Effective Date: 2025-11-20
FOLOTOY CREATIVE PTE. LTD. (“FOLOTOY,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy (“Policy”) explains how we collect, use, disclose, and protect information when you use:
By using the Services, you agree to this Policy. If you do not agree, please discontinue use. Undefined capitalized terms follow definitions described in the FOLOTOY Terms of Service.
We collect information in three ways:
Some information is required for the proper functioning of the Services. If withheld or deleted, some features may not operate correctly.
You may provide information when you:
This may include:
All identifiable child information is provided only by parents, except information spoken by a child during voice interactions.
FOLOTOY does not maintain long-term chat histories for children.
We and our service providers may collect:
Server Logs Retention: Up to 72 hours for debugging, fraud detection, and system integrity. Logs do not include full conversation transcripts.
We use information to:
We may send minimal contextual data such as:
Model providers may include OpenAI, Google, Microsoft, AWS, and future vendors.
These providers do NOT store, train on, or profile FOLOTOY user data.
For hosting, AI processing, voice features, analytics, support, and payments.
Including protection of children, fraud prevention, and legal requests.
If FOLOTOY undergoes merger, acquisition, or asset transfer.
When you explicitly grant permission. FOLOTOY does NOT sell personal data.
Children may provide:
Used for personalization, safety, and device operation. We do NOT:
Only to service providers, legal authorities, or safety-related cases.
Parents may request:
Contact: [email protected]
FOLOTOY does NOT currently provide chat transcript access. If added later, renewed consent and strict controls will be implemented.
| Data Type | Retention Period |
|---|---|
| Audio recordings | up to 24 hours |
| Speech-to-text transcriptions | up to 24 hours |
| Server logs | up to 72 hours |
| Child profile (name, birthday) | until parent deletes |
| User account data | until account deletion |
| Payment & transaction records | retained as required by law |
We use encryption, access controls, and abuse detection. No system is 100% secure.
Your data may be processed in the US, Singapore, EU, or other regions.
We implement SCCs and GDPR/PDPA-compliant safeguards.
Depending on your jurisdiction, you may request access, deletion, correction, withdrawal of consent, or data portability.
We may update this Policy and will modify the Effective Date accordingly.
Email: [email protected]