XORIGIN AI Privacy Policy

Updated: August 22, 2025

Effective: December 20, 2024

Operating Company: X-ORIGIN-AI INC

Welcome to the XORIGIN AI application (hereinafter referred to as the “App”) and related services, operated by X-ORIGIN-AI INC. This includes but is not limited to the devices supported by the App, such as the Yonbo robot and Yonbo camera (collectively referred to as “Devices”).

This Privacy Policy is intended to explain how we collect, use, store, protect, and share your personal information, as well as the rights you have regarding your information. Please read this policy carefully before using the App and Devices. By using the App or Devices, you acknowledge that you have understood and agreed to all terms of this Privacy Policy.

1. Introduction

Scope of Application: This policy applies to the collection and use of personal information when you interact with the App, Devices, and related services (including but not limited to account registration/login, device binding, feature usage, and information inquiries).
Core Purpose: We collect personal information in order to provide you with higher-quality, safer, and more personalized services, including device functionality, service optimization, and risk protection.
Control Over Information: You have the right to choose whether to provide certain information, manage usage permissions, and adjust authorizations at any time via “User Center → Settings” within the App.

2. Information We Collect

We only collect the minimum personal information necessary to deliver our services, as detailed below:

(1) Information You Provide Voluntarily

Account Registration and Login Information

When you register or log in with your mobile number or email address, we collect your mobile number/email and verification code (used for identity verification).

Parent and Child Basic Information

Parent Information: Name, gender, date of birth, occupation, and address (for account management and service customization).
Child Information: Child’s name, nickname, gender, date of birth, education stage, and relationship to you (for personalized services and child safety protection).

Image Information

Profile Photo: The avatar image you upload for your account.
Facial Recognition Photos: Collected only when you explicitly enable and consent, used to improve device features (e.g., wake-up recognition). You can disable this at any time via in-app settings. Photos are stored locally or on encrypted servers.
Photo Album Access: Accessed only with your authorization, used for uploading avatars or device-related images. We do not automatically read or upload album contents.

(2) Information Automatically Collected Through the App and Devices

Device and Service Usage Information

Device Binding Information: Bluetooth connection records, device model, device ID, binding status (for device management and feature compatibility).
Conversation Data: Daily conversations between the child and the robot, as well as conversation summaries (including number of conversations, mood recognition results, flagged risk content, and reminder records). This data is used to generate “Activity Log” and “Analysis Records.”
Feature Settings Information: The MBTI personality you set for the robot, conversation preferences (e.g., allergy reminders), volume, name, language, etc. (for personalized service delivery).

Location Information

Only when the Yonbo camera triggers an SOS call will we obtain the child’s real-time location via Baidu Maps, in order to send you alerts and location reminders. (Location services are provided by Baidu and are subject to the Baidu Privacy Policy.)

System and Log Information

Device network status, Wi-Fi connection records, App version, operation logs, and notification interaction records (for service stability and troubleshooting).

(3) Information Obtained from Third Parties

When you use the “Bind Member” feature to invite other users to share device access, we will collect the invitee’s account information (mobile number or email) solely to send the invitation notification. This information is not stored or used for other purposes.

(4) How We Collect and Use Your Information

When you use our products and/or services, we may need to collect and process your personal information. This information generally falls into two categories:
Basic Functionality:
To provide you with the essential features of our products and/or services, we may collect your personal and device information in accordance with the Cybersecurity Law of the People’s Republic of China. This includes, but is not limited to, IMEI, IMSI, device MAC address, app installation list, contacts, clipboard content, call records, camera, SMS, device serial number, Android ID, and sensor data (gyroscope, accelerometer, gravity sensor). Refusing to provide this information may prevent you from using our products and/or services properly, but it will not affect your ability to browse our website or client pages.
Compliance with Baidu Map Services:

Both we and users (if applicable) must comply with Baidu’s published agreements, including the Baidu Map Open Platform Service Terms (https://lbsyun.baidu.com/index.php?title=open/law) the Baidu Map Open Platform Commercial Authorization Service Agreement (https://lbsyun.baidu.com/index.php?title=open/law-commercial), and any other related agreements (including updated versions, collectively referred to as the “Platform Agreements”). In the event of any discrepancies, the Platform Agreements shall prevail.
If our use of Baidu services or users’ interactions with them involve the processing of personal information, we commit to following Baidu Map Open Platform Developer Privacy Compliance Self-Inspection Guidelines (https://lbsyun.baidu.com/index.php?title=inspectionguide) to ensure our privacy policy content and its presentation meet the required compliance standards.

