Privacy Policy
Brand: 泊泊伴生 / Wanban
Effective date: July 12, 2026
Last updated: July 12, 2026
Data Controller: Bobobans (Shanghai) Artificial Intelligence Technology Co., Ltd.
泊泊伴生（上海）人工智能技术有限公司
Registered address:
Building 1-2, No. 4, 1628 Lizheng Road, Lingang New Area,
China (Shanghai) Pilot Free Trade Zone, Shanghai, PRC
中国（上海）自由贸易试验区临港新片区丽正路1628号4幢1-2层
Website: www.bobobans.com
Contact: privacy@bobobans.com
1. Introduction
Welcome to Wanban (玩伴), operated under the 泊泊伴生 brand by Bobobans (Shanghai) Artificial Intelligence Technology Co., Ltd. (“we”, “us”, “Company”).
Wanban is a social platform that helps users discover, publish, and join real-world activity invitations, share moments, and communicate through private messages. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and your rights.
By creating an account or using our Services, you agree to this Privacy Policy and our Terms of Service, Community Guidelines, and Safety Tips.
2. Scope
This Policy applies to the Wanban mobile application, website at www.bobobans.com, and related services we operate under the 泊泊伴生 / Wanban brand.
3. Information We Collect
3.1 Information you provide
- Account data: email address, password (stored hashed), display name, avatar, bio, birth year, preferred language
- Authentication: if you use Apple or Google Sign-In, we receive tokens and profile identifiers from those providers
- Invitations: title, description, time, location/address, participant limits
- Applications: messages when applying to join an invitation
- Moments & comments: text, photos, categories, optional location labels
- Private messages: content of conversations between users
- Social actions: follow, block, and report submissions
- Trust signals: attendance records and attendance rate statistics
- Support: information you send when contacting us
3.2 Information collected automatically
- Device type, operating system, app version, language settings
- IP address and approximate region (for security and fraud prevention)
- Push notification tokens
- Usage logs (features used, timestamps, crash diagnostics)
- Approximate or precise location only if you grant permission for location-based features
3.3 Information from others
- Reports from other users about your content or behavior
- Attendance markings from invitation hosts after events
4. How We Use Information
We use personal data to:
- Create and manage your account and authenticate you
- Provide core features: invitations, applications, moments, messaging, profiles, and attendance rate
- Send notifications about applications, messages, invitations, and account activity
- Enforce our Community Guidelines, investigate reports, and protect user safety
- Moderate content (including automated and human review)
- Comply with legal obligations and respond to lawful requests
- Improve, maintain, and secure our Services
We do not sell your personal information. We do not use your data for cross-context behavioral advertising.
5. Legal Bases (EEA/UK Users)
- Contract: to provide the Services you request
- Legitimate interests: safety, fraud prevention, service improvement
- Consent: where required (e.g., optional marketing, certain analytics if enabled)
- Legal obligation: compliance with applicable law
6. How We Share Information
6.1 With other users
Your profile, public moments, invitations, attendance rate, and other content you choose to publish are visible to other users according to product design. Private messages are visible only to participants in the conversation.
6.2 With service providers
We use trusted processors for cloud hosting, database storage, image hosting, push notifications, email delivery, content moderation, and security. They may process data only on our instructions.
6.3 For legal and safety reasons
We may disclose information if required by law, to protect users, to investigate fraud or abuse, or to protect our rights.
7. International Transfers
We are based in China. Your data may be processed in the People’s Republic of China, the United States, or other countries where our service providers operate. Where required, we implement appropriate safeguards such as Standard Contractual Clauses for transfers from the EEA/UK.
7.1 U.S. Users — Processing in China
If you are located in the United States, please note that we and some service providers may process your personal information in the People’s Republic of China. Laws in China may differ from U.S. federal or state privacy laws. By creating an account and using the Services, you acknowledge this cross-border transfer. Where required by law, we will obtain your consent before transferring sensitive personal information.
You may contact privacy@bobobans.com with questions about international transfers or to request additional information about safeguards.
8. Retention
- Account data: until you delete your account, plus up to 30 days for backup deletion
- Messages and content: until deleted or account closure, subject to safety/legal holds
- Reports: up to 2 years for trust and safety records
- Server logs: up to 90 days
9. Your Rights and Choices
In the app Settings, you can:
- Access and update your profile
- Export your data
- Delete your account
- Block users and submit reports
Depending on your location, you may have additional rights under GDPR, UK GDPR, CCPA/CPRA, or other laws—including access, correction, deletion, portability, restriction, objection, and withdrawal of consent.
Contact privacy@bobobans.com. We respond within 45 days for California requests (extendable by 45 days where permitted) and within 30 days for other requests where applicable.
