Privacy Policy

This Privacy Notice explains how Gripping Inc., doing business as BeDrama ("BeDrama," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you use the BeDrama mobile application, website, account portal, BD top-up pages, membership pages, creator tools, AI character chat, AI content generation features, and related services (collectively, the "Service"). By using the Service, you acknowledge that you have read this Privacy Notice. If you do not agree with this Privacy Notice, do not use the Service.

For purposes of applicable privacy laws, the data controller is: Gripping Inc. 26 Broadway Suite 934 New York, NY 10004 United States Email: cs@gripping.ai If you have questions about this Privacy Notice or wish to exercise privacy rights, contact us at cs@gripping.ai.

This Privacy Notice applies to personal information we process in connection with BeDrama. This Privacy Notice does not apply to third-party services that we do not control, including Apple, Google, Stripe, app stores, third-party authentication providers, payment processors, analytics providers, AI infrastructure providers, cloud providers, or third-party websites. Those third parties process information under their own terms and privacy policies.

We collect the following categories of information, depending on how you use the Service.

3.1 Account Information

We may collect:

• Display name, username, or profile name
• Email address received from Apple Sign In, Google Sign In, or another supported sign-in provider
• Profile image, avatar, or selected profile asset
• Language preference
• Account creation date
• Account status, membership status, and account settings

3.2 Age, Safety, and Personalization Information

We may collect:

• Date of birth or age range for age verification and safety controls
• Gender or content preference selections, if provided during onboarding
• Safe Mode settings
• Mature-content eligibility status
• Content preference selections and interaction signals

Date of birth is used for age verification and safety controls and is not displayed publicly.

3.3 Authentication Information

We use third-party sign-in providers such as Apple Sign In and Google Sign In. We may receive authentication tokens, user identifiers, email address, and basic profile information from those providers. We do not collect or store passwords for consumer accounts that use Apple or Google authentication.

3.4 Usage, Device, and Technical Information

We may collect:

• Device type, model, operating system, app version, browser type, and language settings
• IP address and approximate location, such as country or region
• Session logs, crash logs, error logs, diagnostic data, and performance data
• Feature usage, screen views, taps, impressions, and in-app interactions
• Stable device identifiers, advertising identifiers where permitted, or app instance identifiers used for security, fraud prevention, analytics, attribution, and session management
• Referral, campaign, attribution, or install-source information

3.5 Content and Interaction Data

When you use BeDrama, we may collect and process:

• Chat messages, prompts, replies, and conversation history with AI characters
• Character creation inputs, character settings, personality descriptions, story settings, scene prompts, and related metadata
• AI-generated outputs, including text, images, audio, video, clips, scenes, thumbnails, and related metadata
• User-generated content you upload, create, publish, save, remix, share, or make available through the Service
• Likes, follows, saves, reports, blocks, comments, shares, and other content interaction data
• Public/private visibility settings for characters, scenes, and other content

3.6 Payment, BD, and Transaction Information

We may collect or receive:

• Purchase identifiers
• Receipt, transaction, and subscription status information
• BD balance information, including Permanent BD and Plan BD balances
• BD usage history, top-up history, refund status, chargeback status, and membership history
• Product purchased, price, currency, tax information, purchase date, renewal date, cancellation status, and platform or payment provider information
• Payment processor metadata necessary to verify purchases, prevent fraud, resolve disputes, and provide customer support

In-app purchases may be processed by Apple App Store or Google Play. Web purchases, where offered and permitted by applicable law and platform rules, may be processed by Stripe or other payment processors. We do not store full payment card numbers or full payment credentials. Payment processors handle payment information under their own terms and privacy policies.

3.7 Push Notification Information

If you enable notifications, we may collect:

• Push notification tokens
• Device type
• Notification preferences
• Notification delivery and interaction data

You can disable push notifications through your device settings.

3.8 Support, Safety, and Communications

We may collect information you provide when you:

• Contact customer support
• Submit a report
• Appeal a moderation decision
• Request a refund or billing review
• Participate in surveys, promotions, beta programs, or user interviews
• Communicate with us by email or other channels

3.9 Cookies and Similar Technologies

Our website and account portal may use cookies, local storage, pixels, SDKs, or similar technologies for:

• Login and session management
• Security and fraud prevention
• Analytics and performance measurement
• User preferences
• Payment and checkout functionality
• Attribution and campaign measurement, where permitted by law

You can manage browser cookies through your browser settings. Some features may not work properly if cookies are disabled.

