscription product, purchase history, trial and entitlement status	Billing, entitlement, analytics, support
Internet or network activity	Usage events, interactions, logs, referrals, and diagnostic data	Operation, analytics, security, improvement, attribution
Audio and visual information	Photos, images, voice, or audio you choose to provide	Requested features, support, moderation, safety
Inferences	Preferences or interests inferred from profile and interactions	Personalization, safety, analytics, improvement
Sensitive personal information	Account credentials; sexual orientation; content that may reveal intimate, identity, or other sensitive information	Authentication, requested personalization, AI conversations, safety

We collect these categories from you, your device and use of the Services, Apple, and service providers or marketing partners. We disclose them to the recipient categories described in Section 6. We may “share” identifiers and internet or network activity with advertising and attribution partners as described in Section 7. We do not sell personal information for money. We do not use or disclose sensitive personal information to infer characteristics for purposes that trigger a right to limit under California law, and we do not use sensitive profile fields or private chats for cross-context behavioral advertising.

California residents may request to know, access, correct, or delete personal information and may opt out of sale or sharing, subject to applicable exceptions. You may exercise these rights as described in Section 10. California’s “Shine the Light” law may provide additional rights regarding disclosure for third parties’ direct marketing; requests may be sent to our support email.

12 International transfers

Vimo is based in California, and we and our service providers may process personal information in the United States, Singapore, and other countries where we or they operate. These countries may have privacy laws different from those in your country.

Where required for transfers from the European Economic Area, United Kingdom, Switzerland, or another jurisdiction, we use recognized transfer mechanisms such as adequacy decisions, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or Agreement, or another lawful safeguard. You may contact us for information about applicable safeguards.

13 Security

We use administrative, technical, and organizational measures designed to protect personal information, taking into account its nature and the risks involved. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining control of your device, Apple account, and account access. Contact us promptly if you believe your Wisteria account or information has been compromised.

14 Adults only

Wisteria is not directed to or permitted for anyone under 18. We do not knowingly collect personal information from minors through the Services. If we learn that a person under 18 has provided personal information, we will take reasonable steps to delete the account and information, subject to legal and safety obligations. If you believe a minor is using Wisteria, contact us immediately.

15 Device permissions and communications

Depending on the features you use, Wisteria may request permission to access photos, camera, microphone, notifications, or tracking. You can manage permissions in iOS Settings. Disabling a permission may prevent the related feature from working. You may opt out of non-essential promotional communications by using the unsubscribe mechanism provided or contacting us, but we may still send transactional, security, legal, or account notices.

16 Changes to this Privacy Policy

We may update this Policy as the Services, vendors, or laws change. We will post the revised Policy and update the effective date. If a change materially affects how we use personal information, we will provide additional notice or obtain consent when required by law. We encourage you to review this Policy periodically.

17 Contact us

Questions, privacy requests, complaints, and appeals may be sent to:

Vimo Technology Co., Ltd.
Email: wisteriasupport@gmail.com
Website: wisteria.chat

Wisteria website: https://wisteria.chat

Wisteria App Store listing: https://apps.apple.com/app/id6810637608