Privacy Policy
This policy explains what personal data Verirobot Inc., a Delaware corporation ("Verirobot", "we", "us"), processes when you use the Zumti products, why we process it, who we share it with, and the choices you have. It covers:
- Zumti Games & Social, the social app on iPhone, Android and the web (the "App");
- Zumti Avatar, the avatar editor, developer console and API at avatar.zumti.com;
- this website, zumti.com.
We do not sell personal data, we do not rent it, and we do not share it for cross-context behavioral advertising.
1. Who is responsible
Verirobot Inc. is the controller of the personal data described in this policy, except where section 3 says that a Zumti Avatar customer is the controller. Questions and requests: [email protected].
2. Zumti Games & Social
What we collect
| Sign-in | You sign in with Google, or on iPhone with Apple (Sign in with Apple); there is no separate password. From Google we receive your name, e-mail address, profile picture and Google account id. From Apple we receive your Apple account id and, if you choose to share them, your name and e-mail address; if you use Apple's "Hide My Email", we receive a relay address and never see your real one. We do not ask for your phone number, address, contacts or location. |
|---|---|
| Profile and content | The display name, profile pictures, photos and other content you choose to upload to your profile, and the songs you make with AI Music. |
| Messages and AI conversations | Your private messages and your conversations with AI characters, kept so you can see your history and so AI characters can remember you. You can delete this history, and you can turn saving off; see "Your choices" below. |
| Activity in the App | Rooms you create or join, friends, levels, games played and their results, gifts, token balance and token history, purchases and VIP items. |
| Payments | Token and other purchases are paid through Stripe. Stripe processes your card; we never receive or store card numbers. We keep a record of what you bought, when, and the amount. |
| Technical data | IP address, device and browser type, app version, language, and error and security logs, to run and protect the App. |
What we do not collect
- Voice and video are not recorded. Voice and video in rooms and calls pass live through media servers operated by Verirobot and are not stored.
- Room chat is not saved. Messages written in rooms are shown live and no room history is kept.
- We do not collect precise location, contacts, or other personal information beyond what is listed above.
AI features
AI World, AI games, AI Music, Tarot and other AI features are powered by third-party AI providers, including xAI, Google, OpenAI and ElevenLabs. When you use an AI feature, the text or voice you send to it, the context it needs (for example the character, the game state or your recent conversation with that character) and your language are sent to the provider that serves the feature, to produce its answer, voice or song. We do not send your e-mail address or payment data to AI providers. AI providers process this data under their terms for business customers. Avoid sharing sensitive personal information with AI characters. AI answers are generated automatically, can be wrong, and are for entertainment; Tarot and astrology readings are not advice.
Why we use it
- To run the App: sign you in, show your profile, connect rooms, calls and games, deliver messages, run AI features, keep your tokens and purchases (performance of our contract with you).
- To keep the community safe: moderate content, act on reports, prevent fraud, cheating and abuse (legitimate interests and legal obligations).
- To bill and keep accounting records (legal obligation).
- To fix problems and improve the App, using aggregated statistics (legitimate interests).
- To send you important notices about your account. We do not send marketing without your consent.
Who sees what
Your display name, profile picture, profile content, level and VIP items are visible to other users. What you say in a room is seen and heard by the people in that room, and they may record it with their own devices against our rules; please share with care. Private messages are visible to you and the people you send them to. Our moderators may review reported content and accounts.
Your choices
- Message and AI history. You can delete your conversations, and you can choose not to have your conversations saved at all.
- Profile content. You can change or remove your profile pictures and content at any time.
- Account deletion. You can delete your account at any time with the "Delete account" button on your profile page in the App. We then delete your profile, uploaded content and message history within 30 days, except records we must keep by law (such as payment records) and data needed to deal with fraud or abuse.
How long we keep it
- Profile, uploaded content and message history: until you delete them or your account.
- Purchase and payment records: as long as tax and accounting law requires (generally 7 years).
- Security and error logs: for a limited time, unless needed to investigate abuse.
3. Zumti Avatar
Zumti Avatar turns photos (a front and two profiles) or a written description into a 3D avatar. Its full privacy policy is at avatar.zumti.com/privacy. In short:
- Developers and companies sign in with Google; we keep their account, team and billing data. Paid plans are processed by Stripe.
- Photos are used for one purpose: to build that person's avatar. We do not create face templates for recognition, we do not identify or track anyone, and we do not use photos of real people to train AI models.
- When a company uses Zumti Avatar inside its own app or game, that company is the controller of its users' data and Verirobot processes it as its service provider (processor), on its instructions.
- Photos and avatar files are stored privately on Amazon Web Services and kept until they are deleted, or 90 days after the account is closed.
If you use Zumti Avatar inside Zumti Games & Social, your avatar is part of your Zumti account and is deleted with it.
4. Service providers
We share personal data only with providers that help us run the products, under contracts that limit their use of it, and only what each needs:
| Amazon Web Services | Storage of profile pictures, uploaded content, photos and avatar files, and other App data. |
|---|---|
| Verirobot | Our own media servers for live voice and video (not recorded). |
| Sign-in with Google; AI features. | |
| Apple | Sign in with Apple on iPhone. |
| Stripe | Payments, subscriptions and invoices. |
| AI providers | xAI, Google, OpenAI, ElevenLabs and other AI providers, for the AI features described in section 2. |
| Cloudflare | Network delivery and protection of our websites. |
We may also disclose data when the law requires it, to protect the rights and safety of our users and others, or to a successor in a merger or acquisition, which will be bound by this policy.
5. Where we operate
Zumti is operated by Verirobot Inc. from the United States, and is sold and invoiced from the United States. Your data is processed in the United States and in the other countries where our service providers operate. If you use Zumti from outside the United States, you do so on your own initiative, and you understand that your data is transferred to and processed under the laws of the United States, which may differ from the laws of your country.
6. Security
Data is sent over encrypted connections (HTTPS/TLS), stored in private storage, and accessible only to the staff and systems that need it. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.
7. Children
Zumti Games & Social is for adults only: users must be at least 18 years old, or the age of majority where they live if that is higher. We do not knowingly collect personal data from anyone under that age. If we learn that we have, we close the account and delete its data. Parents and guardians can write to [email protected] to ask for this. For Zumti Avatar inside other companies' apps, see section 3 and the Zumti Avatar privacy policy.
8. This website
zumti.com sets no cookies and uses no analytics or advertising trackers. Our servers and Cloudflare keep standard request logs (IP address, browser, page) for security. The promo videos are played from YouTube's privacy-enhanced mode (youtube-nocookie.com) and load only when you press play; YouTube's own privacy policy then applies.
9. Your rights
You can access, correct and delete your personal data, and get a copy of it. You can do most of this yourself in the App: edit your profile, delete your messages and AI conversations, turn saving off, or delete your account from your profile page. For anything else write to [email protected]. We answer within 30 days and may need to confirm your identity. We will not discriminate against you for using these rights.
10. California and other US states
In the past 12 months we have collected the categories of personal information described in sections 2 and 3: identifiers (name, e-mail, account id, IP address), customer records, commercial information (purchases), internet activity, and user content. We use them for the purposes in this policy. We do not sell or share personal information, as those terms are defined in the California Consumer Privacy Act. California residents and residents of other states with privacy laws may ask to know, access, correct and delete their personal information; we will not discriminate against you for doing so. You may use an authorized agent; we will verify the request.
11. Changes
We post changes to this policy on this page with a new date. If a change is material, we tell you in the App or by e-mail before it applies.
12. Contact
Verirobot Inc., a Delaware corporation, United States
E-mail: [email protected] · Web: www.verirobot.com