3.10 Aggregated or De-Identified Information

We may create aggregated, anonymized, or de-identified information that cannot reasonably identify you. We may use such information for analytics, product improvement, safety, research, reporting, and business purposes. Where required by law, we will maintain and use de-identified information in de-identified form and will not attempt to re-identify it except as permitted by law.

We use personal information to:

• Provide, operate, maintain, and improve the Service
• Create and manage user accounts
• Authenticate users and prevent unauthorized access
• Enable AI character chat, interactive storytelling, character creation, scene generation, drama-cut creation, and sharing features
• Process BD top-ups, memberships, subscriptions, billing, refunds, chargebacks, purchase verification, and payment disputes
• Maintain BD balances, including Permanent BD and Plan BD
• Personalize content, recommendations, characters, stories, and user experience
• Enable public/private character visibility, sharing, publishing, and creator tools
• Send service-related messages, including security alerts, purchase confirmations, account notices, policy updates, and support messages
• Send push notifications if enabled
• Detect, prevent, investigate, and respond to fraud, abuse, security incidents, policy violations, illegal activity, and harmful content
• Moderate content, enforce our Terms, and respond to reports
• Analyze usage, debug issues, improve performance, and develop new features
• Comply with legal obligations, platform requirements, law-enforcement requests, and dispute-resolution obligations
• Protect our rights, users, employees, contractors, business partners, and the public

BeDrama uses artificial intelligence systems and service providers to generate, transform, moderate, classify, recommend, or personalize content. Your prompts, chats, uploaded content, generated content, and related metadata may be processed by us and our service providers to provide the Service, generate outputs, enforce safety rules, prevent abuse, and improve Service features. We do not use your private chat content to train third-party foundation AI models. We may use aggregated, anonymized, or de-identified interaction data to evaluate and improve BeDrama features, safety systems, recommendation systems, and product performance, subject to applicable law. Public content, published characters, public scenes, and content you intentionally share may be used to operate, display, promote, improve, and provide the Service as described in our Terms of Service.

Where the GDPR or UK GDPR applies, we process personal data under the following legal bases:

• Contract performance: to provide the Service, manage accounts, process purchases, deliver memberships, maintain BD balances, and provide customer support
• Legitimate interests: to secure the Service, prevent fraud, enforce policies, improve product performance, analyze usage, moderate content, and protect our rights and users
• Consent: where required for push notifications, certain cookies, optional personalization, marketing communications, or other processing that requires consent
• Legal obligations: to comply with law, tax obligations, accounting requirements, consumer protection laws, law-enforcement requests, and dispute obligations
• Vital interests or public interest: where necessary to address urgent safety, security, or harm-prevention concerns, where applicable

You may withdraw consent where processing is based on consent. Withdrawal does not affect processing already conducted before withdrawal.

We may share information as follows.

7.1 Service Providers

We may share information with vendors, processors, and service providers who help us operate the Service, including:

• Cloud hosting and database providers
• AI model, content generation, moderation, and safety providers
• Analytics and product measurement providers
• Crash reporting and performance monitoring providers
• Authentication providers
• Payment processors and purchase verification providers
• Push notification providers
• Customer support providers
• Security, fraud prevention, and compliance vendors

These providers are authorized to process information only as needed to provide services to us and are subject to contractual obligations where required by law.

7.2 Payment Platforms and Processors

Purchases may be processed by Apple, Google, Stripe, or other payment providers. We may share or receive information necessary to verify purchases, prevent fraud, process refunds, resolve disputes, manage subscriptions, and provide support.

7.3 Other Users

If you publish, share, comment on, or make content public, other users may see your public content, display name, profile image, public characters, public scenes, public interactions, and related information. Private chats and private characters are not intentionally made public by us, but no system is completely secure and you should not submit highly sensitive information to AI chats or interactive content.

7.4 Legal, Safety, and Rights Protection

We may disclose information if we believe it is reasonably necessary to:

• Comply with applicable law, legal process, court orders, or government requests
• Enforce our Terms, policies, or agreements
• Detect, prevent, or investigate fraud, abuse, security incidents, or illegal activity
• Protect the rights, property, safety, or security of BeDrama, users, employees, contractors, third parties, or the public
• Respond to intellectual property, privacy, safety, or content-related claims

7.5 Business Transfers

We may disclose or transfer information in connection with a merger, acquisition, financing, corporate transaction, reorganization, bankruptcy, or sale of all or part of our business or assets.

7.6 Aggregated or De-Identified Information

We may share aggregated, anonymized, or de-identified information for analytics, business, research, safety, and reporting purposes.

We do not sell your personal information for money. We do not share personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act, unless we provide a legally required opt-out mechanism and update this Privacy Notice. If our practices change, we will update this Privacy Notice and provide required choices.

