Privacy Policy

Last updated: March 1, 2026

WikiMoi UG ("WikiMoi," "we," "us," or "our") operates the website wikimoi.com and the WikiMoi mobile application. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our services, in compliance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable data protection laws.

1. Data Controller

The data controller responsible for processing your personal data is:

WikiMoi UG
Wadzeckstraße 12
10178 Berlin, Germany
Email: contact@wikimoi.com
Phone: +49 (0) 155 10014859

2. Information We Collect

2.1 Information You Provide

• Account Information: When you register via Google Sign-In or Apple Sign-In, we collect your name, email address, and profile photo as provided by the authentication provider.
• Profile Content: Information you share during AI-guided conversations to create your biography, including life events, experiences, achievements, and personal narratives.
• Uploaded Media: Photos, images, and files you upload to enhance your profile or share through the companion chat.
• Communications: Messages you send through our AI companion chat, persona Q&A, and any correspondence with our support team.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on pages, referral URLs, and interaction patterns.
• Device Information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Location Data: Approximate location derived from your IP address (country/region level only).

2.3 Information from Third Parties

• Authentication Providers: Google and Apple provide basic profile information during sign-in (name, email, profile photo).

3. How We Use Your Information

We process your personal data based on the following legal grounds under GDPR Article 6:

Purpose	Legal Basis
Providing and maintaining our services, including AI biography generation	Contract performance (Art. 6(1)(b))
Processing your conversations with OpenAI to generate biographical content	Contract performance (Art. 6(1)(b))
Sending service notifications and updates	Legitimate interest (Art. 6(1)(f))
Improving and optimizing our services	Legitimate interest (Art. 6(1)(f))
Analytics and performance monitoring	Consent (Art. 6(1)(a))
Displaying personalized advertisements	Consent (Art. 6(1)(a))
Complying with legal obligations	Legal obligation (Art. 6(1)(c))

4. Public Information

WikiMoi is a biographical platform. By default, the biography you create through our AI-guided conversations will be published as a public profile page. This includes:

• Your name and profile photo
• Your biography sections (Quick Bio, Early Life, Education, etc.)
• Tags associated with your profile

You have control over your profile's visibility. You can set your profile to private at any time through your account settings. You can also hide individual sections of your biography.

5. Cookies and Tracking Technologies

5.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. We use cookies and similar technologies (including localStorage) to provide functionality, analyze usage, and deliver relevant content.

5.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Authentication, security, and basic site functionality. Includes your login session token stored in localStorage.	Session / Until logout
Analytics Cookies (Google Analytics)	Help us understand how visitors interact with our website by collecting anonymous usage statistics.	Up to 2 years
Advertising Cookies (Google AdSense)	Used to deliver relevant advertisements and measure ad campaign effectiveness.	Varies by provider
Third-Party Cookies (Google Sign-In)	Enable authentication via Google Sign-In.	Session

5.3 Local Storage

We use browser localStorage to store:

• Your authentication token for maintaining your login session
• Basic user profile data for displaying navigation elements
• Your cookie consent preferences
• Your bookmarked profiles

5.4 Managing Cookies

When you first visit our website, you will be presented with a cookie consent banner. You can accept or decline non-essential cookies. You can also manage cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of our website.

6. Third-Party Services

We share data with the following third-party services to provide our platform:

6.1 OpenAI

We use OpenAI's API to power our AI-guided conversations, biography generation, companion chat, and persona Q&A features. Your conversation messages are transmitted to OpenAI for processing. OpenAI's data usage is governed by their API Data Usage Policy.

6.2 Google Services

• Google Analytics (GA4): We use Google Analytics to analyze website traffic and usage patterns. Data is anonymized and aggregated. You can opt out using the Google Analytics Opt-out Browser Add-on.
• Google Tag Manager: Used to manage analytics and marketing tags on our website.
• Google AdSense: Used to display advertisements. Google may use cookies to serve ads based on your browsing history. Learn more at Google's Advertising Policies.
• Google Sign-In: Used for user authentication. We receive your name, email, and profile photo from Google.

6.3 Apple Sign-In

If you choose to sign in with Apple, we receive your name and email address (or a private relay email) as provided by Apple.

6.4 Amazon Web Services (AWS)

We use AWS services (DynamoDB, S3, SES, CloudWatch) for data storage, file hosting, email delivery, and monitoring. All data is stored in the EU (Frankfurt, eu-central-1 region).

6.5 Firebase Cloud Messaging

We use Firebase Cloud Messaging (FCM) to send push notifications to your mobile device if you opt in.

6.6 DeepL

We use DeepL to provide translation services for profile biographies. Biography text is sent to DeepL for translation when a visitor requests a translated version of a profile.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services:

• Account Data: Retained until you delete your account.
• Profile Content: Retained until you delete your account or remove specific content.
• Conversation History: Retained with OpenAI in accordance with their data retention policies.
• Analytics Data: Aggregated analytics data is retained for up to 26 months.
• Temporary Share Links: Automatically expire and are deleted after their TTL period.

When you delete your account, we will remove your personal data from our active databases within 30 days. Some data may persist in encrypted backups for up to 90 days before being permanently deleted.

8. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of Access (Art. 15): You can request a copy of your personal data we hold.
• Right to Rectification (Art. 16): You can request correction of inaccurate personal data. You can also edit your profile directly on the platform.
• Right to Erasure (Art. 17): You can request deletion of your personal data. You can delete your account directly through the app or website.
• Right to Restrict Processing (Art. 18): You can request that we limit how we use your data.
• Right to Data Portability (Art. 20): You can request your data in a structured, machine-readable format.
• Right to Object (Art. 21): You can object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent (Art. 7): Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at contact@wikimoi.com. We will respond to your request within 30 days.

You also have the right to lodge a complaint with a supervisory authority. The competent authority for WikiMoi is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication via OAuth 2.0 (Google) and Sign-In with Apple
• JWT-based session management
• Rate limiting to prevent abuse
• Data stored in EU-based AWS data centers with industry-standard security

10. International Data Transfers

Your data is primarily stored and processed within the European Union (AWS eu-central-1, Frankfurt). However, some third-party services (OpenAI, Google, Apple, Firebase) may process data in the United States. These transfers are protected by:

• EU-U.S. Data Privacy Framework certifications
• Standard Contractual Clauses (SCCs) where applicable

11. Children's Privacy

WikiMoi is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at contact@wikimoi.com, and we will promptly delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by posting a notice on our website or sending you an email. The "Last updated" date at the top of this policy indicates when it was last revised.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

WikiMoi UG
Wadzeckstraße 12
10178 Berlin, Germany
Email: contact@wikimoi.com
Phone: +49 (0) 155 10014859