Update Date: June 4, 2025
“Bomi AI” is developed and operated by Shenzhen Fanhan Zhichuang Technology Co., Ltd. (hereinafter referred to as “Bomi” or “we”). We fully recognize the importance of your personal information. Your information is very important to us, and we will protect your personal information and privacy security in accordance with laws and regulations and by referring to industry best practices. We have formulated this policy to help you understand the following content:
Bomi AI website’s explicit list of personal information collection;
How we store your personal information;
How we transfer and disclose your personal information;
How we protect your personal information;
Your rights to manage personal information;
Protection of minors’ personal information;
Changes and revisions to the privacy policy;
How to contact us.
Before using the Bomi AI website and related services, please be sure to carefully read and understand this privacy policy, and use our products or services after confirming full understanding and consent. If you choose to agree on the relevant pages of the Bomi AI website or use the Bomi AI website and related services (including but not limited to logging in or using a Bomi AI account), it means that you have fully understood and agreed to this policy, and agree that we collect, use, store and share your relevant information in accordance with this privacy policy. If you have any questions, opinions or suggestions about the content of this policy, you can contact us through the various contact methods provided in this privacy policy.
Please note that different applications may have certain functional differences, and the specific functions you actually use shall prevail. In addition, for certain specific services, we will also formulate separate privacy policies to explain the special policies of these services to you. If there are any inconsistencies between the relevant specific privacy policies and this privacy policy, the relevant specific privacy policy shall apply. Secondly, if you provide us with personal information of other third parties, please ensure that you have obtained full authorization from the third party. In addition, this policy does not apply to products or services provided to you by other third parties. When you use products or services of other third parties through this service, your personal privacy information shall be subject to the privacy terms of the third party’s products or services. If you need to use products or services provided by third parties in the process of using Bomi AI, this service will clearly inform you on the relevant page that the service is provided by a specific third party, and strongly recommends that you read and confirm your understanding of the third party’s agreements and policies related to personal information protection in detail before confirming to receive the third party’s related products and services.
In this policy, if personal information is sensitive personal information, we will remind you to pay attention and obtain your explicit consent in the form of font with *, and you should pay extra attention to the listing of such information. The processing of your sensitive personal information in this service is closely related to the corresponding purposes stated in this policy, has full necessity, and adopts strict protection measures to maximize the protection of your rights and interests.
We will collect and use information you actively provide when using Bomi AI and related services, as well as information generated during your use of functions or receiving services through automated means in the following ways:
(1) When you register and log in to Bomi AI and related services, Bomi AI will collect your mobile phone number, verification code, third-party platform account information (such as avatar, nickname) or other real identity information. Collecting this information is to help you complete Bomi AI account registration and complete real-name authentication in accordance with relevant laws and regulations to protect your account security. If you refuse to provide this information, you may not be able to successfully register or log in to your Bomi AI account.
(2) To ensure the safe operation of software and services, as well as the quality and efficiency of operations, we will collect your device’s hardware model, operating system version number, device identifier, network device hardware address, IP address, WLAN access point, software version number, network access method, and service logs. We may associate your device information or phone number with your Bomi AI account.
(3) Where permitted by relevant laws and regulations, in order to analyze statistical indicators such as application additions, activations, retention, and performance, we may collect your usage behavior on Bomi AI and call the clipboard to perform attribution analysis on relevant statistical information.
(4) Message Notifications
You acknowledge and agree that for the contact information you provide during your use of products and/or services (for example: mobile phone number), we may send various types of notifications to one or more of them during operations for purposes such as user message notification, identity verification, security verification, user experience research, and dispute resolution.
(5) Feedback
i. Customer Service and Issues: To facilitate contact with you, help you solve problems as soon as possible, or record the processing solutions and results of related issues, we may save your communication/call records with us and related content* (including account information, feedback information, order information, other information you provide to prove relevant facts, or contact information you leave). If you consult, complain or provide suggestions about specific orders, we will use your account information and order information. To facilitate the use of customer service or feedback functions by non-logged-in users, we may associate the above information with your device information and allow viewing after logging in.
ii. When you complain about others or are complained about by others, in order to protect your and others’ legitimate rights and interests, we may provide your account/identity information, contact information, and complaint-related content to consumer rights protection departments and regulatory agencies to resolve complaint disputes in a timely manner, except where prohibited by laws and regulations.
iii. Questionnaire Surveys: For the reasonable need to provide services and improve service quality, we may also use your other information, including relevant information you provide when contacting customer service, and questionnaire responses you send to us when participating in questionnaire surveys; if you are unwilling, you may also refuse to participate in questionnaire surveys.