We are based in the United States. Your information may be processed in the United States and other countries that may have data-protection laws different from those in your country. Where required, we use appropriate safeguards for international transfers, such as Standard Contractual Clauses or other legally recognized mechanisms.

We retain personal information for as long as reasonably necessary to provide the Service, operate accounts, maintain BD balances, provide memberships, support user-generated content, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, maintain security, and support legitimate business purposes. Retention periods depend on the type of information and the purpose of processing, including:

• Account information: retained while your account is active and for a reasonable period afterward
• Purchase and transaction records: retained as required for tax, accounting, fraud prevention, platform, refund, and dispute purposes
• Chat, prompt, and generated content: retained as needed to provide the Service, maintain conversation history, support safety, and enforce policies
• Public content: retained while published and after removal where necessary for backups, legal compliance, safety, or rights enforcement
• Support communications: retained as needed to resolve issues, prevent abuse, and comply with law
• Security logs: retained for a limited period unless needed for investigation or legal compliance

When information is no longer needed, we delete, anonymize, or de-identify it, subject to technical and legal limitations.

You may delete your account through in-app settings where available or by contacting cs@gripping.ai. Upon confirmed account deletion, we will take steps to delete or anonymize your account profile and remove sign-in connections, subject to legal, technical, security, fraud-prevention, payment, backup, and dispute-resolution limitations. Some information may be retained after deletion, including:

• Transaction records required by law or platform rules
• Records necessary to prevent fraud, abuse, chargebacks, or security incidents
• Content licensed under our Terms before deletion
• Public content or content shared with others, where retention is necessary to operate the Service, protect rights, or comply with law
• Aggregated, anonymized, or de-identified data

Account deletion may permanently remove access to unused BD, membership benefits, private content, conversation history, and generated content associated with your account. You should use remaining BD and cancel active subscriptions before deleting your account. This does not limit any non-waivable rights you may have under applicable law or app-store policies.

Depending on where you live, you may have rights to:

• Access personal information we hold about you
• Correct inaccurate personal information
• Delete personal information
• Request a copy of personal information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Opt out of certain sharing or targeted advertising, where applicable
• Appeal a privacy-rights decision, where applicable
• Not be discriminated against for exercising privacy rights

To exercise rights, contact cs@gripping.ai. We may need to verify your identity before processing a request. We may deny or limit requests where permitted by law, including where retention is necessary for security, fraud prevention, legal compliance, payment disputes, tax records, free expression, or other lawful reasons.

If you are located in the EEA or UK, you may have rights under the GDPR or UK GDPR, including access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority. Where required, we will respond to verified requests within the time required by law.

If you are a California resident or a resident of another U.S. state with applicable privacy laws, you may have additional rights, including the right to know, access, delete, correct, obtain a copy, opt out of sale or sharing, limit certain uses of sensitive personal information, and appeal certain decisions. We do not sell personal information for money and do not share personal information for cross-context behavioral advertising unless we provide required notice and opt-out rights. We will not discriminate against you for exercising privacy rights. Authorized agents may submit requests where permitted by law. We may require proof of authorization and identity verification.

The Service is not directed to children under 13. You must be at least 13 years old to use the Service. If we learn that we collected personal information from a child under 13 without required parental consent, we will take steps to delete that information and terminate the account. Users under 18 are subject to additional safety restrictions. Safe Mode is enabled by default and users under 18 may not disable Safe Mode or access mature content. If you are 13-17, you represent that you have permission from your parent or legal guardian to use the Service where required by law. Parents or guardians who believe a child under 13 has provided us personal information may contact cs@gripping.ai.

We may send service-related communications, including account notices, purchase confirmations, security alerts, policy updates, and support messages. If you opt in to push notifications, you may disable them through your device settings. If we send promotional emails, you may unsubscribe using the instructions in those emails. We may still send non-promotional service messages.

We use reasonable technical, organizational, and administrative safeguards designed to protect personal information. These may include encryption in transit, access controls, logging, monitoring, and internal policies. No system is completely secure. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed.

The Service may link to third-party services or include integrations with third-party platforms. We are not responsible for the privacy practices, content, or security of third parties. Your use of Apple, Google, Stripe, app stores, social platforms, or other third-party services is governed by their terms and privacy policies.

We may update this Privacy Notice from time to time. The "Last updated" date shows when this Privacy Notice was last revised. If we make material changes, we will provide notice as required by law. Your continued use of the Service after an updated Privacy Notice becomes effective means you acknowledge the updated Privacy Notice.

Gripping Inc. 26 Broadway Suite 934 New York, NY 10004 United States Email: cs@gripping.ai