Privacy Policy

Last updated: 2026-05-08
Operated by: Bilibala Shadowpaw Limited
Contact: info@bilishadowpaw.com | myyuna.bilishadowpaw.com

Our Commitment to Your Privacy

MyYuna is built on one core principle: your privacy matters.

We are Bilibala Shadowpaw Limited, a Hong Kong company. We operate the MyYuna AI companion platform through our AI character Yuna. We take our obligations under Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486) seriously.

This Privacy Policy explains in plain language how we collect, use, store, and protect your personal data. For the full legal details of what we collect and why, see our Personal Information Collection Statement (PICS).

What We Collect

When you sign up for MyYuna, we collect only what's needed to run your account:

Data	Why
Google ID	To let you sign in securely via Google
Email address	To communicate with you about your account
Date of birth	To confirm you are at least 18 years old
Gender (optional)	Optional — used only to tune Yuna's conversational tone; you may skip this
Chat history with Yuna	So Yuna can remember you and have natural conversations

We do NOT collect: your location, phone number, HKID number, or payment card details.

Important — third-party AI processing: To generate Yuna's replies, your active conversation content is transmitted to MiniMax (Singapore / China). Your account data (Google ID, email, DOB, gender, full chat history) is stored on Firebase servers in Hong Kong.

How We Use Your Data

Your data is used for one purpose: providing you with your AI companion experience.

Specifically:

Yuna reads your chat history to remember who you are, what you like, and what you've talked about
We use anonymised, aggregated data to understand how the service is used and improve it
We will never sell your data, use it for advertising, or share it with third parties for commercial purposes

Cookies

Our website uses cookies:

Essential cookies — Required for the site to work (session management, security). These cannot be disabled without impairing site functionality.
Analytics cookies — Firebase Analytics, anonymised with IP anonymisation enabled. You may opt out via your browser settings.

On your first visit, you'll see a cookie consent banner. You can accept or decline non-essential cookies.

For full cookie details, see PICS Section 7.

How Long We Keep Your Data

Account data is deleted within 14 business days of your deletion request
Chat history is deleted within 14 business days of your request — it cannot be recovered
Anonymised analytics are retained indefinitely (fully anonymised, not linked to you)
Backup data is purged within 90 days after account deletion

For technical details, see PICS Section 4.

Sharing Your Data

We do not sell, rent, or trade your personal data.

We may share your data only in these limited circumstances:

With Google Firebase (our backend provider) to operate the service — under strict data processing terms
If required by Hong Kong law, court order, or regulatory authority — only the minimum necessary data will be disclosed

Third-party service providers we use:

Google Firebase (Hong Kong) — authentication, database, storage, analytics, push notifications Privacy Policy
MiniMax (Singapore / China) — AI inference for Yuna's replies. Receives active conversation content. Privacy Policy

Data Security

We protect your data through:

✅ HTTPS encryption for all data in transit
✅ Password-protected database with access controls
✅ Only authorised personnel may access personal data
✅ Data never stored in publicly accessible locations

For technical specifics, see PICS Section 5.

Your Rights

You have the right to:

Access the personal data we hold about you (submit a Subject Access Request — see Contact Us below)
Correct any inaccurate data
Delete all your personal data at any time — see Contact Us below; we will process your request within 14 business days
Opt out of promotional communications at any time

For full legal rights details, see PICS Section 8.

Data Breach

If a data breach occurs that affects your personal data, we will notify you within 72 hours of discovering the breach. The notification will explain what happened, what data was affected, and what we are doing to fix it.

To report a suspected data breach: see Contact Us below.

For technical details, see PICS Section 4a.

Children's Privacy

MyYuna is not for people under 18. We do not knowingly collect data from anyone under 18. If we discover a minor has registered, we will delete their data immediately upon verification. If you are a parent and believe your child has registered without consent, contact us immediately.

Complaints

If you have a concern about how we handle your personal data:

Contact us first: See Contact Us below — we aim to respond within 14 business days
Hong Kong Privacy Commissioner: If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner for Personal Data (PCPD)

Office of the Privacy Commissioner for Personal Data

Website: www.pcpd.org.hk
Address: 12/F, 248 Queen's Road East, Wan Chai, Hong Kong
Phone: +852 2827 2827

For full details on complaint handling, see PICS Section 11.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or a prominent notice on the website before the changes take effect.

The date at the top of this page shows when this policy was last updated.

Your continued use of MyYuna after any update constitutes acceptance of the revised policy.

Contact Us

Bilibala Shadowpaw Limited Email: info@bilishadowpaw.com Website: myyuna.bilishadowpaw.com

For data rights requests, email us with "Data Rights Request" in the subject line.

This Privacy Policy is written in English. For legal details, refer to the Personal Information Collection Statement (PICS). In case of discrepancy, the English version shall prevail.