To the extent permitted by relevant laws and regulations, when you use Bomi AI and related services, we may use relevant technologies to send one or more cookies or anonymous identifiers to your device to collect, identify and store information about your access and use of this product. We promise that we will not use cookies for any other purpose beyond those described in this privacy policy. We use cookies and similar technologies mainly to achieve the following functions or services:
(1) Ensuring the Security, Efficiency and Operation of Products and Services
We may set authentication and security cookies or anonymous identifiers to confirm whether you have securely logged into the service, or whether you have encountered theft, fraud and other illegal activities. These technologies will also help us improve service efficiency and enhance login and response speed.
(2) Helping You Get an Easier Access Experience
We may use COOKIES and similar technologies to understand your usage habits to improve our products and services. Using such technologies can help you save the steps and processes of repeatedly filling in personal information and entering search content (examples: recording searches, form filling).
(3) Cookie Clearing
Most browsers provide users with the function to clear browser cache data, and you can perform corresponding data clearing operations in the browser settings function. If you clear them, due to these modifications, you may not be able to use our cookie-dependent services or corresponding functions.
To ensure the normal operation of Bomi AI or implement related functions, we may access services provided by third parties through SDKs, APIs, plugins, etc. (see Appendix 1 for details). Before access, we will conduct strict security testing and privacy assessment of third-party services, and agree with the third party on strict data protection measures, requiring them to handle your personal information in accordance with this privacy policy and any other relevant confidentiality and security measures to protect your privacy and user information security. These third-party service providers are independent information controllers and will independently bear full responsibility for their information collection and processing behaviors. In view of this, you should carefully read their privacy policies and related documents to understand how your personal information is processed by such third parties:
According to relevant laws and regulations and national standards, collecting your personal information in the following circumstances does not require your prior authorization and consent:
(1) Related to national security and national defense security;
(2) Related to public safety, public health, and major public interests;
(3) Related to criminal investigation, prosecution, trial and judgment enforcement;
(4) For the purpose of protecting your or others’ life, property and other major legitimate rights and interests but it is difficult to obtain your consent;
(5) Personal information you have disclosed to the public on your own;
(6) Your personal information collected from legally publicly disclosed information, such as legal news reports, government information disclosure and other channels;
(7) Necessary for maintaining the safe and stable operation of the Bomi AI website and related services, such as discovering and handling software and related service failures;
(8) Necessary for conducting legal news reporting;
(9) Necessary for academic research institutions to conduct statistics or academic research based on public interests, and when providing academic research or description results externally, the personal information contained in the results is de-identified;
(10) Other circumstances stipulated by laws and regulations.
Please pay special attention that if information cannot identify your personal identity alone or in combination with other information, it does not belong to your personal information in the legal sense; when your information can identify your personal identity alone or in combination with other information, or when we combine data that cannot establish a connection with any specific personal information with your other personal information, such information will be processed and protected as your personal information in accordance with the law during the period of combined use.
Personal information collected and generated within the territory of the People’s Republic of China will be stored within the territory of the People’s Republic of China for the storage period specified by law.
If it is necessary to transmit relevant personal information collected domestically to overseas institutions for processing cross-border business, we will implement it in accordance with laws, administrative regulations and the provisions of relevant regulatory departments. We will ensure that your personal information receives adequate protection, such as anonymization, encrypted storage, etc. We only store your personal information for the period necessary to provide Bomi AI related services and the time limit required by laws and regulations: (1) Personal information processed based on your authorization and consent will be retained from the date of collection until the processing purpose is achieved, the user cancels/deletes all account information or withdraws consent and the agreed regret period expires; (2) Personal information necessary for entering into or performing a contract to which you are a party will be retained from the date of collection until the contract is fully performed and the statute of limitations expires; (3) Personal information necessary for fulfilling legal obligations will be retained from the date of collection until the legal obligations are fulfilled and the statute of limitations expires; (4) If laws and regulations, normative documents and regulatory provisions have different requirements for the above retention periods, the requirements of laws and regulations, normative documents and regulatory provisions shall be followed.