3. How We Use Personal Information

We strictly use the collected personal information for the purposes outlined below. We will not use your information beyond these purposes without your consent:

Provide Core Services: Enable account login, device binding, Wi-Fi management, message notifications, and other essential functions.
Personalized Service Optimization: Improve the interaction between the robot and your child based on the MBTI personality settings and conversation preferences you configure.
Safety and Risk Protection: Identify risk-related content in conversations through Activity Log and send you reminder alerts. During SOS calls, provide location information via Baidu Maps to ensure child safety.
Service Analysis and Improvement: Generate daily summaries and MBTI personality test results based on conversation data, offering you parenting insights. Continuously improve app features and device performance based on user feedback.
Notifications and Activity Updates: Send you different types of notifications, including:

Invitation notifications (when you invite members)
System notifications (e.g., membership status, achievements, risk alerts)
Official notifications (e.g., robot upgrades, company announcements)
Call notifications (SOS alerts and location updates)
Activity notifications (new games, promotions, benefits)

You may adjust your notification preferences at any time under “Notification Settings.”

4. Membership Services and Fees

Membership Tiers and Benefits:
We provide three different membership tiers: Basic Member, Standard Member, and Premium Member. Each tier offers unique benefits. Details of these benefits are available in the App under “Membership Center.”
Free Upgrade Offer:
When you activate membership services for the first time, you will receive a special promotion. Until December 31, 2026, you will automatically enjoy the benefits of the second tier (Standard Member) for free, with no payment required. This free upgrade is intended to let you fully experience the enhanced membership benefits.
Renewal and Upgrades:

After the free upgrade period ends, you will need to renew your membership if you wish to continue enjoying the services. Renewal fees are based on your current tier and the applicable price.
If you want to upgrade to a higher tier (e.g., Premium Member) for more exclusive benefits, you can do so via “Membership Center → Premium Member.”
The upgrade cost will be calculated fairly, based on the remaining validity of your current membership and the price difference between tiers.
During renewal or upgrade, we will only collect the personal information necessary to process your request (e.g., payment information such as payment channel and transaction amount, and your membership account details). All such information will be strictly protected from unauthorized disclosure or misuse.

Payment and Information Security:

We use secure and reliable third-party payment channels for membership renewals and upgrades.
Sensitive payment details (such as bank card numbers and passwords) are encrypted and stored by the payment provider; we do not directly collect or store this information.
We only obtain the payment result and essential order information to confirm your payment status and provide the corresponding membership service.
We implement multiple security measures, including but not limited to encryption, access controls, and firewalls, to protect your personal information during the payment process and prevent unauthorized access or tampering.

5. Sharing and Disclosure of Personal Information

We promise not to sell or rent your personal information to any third party. We will only share your information under the following circumstances:

Essential Service Sharing:
To enable SOS location services, we share device location data with our partner, Baidu Maps. Baidu processes this information in accordance with its Privacy Policy and related agreements, and uses it solely for location-based services.
User-Authorized Sharing:
When you invite other users via the “Bind Member” feature, we disclose your invitation details and basic device information (e.g., robot name) to the invitee so they can accept the invitation.
Legal Compliance and Disclosure:
We may disclose necessary personal information when required by applicable laws and regulations, or in response to valid requests from judicial or regulatory authorities, in order to fulfill legal obligations.
Third-Party SDK Directory:

Tencent Bugly SDK

Partner: Shenzhen Tencent Computer System Co., Ltd.
Sharing Type: Embedded SDK
Shared Information: Device MAC address, device identifier (Android: IMEI, Android ID, device serial number, IMSI, OPENUDID, GUID; iOS: IDFV, IDFA), IP address, application list, log information (including third-party developer custom logs, Logcat logs, and app crash stack information), network information, system name, system version, and country code.
Purpose of Use: Issue tracking services
Usage Scenario: Used when the user is using the app
Data Collection Method: Collected natively by the SDK
Privacy Policy: https://privacy.qq.com/policy/tencent-privacypolicy

