Last Updated: November 27, 2025
This Privacy Policy (the “Privacy Policy” or “Policy”) describes the types of information Alperen LTD and its affiliates (“Wollo,” “we,” “our,” or “us”) collect and process from and about you.
Except as described below, the Policy applies to all websites, mobile applications, and any other electronic/digital products or other services that are made available by Wollo and that link to this Policy, and our offline services (collectively, the “Services”).
Undefined capitalized terms used in this Policy have the meaning set forth in the Wollo Terms of Service.
For residents of the European Economic Area and the United Kingdom: please refer to our Regional Privacy Disclosures for additional details that may be relevant to you.
When you access or otherwise use our Services, we collect information from you. The types of information we collect depend on how you use our Services. Please note that we need certain types of information to provide the Services to you. If you do not provide us with such information, or if you ask us to delete that information, you may no longer be able to access or use certain Services. The information we collect includes data you directly provide to us, data we obtain automatically from your interactions with our Services, and data we obtain from other sources.
We collect information directly from you. For example, you provide us with information when you use the Services, communicate with us, register for an account, subscribe to our newsletters, participate in our community, engage with social features such as following other creators, liking content, or leaving comments, or participate in promotions. Information you provide directly to us may concern you and others and may include:
Information you provide directly to us might also include information that may be treated as sensitive under applicable laws, such as login credentials, personal communications received or sent using our Services, or other information about yourself that you choose to provide when using our Services (e.g., if you voluntarily post user content revealing your race, religion, or sexual orientation). Sensitive personal information is not required or necessary to use the Services – please do not include any sensitive personal information in your interactions with us or the Services.
We and our third-party providers, which include advertising and analytics providers and other service providers, use cookies, web beacons, and other tracking technologies to collect information about your use of the Services. Please note that the specific tracking technologies and third-party providers may vary depending on where you are located and whether you access the Services via our websites or mobile applications. For more information about these technologies, please refer to our Cookie Policy.
As described further in the Cookie Policy, we use these technologies to collect and analyze device, Internet, and other electronic network activity information including information about your computer or device (e.g., device type; browser type; ISP or operating system; IP address; device identifiers such as IDFA, Android ID, etc.; version of our Services you are using); information about how you use and interact with the Services (e.g., domain name; access time; referring or exit pages; page views; Service-related identifiers such as User ID, Character ID, Chat ID, Session ID, etc.; and actions taken within the Services including characters you interact with, content you like, comments you leave, and creators you follow); and geolocation data.
We may also collect information from other sources, such as when you are referred to us by another user. In this context, we may receive your name and contact details. We may also receive information from third-party platforms, for example, such as when you interact with our ads on other platforms like YouTube, TikTok, Instagram, or Reddit, or when you interact with our social media profiles on platforms like Facebook, Instagram, or Discord. Information we collect in this context includes information about how you interacted with our ads or the third-party platform; information about your device; demographic information (e.g., age, interests); and geolocation data.
We also collect information when you connect to your account using an account maintained by a third party, such as a social media account ("Third-Party Account"). The Services collect information about you from your Third-Party Accounts in accordance with your permissions. When you connect to us or log in through a Third-Party Account like Facebook or Google, we receive information from that third party identifying your account. Information we collect in this context includes third-party account details such as username or email address. We collect and store this information and use it to help you connect to the Services. Connecting your account to a Third-Party Account is completely optional, and you will have the opportunity to grant permission when you attempt to connect. You can revoke permission by logging into the Third-Party Account and disconnecting Wollo from there, and through the native applications on your mobile device. Please note that if you revoke permission for a Third-Party Account, we may retain the information we collected previously from the Third-Party Account provider (but the accounts will not be linked going forward).
We also collect information that is available on the Internet or from other publicly available sources to evaluate and improve our Services, including for model training and development.
