VivaNova / Legal
VivaNova Privacy Policy
Effective Date: 9/18/2026
Last Updated: 9/18/2026
Welcome to VivaNova.
This VivaNova Privacy Policy (the “Policy”) explains how Beijing Second Dream Technology Co., Ltd (北京第二梦科技有限公司) (“D2eam,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal data when providing the VivaNova game, account services, official website, and customer support services (collectively, the “Services”), as well as how users may exercise their applicable rights.
Please read this Policy carefully before using the Services. For features that users must separately choose to enable, we will provide additional notices and obtain consent where required.
1. Data Controller and Scope
Data Controller: Beijing Second Dream Technology Co., Ltd (北京第二梦科技有限公司)
Contact Email: contact@d2eam.com
Business Address: A139, 1st Floor, Building 106, Lize Zhongyuan, Chaoyang District, Beijing
This Policy applies to the VivaNova game, VivaNova accounts, the VivaNova official website, and related customer support services.
Services independently provided by Apple, Google, Facebook, Discord, app stores, payment platforms, or other third parties may be governed by their own privacy policies. Where a third party independently determines the purposes and means of processing, please also review that third party’s privacy notice.
2. Information We Collect
We collect only the information reasonably necessary to provide and protect the Services. The information we process depends on the features each user chooses to use.
2.1 Account and Sign-In Information
When a user creates, accesses, or links a VivaNova account, we may process:
the user’s VivaNova account identifier;
the age or age-range confirmation provided by the user;
the user’s email address;
account identifiers, display names, profile images, or email addresses provided by a third-party sign-in service with the user’s authorization; and
sign-in status, linked-account relationships, authentication tokens, and account security records.
When a user signs in through Apple, Google, Facebook, or Discord, the relevant provider verifies the user’s sign-in credentials. We do not receive the password used for the user’s account with that third-party provider.
Offline guest mode does not require the user to create a VivaNova account.
2.2 Gameplay and Cloud AI Data
VivaNova’s cloud AI is an optional paid feature that must be actively enabled by the user. To generate relevant gameplay content, the feature may process structured gameplay data, including:
character names, surnames, fictional age groups, genders, traits, aspirations, emotions, and needs;
character relationships, interaction records, and in-game memories concerning other characters;
in-game time, weather, scenes, areas, location descriptions, and available facilities;
in-game events, tasks, action plans, recent experiences, and other gameplay context necessary for the relevant request; and
AI requests, AI-generated results, request status, error information, and AI Points usage records.
Cloud AI operates based on the game state and the user’s in-game choices. It does not require the user to submit open-ended text prompts.
This information will ordinarily relate to fictional characters and gameplay. However, if a user enters a real person’s name or other identifying information into a character name or another game field, the information may constitute personal data relating to the user or another person.
Please do not enter unnecessary contact details, identification numbers, financial information, medical information, or other sensitive personal data into game fields that may be processed by cloud AI.
2.3 Purchase and Digital Entitlement Information
When a user purchases Greenback, converts Greenback into AI Points, or purchases other digital content, we may process:
order numbers, transaction identifiers, and receipt-verification information;
the purchased item, purchase time, price, currency, and transaction region;
payment, refund, reversal, chargeback, and transaction status information; and
records relating to Greenback, AI Points, and other digital-entitlement balances and changes.
When a purchase is completed through the Apple App Store or Google Play, full payment credentials, such as payment card or bank account information, are processed by the relevant payment platform. We do not receive the user’s full payment card details.
2.4 Device, Network and Service Log Information
When a user accesses the online Services, we or our service providers may automatically process:
the user’s IP address;
device model, operating system, system language, and application version;
installation, session, device, or account-related identifiers;
sign-in times, access times, network request status, and server response records; and
technical logs relating to service failures, account security, fraud prevention, or unusual access.
We use this information to operate the online Services, troubleshoot problems, verify transactions, protect account security, and prevent fraud or abuse.