WeChat OpenSDK

Partner: Tencent Technology (Shenzhen) Co., Ltd.
Purpose: Provides third-party login, sharing, and payment services via WeChat.
Data Collection Method: Embedded third-party SDK, which collects and transmits personal information.
Scope of Personal Information Collection: Device MAC Address, Unique Device Identifier, Location Information, Application List.
Privacy Policy: https://open.weixin.qq.com/cgi-bin/frame?t=news/protocol_developer_tmpl

Alipay SDK

Partner: Ant Financial Services Group (Alipay)
Purpose: For in-app payment processing via Alipay.
Data Collection Method: Embedded third-party SDK, which collects and transmits personal information and device information.
Scope of Personal Information Collection:
- System Operation Information, Network Status, iOS Advertising Identifier (IDFA), MAC Address, IMEI, Anonymous Device Identifier (OAID), IMSI, Application List, Base Station Information, Social Platform OpenID, Location Data.
Privacy Policy: https://render.alipay.com/p/c/k2cx0tg8

MSA Unified SDK

Partner: Mobile Security Alliance，MSA
Purpose: To retrieve unique device identifiers.
Data Collection Method: Embedded third-party SDK
Scope of Personal Information Collection: UDID, OAID, VAID, AAID.
Privacy Policy: http://msa-alliance.cn/col.jsp?id=120

Aliyun Log Service SDK

Partner: Aliyun Computing Ltd.
Data Collection Method: The app initializes the SDK, and the SDK uses its own logic to call system APIs to collect personal information.
Scope of Personal Information Collection: Running Process Information.
Privacy Policy: https://help.aliyun.com/document_detail/29056.html

Xiaomi Push SDK

Partner: Xiaomi Corporation
Partner Type: Message push service provider.
Purpose: Provides push notification service on Xiaomi devices.
Data Collection Method: Embedded third-party SDK, which collects and transmits personal information.
Scope of Personal Information Collection: Device MAC Address, Unique Device Identifier, Location Information, Application List.
Privacy Policy: https://dev.mi.com/console/doc/detail?pId=1698

Meizu Push SDK

Partner: Meizu Technology Co., Ltd.
Partner Type: Message push service provider.
Purpose: Provides push notification service on Meizu devices.
Data Collection Method: Embedded third-party SDK, which collects and transmits personal information.
Scope of Personal Information Collection: Device MAC Address, Unique Device Identifier, Location Information, Application List.
Privacy Policy: http://open-wiki.flyme.cn/index.php

OPPO Push SDK

Partner: Guangdong BBK Electronics Industries Ltd.
Partner Type: Message push service provider.
Purpose: Provides push notification service on OPPO devices.
Data Collection Method: Embedded third-party SDK, which collects and transmits personal information.
Scope of Personal Information Collection: Device MAC Address, Unique Device Identifier, Location Information, Application List.
Privacy Policy: https://open.oppomobile.com/wiki/doc#id=10194

Vivo Push SDK

Partner: Vivo Communication Technology Co., Ltd.
Partner Type: Message push service provider.
Purpose: Provides push notification service on Vivo devices.
Data Collection Method: Embedded third-party SDK, which collects and transmits personal information.
Scope of Personal Information Collection: Device MAC Address, Unique Device Identifier, Location Information, Application List.
Privacy Policy: https://dev.vivo.com.cn/documentCenter/doc/366#w1-08512613

Huawei Push Kit SDK

Partner: Huawei Technologies Co., Ltd.
Partner Type: Message push service provider.
Purpose: Provides push notification service on Huawei and Honor devices.
Data Collection Method: Embedded third-party SDK, which collects and transmits personal information.
Information Collected: Device MAC Address, Unique Device Identifier, Location Information, Application List.
Privacy Policy: https://consumer.huawei.com/cn/privacy/privacy-policy

OkHttp Network Request SDK

Partner: Open Source
Purpose: Provides network request services.
Data Collection Method: Embedded third-party SDK
Scope of Personal Information Collection: IP Address.
Privacy Policy: Not provided.

SDK Abbreviation: com.commonlib.util

Scope of Personal Information Collection: Utilizes SD Card for data storage, clipboard contents, Android ID.
Privacy Policy: Not provided.

SDK Abbreviation: com.commonlib.BaseActivity

Scope of Personal Information Collection: Read system settings, obtain network status, access clipboard content.
Privacy Policy: Not provided.

SDK Abbreviation: com.commonlib.model

Scope of Personal Information Collection: Write data to SD card, read system settings, obtain device IMEI, obtain network status, access clipboard content, obtain Wi-Fi name.
Privacy Policy: Not provided.