We use information for the following purposes:
We combine information that we collect through the Services with information that we obtain from other sources. We may also aggregate or anonymize information collected through the Services. We use and disclose aggregated or anonymized data for a number of purposes, including without limitation for research and marketing purposes. To the extent we anonymize any data originally based on personal information so that it is no longer reasonably linkable to an individual or household, we maintain and use such data in de-identified form and will not attempt to re-identify the data (except for the purpose of confirming it is de-identified).
We disclose information in any of the following circumstances:
We offer you certain choices regarding the collection, use, and disclosure of your personal information.
Please note that certain information may be exempt from such requests under applicable law. For example, we may retain certain information for legal compliance and to secure our Services. We may need certain information in order to provide the Services to you; if you ask us to delete it, you may no longer be able to use the Services.
If you would like information regarding your rights or would like to exercise any rights you may have under applicable law, contact us at [email protected]. To protect your privacy and security, we take reasonable steps to verify your identity and requests before granting such requests. If we are unable to verify your identity, we may be unable to respond to your requests.
Depending on where you live, you may have specific rights or there may be certain information we need to make available to you. If you live in the European Economic Area or the United Kingdom, please refer to our Regional Privacy Disclosures for additional information that may be relevant to you.
The Services are not designed for minors under 13, and our Terms of Service prohibit use by anyone under 13 or under 16 if you are a resident of the European Economic Area or the United Kingdom.
We keep your information for the time necessary for the purposes for which it is processed or as otherwise described at the time the information is collected, unless a shorter retention period is required by law. The length of time for which we retain information depends on the purposes for which we collected and use it and your choices, after which time we may delete and/or aggregate it. We may also retain and use this information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
If a character you create has been made available to other users and has been interacted with by the community (for example, if other users have engaged with the character through conversations, likes, or follows), then we reserve the right to preserve that character's characteristics and to keep that character active on the Services, even if you otherwise delete your data and your account. We do this to avoid impacting the experience of other users and to maintain the integrity of the social platform. To ensure that we do not retain information about you when this occurs, please avoid submitting any such information as part of the character creation flow if you are creating a character that you plan to make available to others.
Similarly, if you have created public content, made comments, or engaged in social interactions that are visible to other users, we may retain certain elements of this activity to maintain the continuity and functionality of the platform for other users, even after you delete your account.
Wollo is based in Cyprus, and we process and store information in Cyprus and other locations. If you are accessing the Services from outside Cyprus, please be aware that your information may be transferred to, stored, and processed in Cyprus and other countries where our servers are located and our service providers operate. These countries may have data protection laws that are different from the laws of your country.
For users in the European Economic Area and United Kingdom, we ensure that appropriate safeguards are in place for the transfer of personal data in accordance with applicable data protection laws, including through the use of standard contractual clauses approved by the European Commission where required.
The Services may contain links to third-party websites or services. We are not responsible for the content or practices of those websites or services. The collection, use, and disclosure of your information by third parties will be subject to the privacy policies of the third-party websites or services, and not this Policy. We urge you to read the privacy and security policies of these third parties before providing information to them.
We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. However, no internet or electronic storage system is completely secure. We cannot guarantee the absolute security of your information.
We may update this Policy from time to time. We will indicate the date of the most recent update in this Policy. If we make a material change to the Policy, you will be provided with appropriate notice in accordance with legal requirements such as by email or prominent posting on our website or mobile application. By continuing to use the Services, you are confirming that you have read and understood the latest version of this Policy.
If you have any questions about our Privacy Policy or information practices, please email us at [email protected]. You can also write to us at:
Alperen LTD
[Your Cyprus Address]
Cyprus
Last Updated: November 27, 2025
While our Privacy Policy and the privacy representations made in that policy apply to all data subjects (unless otherwise specified), the Regional Privacy Disclosures made in this notice provide additional information for data subjects located in the jurisdictions specified below and are intended to supplement the Privacy Policy.
For residents of the United States, please refer to the U.S. State Privacy Notice below.
For data subjects located in the European Economic Area or the United Kingdom, please refer to the European Economic Area & United Kingdom Privacy Notice below.