9A. California Notice at Collection
This section applies to California residents and satisfies notice requirements under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”).
| Category | Examples we collect | Purpose | Retention |
|---|---|---|---|
| Identifiers | Email, display name, account ID, device ID, IP address | Account, security, fraud prevention | Until account deletion + 30 days |
| Customer records | Profile, bio, birth year, language | Provide core features | Until account deletion + 30 days |
| Internet / network activity | Usage logs, feature interactions, crash data | Operate and improve the Service | Up to 90 days (logs) |
| Geolocation data | Approximate or precise location (with permission) | Location-based invitations | While account active |
| Audio, electronic, visual, or similar information | Photos, avatars, moment images | Profiles and user content | Until deleted or account closure |
| Inferences | Attendance rate, trust/safety signals | Platform integrity and safety | While account active; reports up to 2 years |
| Sensitive personal information | Precise geolocation; contents of private messages | Core messaging and location features only | Until deleted or account closure |
We collect the categories above directly from you, automatically from your device, or from other users (e.g., reports, attendance markings). We do not sell or share personal information for cross-context behavioral advertising. See Section 9B.
9B. Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, disclose, and retain
- Access personal information we hold about you
- Delete personal information, subject to legal exceptions
- Correct inaccurate personal information
- Portability — receive a copy in a portable format
- Opt out of the sale or sharing of personal information (we do not sell or share for cross-context behavioral advertising)
- Limit use and disclosure of sensitive personal information to purposes permitted by CPRA
- Non-discrimination for exercising your privacy rights
How to submit a request:
- Email privacy@bobobans.com with subject line “California Privacy Request”
- Use in-app Settings → Export my data or Delete account
- Authorized agents may submit requests with written proof of authorization
We will verify your identity before fulfilling a request. We do not charge a fee unless a request is excessive, repetitive, or manifestly unfounded.
Do Not Sell or Share My Personal Information: We do not sell personal information and do not share it for cross-context behavioral advertising. If our practices change, we will update this Policy and provide a clear opt-out mechanism at www.bobobans.com/privacy#do-not-sell.
Limit Use of My Sensitive Personal Information: We use sensitive personal information (such as precise geolocation and private message content) only as necessary to provide the Services you request, for security, and as permitted by CPRA. To limit other uses, contact privacy@bobobans.com.
9C. Other U.S. State Privacy Rights
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws may have rights similar to those in Section 9B, including access, deletion, correction, portability, and opt-out of targeted advertising, sale, or profiling in furtherance of decisions producing legal or similarly significant effects.
We do not engage in targeted advertising or profiling producing legal or similarly significant effects. To exercise applicable rights, contact privacy@bobobans.com.
If we deny your request, you may appeal by emailing privacy@bobobans.com with subject line “Privacy Appeal” within 30 days of our response.
9D. Service Providers
We share personal information with the following categories of service providers who process data on our behalf under contractual obligations:
- Cloud infrastructure and database hosting — storage and compute
- Image and media hosting — avatars, moments, and uploaded photos
- Push notification delivery — Apple Push Notification service, Firebase Cloud Messaging, or similar
- Email delivery — account, support, and policy notices
- Authentication providers — Apple Sign-In, Google Sign-In (if you choose those methods)
- Content moderation and trust & safety tools — automated and human review
- Crash and performance monitoring — diagnostics and stability
We may update specific vendors from time to time. A current list is available on request at privacy@bobobans.com.
9E. Metrics and Disclosures (California)
California law requires certain businesses to publish metrics about privacy requests. As of the effective date above, we will publish annual metrics on this page once we receive a meaningful volume of requests. Initial metrics:
- Requests to know/access received: 0
- Requests to delete received: 0
- Requests to correct received: 0
- Requests to opt out of sale/sharing received: 0
- Median response time: N/A (no requests received)
10. Children
Wanban is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided data, contact us and we will delete it.
11. Security
We use HTTPS/TLS, password hashing, access controls, and monitoring. No system is 100% secure. Report concerns to privacy@bobobans.com.
12. Offline Meetups — Important
Wanban facilitates online connections only. We do not conduct criminal background checks on users. You are solely responsible for your safety when meeting others in person. Read our Safety Tips before meeting offline.
13. Changes
We may update this Policy. Material changes will be notified in-app or by email. Continued use after the effective date constitutes acceptance.
14. Contact Us
Bobobans (Shanghai) Artificial Intelligence Technology Co., Ltd.
泊泊伴生（上海）人工智能技术有限公司
Building 1-2, No. 4, 1628 Lizheng Road, Lingang New Area,
China (Shanghai) Pilot Free Trade Zone, Shanghai, PRC
中国（上海）自由贸易试验区临港新片区丽正路1628号4幢1-2层
Email: privacy@bobobans.com
Support: support@bobobans.com
Legal / DMCA: legal@bobobans.com