SDK Abbreviation: AndroidSupportLibraryFragment (androidx.fragment)

Scope of Personal Information Collection: Write data to SD card, access clipboard content.
Privacy Policy: Not provided.

Aliyun Mobile Data Analytics SDK

Partner: Alibaba Cloud Computing Ltd.
Purpose: For crash log reporting and analysis.
Usage Scenario: Used when the user is using the app
Data Collection Method: The app initializes the SDK, and the SDK uses its own logic to call system APIs to collect data.
Scope of Personal Information Collection: Network information, device information including IMEI, Android system device identifiers (IMSI, IMEI, SIM card serial number, Android ID, MAC address), IP address.
Privacy Policy: https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202112071754_83380.html

Personal Information Collected

Device MAC Address: The MAC address of the device, used to determine the location of the mobile device.
Unique Device Identifier: Device identifiers such as IDFA (iOS), IMEI, OAID, Android ID, UUID (Android), etc.
Device IP Address: Mobile Internet connection protocol, confirming the network connection's operator service.
Device Information: Brand, model, OS version of the device.
Network Information: Current network environment (WIFI, 5G, 4G, 3G, 2G).
Carrier Information: Information about the telecom operator (e.g., China Mobile, China Unicom, China Telecom).
Application List: Detect if a Partnered Third-Party App is Installed or not (e.g., WeChat, QQ, Sina Weibo, Alipay, Tmall, Meituan, Ele.me, etc.).

6. Storage and Protection of Personal Information

Retention Period:
We store your personal information only for as long as necessary to achieve the purposes outlined in this policy. For example:

Account information is retained until you delete your account.
Conversation data and Activity Log are kept until you manually delete them or for 30 days after account deletion.
Location information collected for SOS calls is deleted after the alert is processed, and in no case retained longer than 7 days.

Storage Location:
All personal information is stored on servers located in mainland China, in compliance with data localization requirements.
Security Measures:
We implement technical and organizational measures to protect your information, including data encryption (for transmission and storage), access controls, and security audits to prevent unauthorized access, alteration, or loss. However, please note that all network transmissions carry inherent risks, and we cannot completely eliminate the possibility of information being compromised due to factors beyond our control.

7. Your Rights

You have the following rights regarding your personal information, which you can exercise through the “User Center – Settings” in the App or by contacting us:

Access and Correction: View your account information, personal information, and AI character settings, and correct any inaccurate information.
Deletion and Withdrawal of Consent: Delete conversation records in the Activity Log, disable facial recognition permissions, or unbind devices. We will promptly process your requests.
Notification Control: Enable or disable various notifications (e.g., risk alerts, event notifications) through “Notification Settings.”
Account Deletion: You may request account deletion via “Settings – Delete Account.” After deletion, we will remove your personal information, except where retention is required by law.
Complaints and Feedback: Submit questions or complaints through “My Feedback” or “Contact Us.” We will respond within 15 business days.

8. Protection of Minors’ Information

We place special emphasis on protecting children’s personal information:

Parental Consent: Before collecting information about children, parental consent is required. Collected information is used solely to provide services for children and ensure their safety.
Parental Access: Features such as the Activity Log and risk alerts are designed to help parents understand their child’s status. This information is shown only to parents and is not disclosed to third parties.
Parental Control: Parents can view or delete their child’s information at any time, or stop the collection and use of children’s information by deleting their account.

9. Third-Party Services

The location services in this App are provided by Baidu Maps. Baidu will process location information in accordance with its privacy policy. For details, please refer to the Baidu Maps Privacy Policy. We are not responsible for the privacy practices of third-party services and recommend that you review their policies carefully.

10. Updates to the Privacy Policy

We may update this Privacy Policy due to service adjustments or changes in laws and regulations. When updates occur, we will notify you through app pop-ups, announcements, or other means. Continued use of the services after such updates constitutes your acceptance of the revised policy. For significant changes, we will provide additional prompts to obtain your explicit confirmation.

11. Contact Us

If you have any questions or suggestions regarding this policy, you can contact us through the following channels:

In-App: “User Center - Settings - Contact Us”
Developer: X-ORIGIN-AI INC
Email: support@yonbo.ai

Thank you for trusting XORIGIN AI. We are committed to protecting the privacy and safety of you and your children.

XORIGIN AI Operations Team

August 22, 2025