Privacy Policy

Last updated: June 1, 2026

Welcome to Fantasia!

We (MINDZEN PTE.LTD., “we,” “us,” or “our”) are committed to protecting your privacy. This Privacy Policy describes how we collect, store, use, and share your information through our mobile apps (Fantasia for Android and Fantasia for iOS), our website, and related services (collectively, the "Services").

We care about the protection and confidentiality of your information. When you use the Apps, you may provide information during your conversations with your Fantasia AI companion. We process this information only as described in this Privacy Policy, such as to allow you to have individualized and safe conversations and interactions with your AI companion and to allow your AI companion to learn from your interactions to improve your conversations. We may also use information about your visit to our Website to promote our Services, but we will never use or disclose the content of your Fantasia conversations for marketing or advertising purposes.

Any terms we use in this Policy without defining them have the definitions given to them in our Terms of Service. If you have any questions, please contact us at support@fantachat.ai.

1. What information we collect

A. Information you provide

Through your use of the Services, you may provide us with the following information:

• Account information: Data provided when you create an account (e.g., email address, password).
• Profile information: Information you choose to provide, such as your name, gender, and preferences.
• Messages and content: The content of your conversations with your AI companion, including text, photos, videos, and voice messages. This includes sensitive information you may choose to share. By providing this sensitive information, you consent to us processing it solely to provide and personalize the Services.
• Payment Information: When you make a purchase, our third-party payment processors (e.g., Stripe, Apple, Google) collect your payment details. We receive a record of the transaction but do not store your full payment card information.

B. Information we collect automatically

We automatically log the following information about you, your computer or mobile device, your network, and your interactions over time with our Services and our communications:

• Device and network data: Information about the device you use (e.g., OS version, device model, unique device identifiers, IP address, browser type, general location based on IP).
• Usage data: Information about how you interact with our Services (e.g., features you use, time spent, pages visited, clicks).
• Cookies and Similar Technologies: We use cookies, web beacons, and local storage to collect this information. You can manage your preferences via our Cookie Policy.

2. How we use your information & our legal basis

We use your information for the following purposes and rely on the following legal bases under the GDPR:

Purpose of Processing	Legal basis
To provide, operate, and maintain the Services (e.g., facilitating your conversations).	Performance of a Contract
To personalize your experience and allow your AI companion to learn from your interactions.	Legitimate Interest (to improve our service) & Consent (for sensitive data)
To process your transactions and manage your subscriptions.	Performance of a Contract
To communicate with you (e.g., send service-related announcements).	Performance of a Contract & Legitimate Interest
To send marketing and promotional communications (where you have opted-in).	Consent
To analyze and improve our Services, develop new features, and for internal research.	Legitimate Interest (to improve our products and services)
To prevent fraud, protect the security of our Services, and enforce our Terms of Service.	Legitimate Interest & Legal Obligation

3. How we share your information

We only share your information in the following limited circumstances:

• Service Providers: We share information with vendors who provide services on our behalf (e.g., cloud hosting, customer support, analytics, payment processing). These partners are bound by strict data protection obligations.
• Advertising Partners: We may share limited, non-conversational data (e.g., device ID, browser type, general analytics about website visits) with advertising partners for targeted advertising. We never share the content of your conversations for marketing purposes.
• Legal Requirements: We may disclose information if required by law, such as to comply with a subpoena or similar legal process, or to protect the rights, property, or safety of Fantasia, our users, or others.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that deal.
• Analytics and Product Improvement: We use third-party analytics tools to understand how users interact with our Services and to improve user experience. These tools may collect the following information:

• App interaction data (such as taps, swipes, and screen navigation patterns)

• Device identifiers (anonymous, auto-generated IDs)

• App performance data (such as crash reports and load times)

These analytics tools are configured to automatically mask sensitive content (such as text inputs, passwords, and personal information) on your device before any data is transmitted. We do not collect the content of your conversations, form inputs, or any personally identifiable information through these tools.

4. International data transfers

Our services are operated in Singapore. If you access Fantasia from outside Singapore, your information may be transferred to and processed in Singapore, where privacy laws may differ from your jurisdiction.

5. How we secure your information

We use a variety of industry-standard security technologies and procedures to help protect your data from unauthorized access, use, or disclosure. We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (SSL/TLS) and at rest, strict access controls, and secure server infrastructure. However, no method of transmission over the Internet or electronic storage is 100% secure. We will notify you and relevant authorities of a data breach where required by law.

6. Data retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained for the life of your account. You can delete your account in your settings.
• Conversation Data: Deleted upon account deletion.
• Marketing Data: Retained until you withdraw your consent or opt-out.
• Transactional Data: Retained for as long as required for financial reporting and legal obligations (typically 7 years).
• Analytics Data: Analytics session data is retained for up to 12 months and is automatically deleted thereafter. You may request earlier deletion by contacting us.

7. Your rights and choices (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the following rights regarding your personal data:

Access & Portability: The right to access and receive a copy of your data in a portable, machine-readable, readily usable format. Please note that your right to access certain types of personal information may be limited in specific circumstances. This includes, but is not limited to:

• (i) chat messages and other user-generated content, the disclosure of which could adversely affect the rights and freedoms of other users;

• (ii) information that we cannot verify as belonging to you through our standard authentication processes;

• (iii) information that is integral to our internal operations, such as data used solely for fraud detection or system security; and

• (iv) information we are legally obligated to retain or restrict from disclosure.

We will evaluate all requests on a case-by-case basis in accordance with applicable data protection laws. If we are unable to fulfill your request, we will provide you with an explanation, unless legally prohibited.

Rectification: The right to correct inaccurate or incomplete data.

Erasure ("Right to be Forgotten"): The right to have your data deleted.

Restriction of Processing: The right to request we temporarily stop processing your data.

Object to Processing: The right to object to processing based on legitimate interests.

Withdraw Consent: The right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You can exercise these rights by contacting us at privacy@fantasia.ai. We will respond to all requests within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Use of Fantasia by minors

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will take steps to delete such information and terminate the account.

9. Changes to this policy

We may update this policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date. Your continued use of the Services after any change signifies your acceptance of the updated policy.

10. Contact us

If you have any questions about this Privacy Policy, please contact us at:

Email: support@fantachat.ai

Data Protection Officer (DPO): dpo@fantasia.ai