2.5 Customer Support and Complaint Information
When a user contacts us through a customer support form or by email, we process information voluntarily submitted by the user, such as:
the user’s name or preferred form of address, email address, and other contact details needed to respond;
the contents of an inquiry, feedback, complaint, appeal, or privacy-rights request;
screenshots, order information, supporting materials, or other attachments voluntarily provided by the user; and
communications and records created while handling the relevant request.
Please do not submit sensitive personal data unrelated to the matter being addressed.
2.6 Local Saves and Local Files
Game progress in offline guest mode, as well as some or all VivaNova save data, may be stored only on the user’s device. Unless the user actively uses an online feature that requires the relevant data to be transmitted, or voluntarily provides a file when contacting customer support, we generally do not receive local save data.
Users may remove corresponding data from their devices by deleting the application, clearing application data, or deleting local files. Backup features provided or enabled through a device’s operating system are governed by the relevant platform’s privacy policy.
3. How We Use Information
We may use the information we collect to:
create, verify, maintain, and protect VivaNova accounts;
determine whether users meet the age requirements for online Services;
provide third-party sign-in, account linking, and account security features;
provide cloud AI content generation and related gameplay;
process purchases, conversions, transaction verification, refunds, and digital entitlements;
operate servers and online features;
troubleshoot errors and improve service stability;
identify and prevent fraud, cheating, malicious attacks, unauthorized access, and payment abuse;
respond to customer support inquiries and handle complaints, appeals, and privacy-rights requests;
enforce the Terms of Service and other applicable rules;
comply with tax, accounting, consumer protection, data protection, and other legal obligations; and
protect the lawful interests of users, D2eam, our service providers, and other third parties.
We will not use personal data for a new purpose that is incompatible with the purposes described above unless we provide additional notice and obtain consent where required by applicable law.
4. Legal Bases for Processing
Where applicable law requires us to identify a legal basis, we may process personal data on one or more of the following grounds:
Performance of a Contract: Processing is necessary to create an account, provide features selected by the user, process purchases, or perform our obligations under the Terms of Service.
Consent: The user has actively enabled cloud AI or provided consent in another situation where consent is required by law.
Legitimate Interests: Processing is reasonably necessary to protect accounts and the Services, prevent fraud, respond to customer support requests, or maintain service stability, provided that these interests are not overridden by the user’s rights.
Compliance with Legal Obligations: Processing is necessary to comply with tax, accounting, regulatory, court-order, or other applicable legal requirements.
Protection of Legal Rights: Processing is necessary to establish, exercise, or defend legal claims or to protect the rights and safety of users or others.
Users may withdraw consent where permitted by law. Withdrawal does not affect the lawfulness of processing conducted before consent was withdrawn, but it may prevent the user from continuing to use features that depend on the relevant information.
5. How We Share Information
We do not sell users’ personal data or share personal data for cross-context behavioral advertising or third-party targeted advertising.
To provide the Services, we may disclose information to the following recipients where necessary:
Sign-In Providers: Apple, Google, Facebook, and Discord, for account authentication, sign-in, and linking;
App Stores and Payment Platforms: Apple App Store, Google Play, and other authorized payment service providers, for purchases, transaction verification, refunds, and fraud prevention;
Cloud AI Service Providers: DeepSeek, for processing cloud AI requests actively initiated by users and generating corresponding gameplay content;
Cloud Computing and Technical Service Providers: For server hosting, network transmission, data storage, security protection, and technical support;
Professional Advisers: Lawyers, auditors, accountants, and other professional service providers subject to confidentiality obligations;
Competent Authorities: Courts, regulators, law enforcement agencies, or other competent authorities where disclosure is required by law or reasonably necessary to protect the lawful rights and safety of users, D2eam, or others; and
Transaction Participants: Parties lawfully involved in a merger, reorganization, financing, or transfer of the relevant business, provided that they are subject to appropriate confidentiality obligations.