To achieve our business functions, we will entrust external suppliers to assist us in providing relevant services to you. We will send your personal information to third-party service providers or partners who support our business. These supports include providing technical infrastructure services (such as cloud storage and cloud services), statistical analysis services, and customer services. Under the entrusted processing method, third parties receiving personal information only process your personal information according to our specified purposes, methods and scope, and we bear responsibility to you for their entrusted behaviors within the scope of entrustment. We solemnly promise that we will comply with the relevant provisions of laws and regulations on entrusted processing, fully review and evaluate the ability of such cooperative institutions to protect personal information, require cooperative institutions to strictly comply with confidentiality obligations through written agreements, audits and other means, adopt technical methods to conduct confidential processing of entrusted information, and prohibit them from using this information for purposes other than those stipulated by laws and regulations and agreed upon by both parties, as well as purposes without your authorization. When the entrusted relationship is terminated, we will require the cooperative institution to no longer retain relevant information.
Without permission from laws and regulations, normative documents and regulatory provisions or obtaining your prior separate consent, we will not provide your personal information to third parties, except in the following circumstances:
(1) We may provide your personal information externally to fulfill legal duties or mandatory requirements of government authorities.
(2) Based on your separate consent or other legal processing reasons: To fulfill agreements concluded with you or for other reasonable purposes, we may provide some of your personal information to third-party personal information processors. The third-party personal information processor receiving personal information has the right to process personal information within the scope of processing purposes, processing methods and types of personal information that have been notified to you. If the recipient changes the original processing purpose or processing method, they should obtain your consent again.
(3) Based on the need for unified management of user identities by the company and its affiliates and to provide users with richer and more diverse services, we will share your personal information with affiliates according to actual circumstances (but limited to the purposes described in this policy). When such external provision occurs, we will inform you of the recipient’s name, contact information, processing purpose, processing method and type of personal information, and obtain your separate consent again or other legal basis.
We will not transfer your personal information to any company, organization or individual, except in the following circumstances:
(1) Transfer with explicit consent: After obtaining your explicit consent, we will transfer your personal information to other parties;
(2) In case of merger, acquisition or bankruptcy liquidation, if personal information transfer is involved, we will require the new company or organization holding your personal information to continue to be bound by this privacy policy, otherwise we will require the company or organization to seek authorization and consent from you again. In the process, we may need to disclose your personal information to third parties such as audit institutions, law firms, and consultants due to requirements from potential buyers or other entities for reasonable business arrangements such as due diligence.
Respecting users’ personal privacy and protecting the security of users’ personal information is a basic policy of Bomi, and we will not publicly disclose your personal information. Except in the following circumstances:
(1) Your explicit consent has been obtained;
(2) Necessary for entering into or performing a contract to which you are a party, or necessary for implementing human resource management in accordance with labor rules and regulations formulated according to law and collective contracts signed according to law;
(3) Necessary for fulfilling legal duties or obligations;
(4) Necessary for responding to public health emergencies, or protecting the life, health and property safety of natural persons in emergency situations;
(5) Processing personal information within a reasonable scope for implementing news reporting, public opinion supervision and other behaviors for public interests;
(6) Other circumstances stipulated by laws and administrative regulations.
Even in the above circumstances, we will adopt legal and legitimate methods and process your personal information with clear and reasonable purposes.
4.1 We attach great importance to the security of your personal information and will strive to take reasonable security measures (including technical and management aspects) to protect your personal information and prevent the personal information you provide from being improperly used or accessed, publicly disclosed, used, modified, damaged, lost or leaked without authorization.
4.2 We will use encryption technology, anonymization processing and other reasonably feasible means that are not lower than those of industry peers to protect your personal information, and use security protection mechanisms to prevent your personal information from being maliciously attacked.
4.3 We will establish a dedicated security department, security management system, and data security process to ensure the security of your personal information. We adopt strict data use and access systems to ensure that only authorized personnel can access your personal information, and conduct security audits on data and technology from time to time.
4.4 Although the above reasonable and effective measures have been taken and the standards required by relevant laws and regulations have been complied with, please understand that due to technical limitations and various malicious means that may exist, in the Internet industry, even if we do our best to strengthen security measures, it is impossible to always guarantee 100% security of information. We will do our best to ensure the security of the personal information you provide to us.
