Privacy Policy

Last Updated: January 13, 2026

The service “Nekomimi.AI” (the “Service”) recognizes the importance of protecting users’ personal information and related data. This Privacy Policy explains the types of information collected by the Service, the purposes of use, the methods of management, and users’ rights regarding their information.

1. Information We Collect

The Service may collect the following information:

Account Information
Usernames, display names, avatar images, internal identifiers, and other information configured and used by users within the Service.
User-Provided Content and Usage Data
Text prompts, generated outputs, operation history, and information related to the use of the Service.
Authentication Information (Amazon Cognito User Pools)
The Service uses Amazon Cognito to manage user authentication. When users create or use an account, authentication-related information such as email addresses may be collected. Such information is used solely for authentication and account management purposes.
Device and Communication Information
IP addresses, device identifiers (such as UUIDs), access timestamps, and operation logs. This information is collected for service provision, security assurance, prevention of unauthorized use, and troubleshooting.

2. Purposes of Use

The collected information is used for the following purposes:

Providing, maintaining, and improving the Service
User authentication and account management
Detection and prevention of fraudulent or unauthorized activities
Security enhancement and protection of servers and networks
Responding to violations of the Terms of Service
Compliance with applicable laws and cooperation with law enforcement authorities

3. Disclosure to Third Parties

The Service does not disclose users’ personal information to third parties except in the following circumstances:

When disclosure is required by law or regulations
When disclosure is necessary to protect the life, body, or property of individuals

4. Data Retention and Deletion

The Service retains collected information only for the period necessary to achieve the stated purposes of use.

If a user requests deletion or suspension of use of their personal information, the Service will respond appropriately in accordance with applicable laws and regulations. However, the Service may retain certain information to the minimum extent necessary in the following cases:

When retention is required by law
When retention is necessary for the investigation, prevention, or preservation of evidence related to fraudulent activities, criminal acts, or suspected misconduct
When retention is necessary for the exercise or defense of the Service’s legal rights or in connection with disputes

Any information retained under these circumstances will be handled with limited purposes and appropriate safeguards.

5. Data Management and Security Measures

The Service implements reasonable security measures, including encryption and access controls, to protect collected information and to prevent unauthorized access, loss, alteration, or leakage.

6. Use by Minors

The Service is not intended for children under the age of 12, and it does not knowingly collect personal information from children under 12. If it is discovered that personal information of a child under 12 has been collected, the Service will promptly take appropriate measures, including deletion.

7. Changes to This Privacy Policy

The Service may revise this Privacy Policy in response to changes in laws, regulations, or the content of the Service. The revised Privacy Policy will take effect when posted within the Service. If material changes are made, users will be notified in an appropriate manner.

8. Contact Information

For inquiries regarding this Privacy Policy, please contact us via this form.

GDPR / EEA Supplemental Notice