Effective November 27, 2025
This U.S. State Privacy Notice ("Notice") provides additional information for residents of the United States. This Notice is intended to supplement our Privacy Policy to address state-specific transparency requirements and rights you may have under applicable state laws, depending on where you live.
Throughout our Privacy Policy, we discuss in detail the specific pieces of personal information and sensitive personal information we collect, the sources of that information, and how we disclose it. In the preceding 12 months, we disclosed or shared the categories of personal information described in more detail in Section 1 of the Privacy Policy for the business purposes described in Section 2 of the Privacy Policy.
Please note that laws in California and other states treat certain common disclosures of personal information to third parties as "sales" of information, even when no money changes hands. This may include personal information shared with third parties for purposes of targeted advertising. While these disclosures may be considered sales under certain state laws, we do not sell personal information for monetary consideration, and Wollo is not a data broker. If you would like to opt out of "sales" or targeted advertising, please refer to the Rights You May Have section below. In the preceding 12 months, we disclosed personal information for business purposes and "sold" personal information to the following categories of recipients:
| Category of Personal Information | Recipients of Disclosures for a Business Purpose | Recipients of "Sales" |
|---|---|---|
| Identifiers (such as name, email address, phone number, username, IP address, device identifiers, Service-related identifiers such as User ID, Character ID, Chat ID) | Vendors and service providers (e.g., data storage providers, content moderation providers, customer support providers, analytics, data management providers, payment providers, fraud prevention and security providers, experimentation providers, mobile measurement providers, push notification providers, email marketing providers), advertising providers, affiliates, other users (if you choose to make this information publicly available such as through your profile or public characters) | Advertising providers |
| Demographic information (such as date of birth, age) | Vendors and service providers (e.g., data storage providers, analytics providers, data management providers), advertising providers, affiliates | Advertising providers |
| Financial information (such as payment information and related details) | Vendors and service providers (e.g., payment providers, data management providers), affiliates | n/a |
| Commercial information (such as purchases, transaction history) | Vendors and service providers (e.g., payment providers, data management providers), affiliates | n/a |
| Geolocation data (i.e., approximate location based on IP address) | Vendors and service providers (e.g., data storage providers, analytics providers, data management providers), advertising providers, affiliates | Advertising providers |
| Audio or video information (such as voice recordings, generated images, or pictures and videos you submit) | Vendors and service providers (e.g., data storage providers, content providers, content moderation providers, data analytics providers), affiliates, other users (if you choose to make this information publicly available) | n/a |
| Device, Internet, or other electronic network activity information (such as information about your device or browser; information about how you use and interact with the Services including characters you interact with, content you like, comments you leave, creators you follow, our ads, or third-party sites or platforms) | Vendors and service providers (e.g., data storage providers, analytics providers, data management providers, fraud prevention and security providers, mobile measurement providers, push notification providers), advertising providers, affiliates | Advertising providers |
| Content and communications you submit (such as AI characters you create, character descriptions and personalities, chat communications with characters, generated images, posted images or videos, biography descriptions, comments on other users' content, social interactions including likes and follows, customer support messages) | Vendors and service providers (e.g., data storage providers, content providers, content moderation providers, customer support providers, analytics providers, data management providers, fraud prevention and security providers), affiliates, other users (if you choose to make this information publicly available through social features) | n/a |
| Inferences drawn from other personal information (such as preferences and interests, character recommendations, content suggestions) | Vendors and service providers (e.g., data storage providers, analytics providers, data management providers), advertising providers, affiliates | Advertising providers |
| Sensitive personal information (such as log-in credentials or information you voluntarily share when using the Services such as content revealing your race, religion, or sexual orientation) | Vendors and service providers (e.g., data storage providers, analytics providers, data management providers, content moderation providers), affiliates, other users (if you choose to make this information publicly available) | n/a |
We may also disclose any or all of the categories of information listed above in the event of a sale or transfer of all or part of our business, in response to legal process, or in the interests of protecting rights or safety, as described in more detail in our Privacy Policy.
