Privacy Policy
1. Introduction
Welcome to Wanerban, operated under the Bobobans brand by Bobobans (Shanghai) Artificial Intelligence Technology Co., Ltd. (“we”, “us”, “Company”).
Wanerban is a social platform that helps users discover, publish, and join real-world activity invitations, share moments, and communicate through private messages. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and your rights.
This Policy describes our data practices. Your use of the Services is governed by our Terms of Service and Community Guidelines. Where consent is legally required, we request it separately.
2. Scope
This Policy applies to the Wanerban mobile application, website at www.wanerban.com, and related services we operate under the Bobobans / Wanerban brand.
3. Information We Collect
3.1 Information you provide
- Account data: email address, password (stored hashed), display name, avatar, bio, birth year, preferred language
- Authentication: if you use Apple or Google Sign-In, we receive tokens and profile identifiers from those providers
- Invitations: title, description, time, location/address, participant limits
- Applications: messages when applying to join an invitation
- Moments & comments: text, photos, video, audio, categories, and optional location labels or coordinates
- Private messages: content of conversations between users
- Social actions: follow, block, and report submissions
- Trust signals: attendance records and attendance rate statistics
- Support: information you send when contacting us
3.2 Information collected automatically
- Device type, operating system, app version, language settings
- IP address and approximate region (for security and fraud prevention)
- Push notification tokens
- Usage logs (features used, timestamps, crash diagnostics)
- Approximate or precise location only if you grant permission for location-based features
3.3 Information from others
- Reports from other users about your content or behavior
- Attendance markings from invitation hosts after events
4. How We Use Information
We use personal data to:
- Create and manage your account and authenticate you
- Provide core features: invitations, applications, moments, messaging, profiles, and attendance rate
- Send notifications about applications, messages, invitations, and account activity
- Enforce our Community Guidelines, investigate reports, and protect user safety
- Moderate content (including automated and human review)
- Comply with legal obligations and respond to lawful requests
- Improve, maintain, and secure our Services
We do not sell your personal information. We do not use your data for cross-context behavioral advertising.
5. Legal Bases (EEA/UK Users)
- Contract: to provide the Services you request
- Legitimate interests: safety, fraud prevention, service improvement
- Consent: where required (e.g., optional marketing, certain analytics if enabled)
- Legal obligation: compliance with applicable law
6. How We Share Information
6.1 With other users
Your profile, public moments, invitations, attendance rate, and other content you choose to publish are visible to other users according to product design. Location attached to public content may reveal where an activity occurs; do not publish a home address or another person's location without permission. Private messages are visible to participants and may also be processed when necessary for delivery, safety review, abuse reports, security, legal compliance, or valid legal process.
6.2 With service providers
We use trusted processors for cloud hosting, database storage, image hosting, push notifications, email delivery, content moderation, and security. They may process data only on our instructions.
6.3 For legal and safety reasons
We may disclose information if required by law, to protect users, to investigate fraud or abuse, or to protect our rights. This includes responding to valid U.S. legal process (warrants, subpoenas, court orders) and making voluntary disclosures when we believe in good faith that disclosure is necessary to prevent imminent bodily harm or report child sexual exploitation.
6.4 Child sexual exploitation reporting
If we obtain actual knowledge of child sexual abuse material on the Services, we will report it to the National Center for Missing & Exploited Children (NCMEC) CyberTipline as required by U.S. law (18 U.S.C. § 2258A) and may notify law enforcement. Related account data may be preserved as required.
7. International Transfers
We are based in China. Your data may be processed in the People’s Republic of China, the United States, or other countries where our service providers operate. Where required, we implement appropriate safeguards such as Standard Contractual Clauses for transfers from the EEA/UK.
7.1 U.S. Users — Processing in China
If you are located in the United States, please note that we and some service providers may process your personal information in the People’s Republic of China. Laws in China may differ from U.S. federal or state privacy laws. By creating an account and using the Services, you acknowledge this cross-border transfer. Where required by law, we will obtain your consent before transferring sensitive personal information.
You may contact privacy@bobobans.com with questions about international transfers or to request additional information about safeguards.
8. Retention and Deletion
- Account data: while your account is active, then deleted or de-identified through our account-deletion process
- Messages and user content: while needed to provide the Service, then deleted or de-identified, subject to safety, fraud, dispute, legal, and backup holds
- Reports: generally up to 2 years for trust, safety, dispute, and legal records
- Server logs: generally up to 90 days unless a longer period is required for an active security or legal matter
For the deletion process and data that may be retained, visit Account Deletion. When retention is required, we restrict the retained information from ordinary product use and keep it only for the applicable purpose. Backup copies are removed on the normal backup-rotation schedule.
9. Your Rights and Choices
In the app Settings, you can:
- Access and update your profile
- Export your data
- Initiate deletion of your account and associated data
- Block users and submit reports
Depending on your location, you may have additional rights under GDPR, UK GDPR, CCPA/CPRA, or other laws—including access, correction, deletion, portability, restriction, objection, and withdrawal of consent.
Contact privacy@bobobans.com. We respond within 45 days for California requests (extendable by 45 days where permitted) and within 30 days for other requests where applicable.
