01 / Who we are
Your privacy deserves a precise explanation.
This Privacy Policy explains how Loco Bayco Limited (“Loco Bayco”, “we”, “us”, or “our”) processes personal data when you use the Moni mobile application, website, and related services (together, the “Service”). It applies to users in Taiwan, Hong Kong, and Macao, and also describes additional rights that may apply under the GDPR, UK GDPR, CCPA, or CPRA when those laws apply to you.
For data-protection purposes, Loco Bayco is the controller of the personal data described here unless we tell you otherwise. Our contact details are below.
Contact: locobayco@outlook.com
Website: https://moni.locobayco.com/
02 / Information collected
We collect what the Service needs to work, stay safe, and improve.
Nickname and avatar, including an image you choose when changing your avatar.
Device ID used for automatic access, IP address, and device information.
Photos, microphone, and camera access when you choose to use the related feature.
Content needed to operate AI character creation and AI chat, including prompts, messages, and generated responses.
2.1 Information you provide or create
We process your nickname, avatar, and the AI characters you create. When you use AI chat, the Service may process your prompts, messages, character instructions, uploaded images, audio, and generated responses in order to return the requested experience.
If you contact support, submit an in-app report, or send feedback, we may process the information in that communication and any information needed to investigate it.
2.2 Information collected automatically
We collect an IP address, device ID, and device information to provide access, diagnose problems, maintain security, prevent abuse, and understand how the Service is used.
2.3 Permissions
The Service may ask for access to your photos, microphone, or camera. Photos are used for changing your avatar. Microphone and camera access is used only when you choose a feature that requires it. You can refuse or later withdraw a permission in your device settings, although the related feature may not work.
We do not collect precise location, approximate location, contacts, or payment-card information through the Service. Payment processing is handled by the relevant app store. If our data practices change, this Policy and the relevant app-store disclosures will be updated.
2.4 Purchases
In-app purchases and subscriptions are made through Apple’s App Store or Google Play. We do not receive or store your full payment-card details through the Service. The relevant store may share transaction and subscription information with us so that we can provide purchased features and manage access.
03 / How we use information
Purpose, data, and legal basis should line up.
| Purpose | Data involved | Possible legal basis |
|---|---|---|
| Provide the Service, automatic access, AI character creation, and AI chat | Device ID, nickname, avatar, prompts/messages and generated content, image/audio input as used | Performance of a contract; consent for optional device permissions |
| Personalise and improve the experience | Device information, usage and performance information, content where necessary | Legitimate interests or consent where required |
| Safety, moderation, reporting, blocking, and fraud prevention | Content, reports, IP address, device information, security signals | Legitimate interests and legal obligations |
| Operate purchases and subscriptions | Store-provided transaction and entitlement information | Performance of a contract; legal obligation |
| Respond to support requests and legal enquiries | Information in your message and information needed to verify or respond | Performance of a contract; legitimate interests; legal obligation |
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that took place before withdrawal and may mean that a permission-dependent feature is unavailable. Where we rely on legitimate interests, you may object as described below.
We do not use personal data for a materially incompatible purpose without providing any notice required by law.
05 / International transfers
Your data may be processed outside your location.
Loco Bayco and its service providers may process personal data in countries other than Taiwan, Hong Kong, Macao, the European Economic Area, or the United Kingdom.
Where GDPR or UK GDPR applies, we will use an appropriate transfer mechanism and supplementary safeguards where required, such as an adequacy decision, standard contractual clauses, the UK International Data Transfer Agreement or Addendum, or another lawful mechanism.
06 / Retention
Retention periods should be specific and operational.
We retain personal data only for as long as needed for the purposes in this Policy, to provide the Service, meet legal and accounting requirements, resolve disputes, enforce agreements, maintain security, and protect users. The precise schedule must be completed from production records before publication:
| Data category | Retention period |
|---|---|
| Account/device-linked access, nickname, and avatar | While your account is active and for a reasonable period afterwards where needed for deletion, security, or legal purposes. |
| AI prompts, chat records, generated characters, images, and audio | For as long as needed to provide the related features and for a reasonable period afterwards where needed for safety, legal, or dispute purposes. |
| IP address, device information, logs, analytics, and fraud signals | For as long as reasonably necessary for security, service operation, analytics, and fraud prevention. |
| Reports, moderation records, and safety evidence | For as long as reasonably necessary to investigate, enforce our rules, protect users, and comply with law. |
| Purchase and subscription records | For as long as reasonably necessary to provide purchased features and meet accounting, tax, and legal obligations. |
| Backups | In accordance with our backup and recovery cycle, after which the information is deleted or overwritten. |
When an account is deleted, we will delete or anonymise associated personal data as required by applicable law and platform rules, subject to data that must be retained for legal, security, fraud-prevention, dispute, or evidentiary purposes.
07 / Security
We use safeguards appropriate to the data and the risk.
We maintain technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
No online service can guarantee absolute security. If you believe your account or personal data has been compromised, contact us promptly at locobayco@outlook.com.
08 / Your rights
You can ask what we hold and how we use it.
Depending on your location and the law that applies, you may have the right to request access to, correction of, deletion of, restriction of, or portability of your personal data; to object to processing; to withdraw consent; and to object to direct marketing. You may also have rights concerning solely automated decisions that produce legal or similarly significant effects.
You can request account deletion through https://moni.locobayco.com/ and can contact locobayco@outlook.com for privacy requests. We may need to verify your identity and may ask for information necessary to process the request safely. We will respond within the time required by applicable law.
If you are in the EEA or the UK, you may complain to your local supervisory authority or the authority with jurisdiction over the relevant processing.
These rights do not apply in every circumstance and may be subject to lawful exemptions. We will not discriminate against you for exercising a legal privacy right.
09 / California residents
Additional CCPA / CPRA disclosures.
If you are a California resident and the CCPA/CPRA applies to Loco Bayco, you may have the right to know or access the categories and specific pieces of personal information collected about you; correct inaccurate information; request deletion; opt out of the sale or sharing of personal information; limit the use or disclosure of sensitive personal information in circumstances provided by law; and receive equal treatment for exercising these rights.
Categories that may be implicated include identifiers such as device ID and IP address, internet or electronic network activity, profile information such as nickname and avatar, audio/visual information, and content or inferences derived from your use of AI features.
To submit a request, email locobayco@outlook.com or use https://moni.locobayco.com/. We may verify requests as reasonably necessary and will respond within the time required by applicable law.
We do not knowingly collect or process children’s personal information through an app intended for users 18 and over. See our Child Safety Policy.
10 / Children
Moni is not for children.
The Service is intended only for adults aged 18 or over and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided personal data or accessed the Service, contact us at locobayco@outlook.com. We will investigate and take steps required by applicable law, which may include deleting the information and restricting the account.
We apply content rules and reporting processes designed to prevent child exploitation and abuse. Further details are in the Child Safety Policy.
11 / Changes & contact
We will keep this notice current.
We may update this Privacy Policy to reflect changes in the Service, law, or data practices. We will update the version and effective date above and provide additional notice or obtain consent where required.
Loco Bayco Limited
Privacy contact: locobayco@outlook.com
Website: https://moni.locobayco.com/
© 2026 Moni. All rights reserved.