Please note that our advertising practices may vary depending on where you are located and whether you access the Services via our websites or mobile applications. In some jurisdictions, we may provide targeted advertising to minors over the age of 13, which may include disclosures to third parties that are considered "sales" in some jurisdictions. Where applicable under local law, we obtain consent before providing targeted advertising or "selling" personal information of minors.
We process the categories of personal information identified above for the purposes as described in more detail in Section 2 of our Privacy Policy. We do not use or disclose your sensitive personal information for purposes other than permitted under applicable law.
We keep your information for the time necessary for the purposes for which it is processed or as otherwise described at the time the information is collected, unless a shorter retention period is required by law. The length of time for which we retain information depends on the purposes for which we collected and use it and your choices, after which time we may delete and/or aggregate it. We may also retain and use this information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. For more information about our data retention practices (including with respect to characters you create and make public, and social interactions on the platform), please refer to Section 7 of our Privacy Policy.
Where applicable under state law and subject to applicable exceptions, you may have the following rights:
To exercise the rights you may have under applicable law (with the exception of the opt-out right; see below), contact us at [email protected]. To protect your privacy and security, we take reasonable steps to verify your identity and requests. If we are unable to verify your identity, we may be unable to respond to your requests.
You may also be able to designate an authorized agent to make requests on your behalf. Authorized agents may submit requests using the methods described above. In order for an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a legally valid power of attorney. We may also follow up with you directly to verify your identity before processing the authorized agent's request, consistent with applicable law.
Where applicable under local law, if your request is denied, we will provide information about how to submit an appeal in our response denying the request.
To opt out of targeted advertising or the sale of personal information to third parties, please navigate to your privacy settings in your account or contact us at [email protected] and follow the directions.
Please refer to Section 4 of the Privacy Policy for more information about other choices or options you may have with respect to your information.
Effective November 27, 2025
This European Economic Area ("EEA") and United Kingdom ("UK") Privacy Notice provides additional information for data subjects in the EEA and UK that provide for certain privacy rights and requirements specified under laws applicable in the EEA and UK, including the General Data Protection Regulation ("GDPR") and UK Data Protection Act.
Our Privacy Policy and the privacy controls we offer are in line with these laws, and this Notice is intended to supplement the Privacy Policy with additional EEA and UK-specific disclosures. For example, all users can access a copy of their data, request deletion, correct their personal data, and control what personal data they share in their account on our website or in the privacy settings in the mobile application. You have the right to object to our use of your personal data. With many types of data, we have provided you with the ability to delete it if you do not want us processing it anymore. For other types of data, you can stop the use of your data by disabling the feature altogether. You can do these things in your account settings on our website or directly in the mobile application. If there are other types of personal data you do not agree with us processing, you can contact us, using the contact information provided below.
Alperen LTD is considered the "data controller" of the "personal data" (as defined under the GDPR) we handle under our Privacy Policy. In other words, Wollo is responsible for deciding how to collect, use, and disclose personal data, subject to applicable law. The laws of the EEA and the UK require data controllers to tell you about the legal ground that they rely on for using, sharing, or disclosing your personal data. To the extent those laws apply, our legal grounds are as follows:
Contractual Commitments: We may use, share, or disclose personal data to honor our contractual commitments to you. For example, we will process your personal data to provide the Services, and to honor our commitments in any agreements that we have with you.
With Your Consent: Where required by law, and in some other cases, we use, share, or disclose personal data on the basis of your consent. If we ask for your consent to process your personal data, you may withdraw your consent at any time by contacting us using the details at the end of our Privacy Policy. (Please note that if you withdraw your consent, this will not affect the processing activities that took place prior to your withdrawal of consent.)
Legitimate Interests: In many cases, we use, share, or disclose personal data on the ground that it furthers our legitimate business interests in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals, such as customer service, certain promotional activities, analyzing and improving our business and Services, providing security for the Services, preventing fraud, and managing legal issues.