4.5 You acknowledge and understand that the systems and communication networks you use to access our services may have problems due to factors beyond our control. Therefore, we strongly recommend that you take proactive measures to protect the security of your personal information, including but not limited to using complex passwords, changing passwords regularly, and not disclosing your account passwords and related personal information to others.
4.6 We will formulate emergency response plans, and immediately launch emergency plans when user information security incidents occur, striving to prevent the impact and consequences of these security incidents from expanding. Once a user information security incident (breach, loss) occurs, we will inform you in accordance with the requirements of laws and regulations: the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, suggestions for you to independently prevent and reduce risks, and remedial measures for you. We will promptly inform you of the event-related situation through push notifications, emails, letters, text messages and related forms. When it is difficult to notify individually, we will issue announcements in reasonable and effective ways. At the same time, we will also report the handling of user information security incidents in accordance with the requirements of relevant regulatory departments. If you discover that your personal information has been leaked, please contact us immediately through the contact methods agreed in this policy so that we can take corresponding measures in time.
During your use of the Bomi AI website and related services, you can access and manage your personal information in the following ways:
(1) You can log in to your Bomi AI account to query, access, copy, transfer, correct, supplement, and delete your personal information, including password, gender, age, birthday and other information. Please note that for security and identity verification reasons (such as account appeal services), you may not be able to independently modify certain initial registration information submitted during registration. If you do need to modify such registration information, please contact us according to the contact information specified in this privacy policy. If you need to copy or transfer this personal information, you can also contact us according to the contact information specified in this privacy policy, and we will provide corresponding transfer channels when the transfer conditions meet the conditions stipulated by the national cyberspace administration.
(2) When the following situations occur, you have the right to request Bomi to delete your personal information:
i. The processing purpose has been achieved, cannot be achieved, or is no longer necessary to achieve the processing purpose;
ii. We stop providing products or services, or the retention period has expired;
iii. The individual withdraws consent;
iv. Our processing of personal information violates laws, administrative regulations or agreements with you;
v. Other circumstances stipulated by laws and administrative regulations.
Personal information deletion: refers to the act of removing personal information from systems involved in daily business functions, keeping it in a state where it cannot be retrieved or accessed. After you or we assist you in deleting relevant information, due to applicable legal and security technical limitations, we may not be able to immediately delete the corresponding information from the backup system. We will securely store your personal information and restrict any further processing of it until the backup can be cleared or anonymized.
(1) You can apply to cancel your account at any time. You can apply for cancellation through the online customer service phone 15008425044 or customer service email xin.li@fanyou-online.com.
(2) Before you cancel your account, we will verify your personal identity, device information, etc. We will process your application promptly after receiving it and respond to your request within 15 working days or the time limit required by laws and regulations. You acknowledge and understand that account cancellation is an irreversible action. After you cancel your account, all content, information, data, and records under the account will be deleted or anonymized. You will no longer be able to retrieve, access, obtain, continue to use or recover them, and you have no right to request us to recover them, except as otherwise provided by laws and regulations and relevant national standards.
Each business function requires some basic personal information to be completed. You can withdraw/revoke your authorization and consent at any time through the methods in 5.1. After withdrawal of consent, we will stop using it for the corresponding processing purposes, and related business functions may no longer be available. You can change the scope of authorization and consent by changing device function settings, changing product service setting options, or contacting customer service. If you have other requirements for withdrawing consent that cannot be realized, you can change the scope of authorization and consent by sending a notice through the contact information specified in this privacy policy.
After you withdraw your consent, we will no longer process the corresponding personal information. However, your decision to withdraw consent will not affect the personal information processing previously carried out based on your authorization. In particular, if you do not want to receive commercial promotional information sent by us, you can reply to cancel the push through the unsubscribe method clearly stated in the promotional email or text message, or contact us.
In certain business functions, we may make decisions based solely on non-manual automated decision-making mechanisms including information systems and algorithms. Such decisions may significantly affect your legitimate rights and interests. You have the right to request an explanation from us through the contact information specified in this privacy policy and have the right to refuse decisions made solely through automated decision-making. We will provide appropriate remedies to protect your legitimate rights, such as explaining the automated decision-making logic and its impact on you, or introducing manual review to verify the correctness of automated decision-making results.