9A. California Notice at Collection
This section supplements our disclosures for California residents. CCPA/CPRA rights apply only when the law applies to the Company and the relevant information.
| Category | Examples we collect | Purpose | Retention |
|---|---|---|---|
| Identifiers | Email, display name, account ID, device ID, IP address | Account, security, fraud prevention | While active; then deleted or de-identified, subject to limited holds |
| Customer records | Profile, bio, birth year, language | Provide core features | While active; then deleted or de-identified, subject to limited holds |
| Internet / network activity | Usage logs, feature interactions, crash data | Operate and improve the Service | Up to 90 days (logs) |
| Geolocation data | Approximate or precise location (with permission) | Nearby discovery and location-based invitations | While needed for the feature or content; then deleted or de-identified |
| Audio, electronic, visual, or similar information | Photos, avatars, video, and voice recordings | Profiles and user content | Until content or account deletion, subject to limited holds |
| Inferences | Attendance rate, trust/safety signals | Platform integrity and safety | While account active; reports up to 2 years |
| Sensitive personal information | Precise geolocation; contents of private messages | Core messaging and location features only | Until deleted or account closure |
We collect the categories above directly from you, automatically from your device, or from other users (e.g., reports, attendance markings). We do not sell or share personal information for cross-context behavioral advertising. See Section 9B.
9B. Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, disclose, and retain
- Access personal information we hold about you
- Delete personal information, subject to legal exceptions
- Correct inaccurate personal information
- Portability — receive a copy in a portable format
- Opt out of the sale or sharing of personal information (we do not sell or share for cross-context behavioral advertising)
- Limit use and disclosure of sensitive personal information to purposes permitted by CPRA
- Non-discrimination for exercising your privacy rights
How to submit a request:
- Email privacy@bobobans.com with subject line “California Privacy Request”
- Use in-app Settings → Export my data or Delete account
- Authorized agents may submit requests with written proof of authorization
We will verify your identity before fulfilling a request. We do not charge a fee unless a request is excessive, repetitive, or manifestly unfounded.
Do Not Sell or Share My Personal Information: We do not sell personal information and do not share it for cross-context behavioral advertising. If our practices change, we will update this Policy and provide a clear opt-out mechanism at www.wanerban.com/privacy#do-not-sell.
Limit Use of My Sensitive Personal Information: We use sensitive personal information (such as precise geolocation and private message content) only as necessary to provide the Services you request, for security, and as permitted by CPRA. To limit other uses, contact privacy@bobobans.com.
9C. Other U.S. State Privacy Rights
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws may have rights similar to those in Section 9B, including access, deletion, correction, portability, and opt-out of targeted advertising, sale, or profiling in furtherance of decisions producing legal or similarly significant effects.
We do not engage in targeted advertising or profiling producing legal or similarly significant effects. To exercise applicable rights, contact privacy@bobobans.com.
If we deny your request, you may appeal by emailing privacy@bobobans.com with subject line “Privacy Appeal” within 30 days of our response.
9D. Service Providers
We share personal information with the following categories of service providers who process data on our behalf under contractual obligations:
- Cloud infrastructure and database hosting — storage and compute
- Image and media hosting — avatars, moments, and uploaded photos
- Push notification delivery — Apple Push Notification service, Firebase Cloud Messaging, or similar
- Email delivery — account, support, and policy notices
- Authentication providers — Apple Sign-In, Google Sign-In (if you choose those methods)
- Content moderation and trust & safety tools — automated and human review
- Crash and performance monitoring — diagnostics and stability
We may update specific vendors from time to time. A current list is available on request at privacy@bobobans.com.
9E. U.S. State-Law Applicability
State privacy rights and response periods vary and may depend on statutory thresholds and exemptions. We will honor requests required by applicable law and may choose to honor a request more broadly. If we deny a request, we will provide the reason and an appeal method where required.
10. Children
United States: Wanerban is intended only for users aged 18 and older. We do not knowingly allow U.S. users under 18 to create accounts.
If the Service is offered in another region, the minimum age stated in the applicable Terms and required by local law will apply.
If you believe a user below the applicable minimum age has provided data, contact privacy@bobobans.com and we will delete the account and related data as required by law.
We prohibit grooming, child sexual exploitation, and CSAM. Confirmed CSAM is reported to NCMEC as described in Section 6.4.
11. Security
We use HTTPS/TLS, password hashing, access controls, and monitoring. No system is 100% secure. Report concerns to privacy@bobobans.com.
12. Offline Meetups — Important
Wanerban facilitates online connections only. We do not conduct criminal background checks on users. You are solely responsible for your safety when meeting others in person. Read our Safety Tips before meeting offline.
13. Changes
We may update this Policy. We will post the updated date and provide additional in-app or email notice for material changes. Where applicable law requires consent for a new processing purpose, we will request consent before that processing begins.
14. Contact Us
Bobobans (Shanghai) Artificial Intelligence Technology Co., Ltd.
Building 1-2, No. 4, 1628 Lizheng Road, Lingang New Area,
China (Shanghai) Pilot Free Trade Zone, Shanghai, PRC
Email: privacy@bobobans.com
Support: support@bobobans.com
Legal / DMCA: legal@bobobans.com