Legal Compliance: We need to use and disclose personal data to comply with our legal obligations, for example to carry out fraud prevention checks or comply with other legal or regulatory requirements, where this is explicitly required by law.
The following chart identifies the applicable legal basis for each processing purpose:
| Purpose | Legal basis |
|---|---|
| Provide, administer, and operate the Services and our business; Enable social features including following creators, liking content, leaving comments, and participating in the community; Generate and analyze inferences about use of the Services, such as your preferences and interests and trends about our Services (e.g., which characters are most popular, how users navigate the Services, what types of content users create and engage with); Tailor the Services to your preferences and interests, including recommending characters, creators, and content; Evaluate the success of advertising campaigns; Communicate with you, including to inform you about features or aspects of the Services we believe might be of interest to you; Analyze, maintain, improve, modify, customize, and measure the Services, including to train our artificial intelligence/machine learning models; Develop new features, algorithms and machine learning models, programs, and services including character generation and image generation; Provide advertising and recruit new users, including provision of tailored advertising; Authenticate your account credentials, as necessary to log you in to the Services and help protect the security of your account; Comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other parties, including to enforce our Terms of Service and any other agreements or policies; and Detect and prevent fraud, criminal activity, or misuses of our Service, and to maintain the security of our IT systems, architecture, assets, customers, and networks. | Legitimate interests (Article 6(1)(f) GDPR) |
| Provide, administer, and operate the Services; Communicate with you about changes to our terms, conditions, or policies; or to respond to your inquiries, comments, feedback, or questions; Authenticate your account credentials, as necessary to log you in to the Services and help protect the security of your account; Process payments; Detect and prevent fraud, criminal activity, or misuses of our Service, and to maintain the security of our IT systems, architecture, assets, customers, and networks; and Comply with legal obligations and legal process and to our rights, privacy, safety, or property, and/or that of our affiliates, you, or other parties, including to enforce our Terms of Service and any other agreements or policies. | Contractual necessity (Article 6(1)(b) GDPR) |
| Provide advertising and recruit new users, including provision of tailored advertising; Communicate with you, including to inform you about features or aspects of the Services we believe might be of interest to you; and Communicate with you about your responses to user feedback and survey questionnaires. | Consent (where legally required) (Article 6(1)(a) GDPR) |
| Detect and prevent fraud, criminal activity, or misuses of our Service, and to maintain the security of our IT systems, architecture, assets, customers, and networks; Authenticate your account credentials, as necessary to log you in to the Services and help protect the security of your account and Comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other parties, including to enforce our Terms of Service and any other agreements or policies. | Compliance with a legal obligation (Article 6(1)(c) GDPR) |
Where applicable under local law and subject to applicable exceptions, you have the following rights regarding your personal data:
If you have a complaint or concern about your personal data, or to exercise your rights, we encourage you to contact us first, and we will do our very best to resolve your concern or fulfill your request. You can submit inquiries via email at [email protected], or via mail at:
Alperen LTD
[Your Cyprus Address]
Cyprus
To withdraw consent to certain tailored advertising or the placement of cookies and similar tracking technologies, please refer to our Cookie Policy and follow the instructions.
As Wollo is based in Cyprus, you may also contact the Cyprus Commissioner for Personal Data Protection:
Office of the Commissioner for Personal Data Protection
1 Iasonos Street
1082 Nicosia
Cyprus
Tel: +357 22 818 456
Email: [email protected]
Website: http://www.dataprotection.gov.cy
Our services are global, and your information may be stored and processed in Cyprus and other countries that may have data protection laws that differ from the laws in your country, and data may be accessible to law enforcement and national security authorities under certain circumstances.
For data subjects in the EEA and the UK, where your information is stored and processed in a country outside the EEA and the UK that is not regarded under local law as ensuring an adequate level of protection for personal data, we have put in place appropriate safeguards to protect data in accordance with applicable legal requirements, including standard contractual clauses approved by the European Commission.