After a user (limited to natural persons) dies, their close relatives may exercise the rights to access, correct, and delete the deceased user’s relevant personal information through the contact information agreed in this policy for their own legitimate and proper interests, except where the deceased user had other arrangements during their lifetime. You understand and confirm that in order to fully protect the personal information rights of deceased users, close relatives of deceased users applying to exercise the rights under this article need to submit the deceased user’s identity documents, death certificate, applicant’s identity documents, proof of kinship between the applicant and the deceased user according to our designated process or customer service instructions, and provide the type and purpose of the rights to be exercised. You can further obtain more information about the process and conditions for protecting personal information of deceased users through the contact information agreed in this policy.
For security purposes, you may need to provide a written request or prove your identity in other ways. We may first require you to verify your identity before processing your request. We will respond within fifteen working days or the time limit required by applicable laws and regulations. If you are not satisfied, you can also file a complaint through the contact information specified in this privacy policy. For your reasonable requests, we will not charge fees in principle, but for requests that are repeatedly made multiple times or exceed reasonable limits, we will charge certain cost fees as appropriate. For requests that are unreasonably repetitive, require excessive technical means (for example, requiring the development of new systems or fundamentally changing current practices), bring risks to the legitimate rights and interests of others, or are highly impractical (for example, involving information stored on backup tapes), we may refuse.
In the following circumstances, according to legal and regulatory requirements, we will be unable to respond to your request:
(1) Related to the personal information controller’s fulfillment of obligations stipulated by laws and regulations;
(2) Directly related to national security and national defense security;
(3) Directly related to public safety, public health, and major public interests;
(4) Directly related to criminal investigation, prosecution, trial and judgment enforcement;
(5) The personal information controller has sufficient evidence that the personal information subject has subjective malice or abuse of rights;
(6) For the purpose of protecting the life, property and other major legitimate rights and interests of the personal information subject or other individuals but it is difficult to obtain consent from the person;
(7) Responding to your request will cause serious damage to the legitimate rights and interests of the personal information subject or other individuals or organizations;
(8) Involving business secrets.
6.1 Our products, websites and services are only for adults who are at least 18 years old and have full civil capacity. We will not actively collect personal information directly from minors. If there is evidence that minors have registered and used our products or services without obtaining guardian consent, we will try to delete the relevant personal information as soon as possible.
6.2 If you are a guardian of a minor and have other questions about the personal information of the minor under your guardianship, please contact us through the contact information published in this privacy policy.
7.1 In order to provide you with better services, Bomi AI and related services will be updated and changed from time to time. We will revise this privacy policy in a timely manner. These revisions constitute part of this privacy policy and have the same effect as this privacy policy. Without your explicit consent, we will not reduce the rights you should enjoy under the currently effective privacy policy.
7.2 After this privacy policy is updated, we will issue an updated version in the “Bomi AI” software and remind you through system announcements, notifications or other methods that Bomi deems appropriate. When using the “Bomi AI” software and related services, you should check and understand the modified content in a timely manner so that you can understand the latest version of this privacy policy in time.
7.3 We will also archive old versions of this policy for your reference.
7.4 The conclusion, execution, interpretation and dispute resolution of this policy shall be governed by the laws of the People’s Republic of China (excluding Hong Kong, Macao and Taiwan), excluding the application of conflict rules.
7.5 If any provision in this policy is wholly or partially invalid or unenforceable for any reason, or violates any applicable law, that provision shall be deemed deleted. However, the remaining provisions of this policy shall remain valid and binding.
If you have any questions, opinions, suggestions or complaints about our privacy policy and the processing of your personal information, please send your questions to (xin.li@fanyou-online.com). We will generally respond to your request within 15 working days after receiving your request and verifying your identity or within the time limit required by applicable laws and regulations. If you are not satisfied with our response, especially if our personal information processing behavior has harmed your legitimate rights and interests, and consultation cannot reach an agreement, you can also file a lawsuit with a court with jurisdiction at the defendant’s domicile to seek a solution.
| Appendix 1 Details of SDKs and APIs Authorized by Bomi** Company** |
||
|---|---|---|
| SDK Name | Purpose | Permission Application |
| Alipay SDK | Provide Alipay payment service | User Alipay payment<br>Official website: https://b.alipay.com/index2.htm |
| Volcano Engine - Doubao Large Model | AI Poster | AI Poster<br>Official website: https://www.volcengine.com/product/doubao |
| Volcano Engine - Doubao Large Model | Video Generation | Video Generation<br>Official website: https://www.volcengine.com/product/doubao |