We use contractual protections, access controls, and other reasonable measures to require service providers acting on our behalf to process information only in accordance with our instructions and the agreed purposes, and to provide protection consistent with this Policy and applicable law.
6. Cloud AI Data Processing
When a user enables cloud AI, the gameplay context necessary to provide the relevant feature is transmitted to our servers and AI service providers to generate the corresponding result.
We apply the following principles:
only gameplay data reasonably necessary to complete the relevant AI request is transmitted;
we do not intentionally include the user’s email address, payment information, sign-in credentials, or device identifiers unrelated to the gameplay request in AI prompts;
cloud AI data is not used for advertising or cross-service user profiling;
D2eam does not use gameplay data processed through the feature to train general-purpose AI models made available to the public;
unless we provide separate notice and obtain any consent required by law, we do not authorize AI service providers to use such data to train general-purpose AI models made available to the public; and
we apply reasonable restrictions to AI service providers’ access, processing purposes, and data-retention scope.
After a user disables cloud AI, we will not transmit new gameplay context for the purpose of providing that feature. Information previously processed may continue to be retained in accordance with the retention periods described in this Policy.
If changes to an AI service provider or processing arrangement may materially affect users’ rights, we will update the relevant notice and obtain renewed consent where required by applicable law.
7. International Data Transfers
D2eam is located in the People’s Republic of China. Users’ personal data may be processed in the People’s Republic of China and in other countries or regions where our service providers, servers, or technical facilities are located.
Data protection laws may differ between countries and regions. Where personal data is transferred internationally, we will adopt reasonable safeguards as required by applicable law, which may include:
entering into data protection agreements with recipients;
using the European Union Standard Contractual Clauses, the applicable United Kingdom data-transfer addendum, or another recognized transfer mechanism;
minimizing and encrypting transferred data or restricting access to it; and
obtaining the user’s explicit consent where required by law.
Users may contact us using the details provided in this Policy to request information about the safeguards applicable to international transfers of their personal data.
8. Data Retention
We retain personal data only for as long as reasonably necessary to fulfill the purposes described in this Policy and comply with applicable legal requirements.
In general:
account information is retained while the account remains active and is deleted or anonymized after account deletion, subject to applicable law and any necessary processing period;
AI requests, generated results, and related technical records are retained only for as long as necessary to complete generation, troubleshoot problems, prevent abuse, verify billing, and comply with legal obligations;
order, transaction, and digital-entitlement records are retained as required for tax, accounting, consumer protection, and dispute-resolution purposes;
customer support, complaint, and appeal records are retained for as long as necessary to handle the relevant matter and address potential disputes;
security and server logs are retained for a period reasonably necessary to protect the Services and are subsequently deleted or anonymized; and
local save data remains on the user’s device until the user deletes it.
After an account is deleted or a user submits a valid deletion request, we will delete or anonymize information that is no longer required. We may retain information where necessary to comply with law, handle disputes, prevent fraud, protect security, or establish, exercise, or defend legal claims.
Data contained in backup systems may require a reasonable technical period to be completely removed. During this period, our use of the relevant data will be restricted.
9. Information Security
We implement technical and organizational measures appropriate to the nature and risks of the information, including encryption in transit, access controls, authentication, data minimization, security monitoring, and personnel confidentiality requirements. These measures are intended to protect personal data against unauthorized access, disclosure, alteration, loss, and misuse.
No method of network transmission or storage can guarantee absolute security. If a personal data security incident is likely to create a high risk to users’ rights, we will take remedial measures and notify affected users and competent authorities where required by applicable law.
Users should also protect their devices, third-party sign-in accounts, and authentication information, and promptly contact us if they discover unauthorized access.
10. Users’ Rights and Choices
Depending on the laws applicable in the user’s place of residence, users may have the right to:
obtain information about and access personal data we process;
correct inaccurate or incomplete information;
request deletion of personal data or deletion of an account;
restrict or object to certain processing activities;
obtain a copy of applicable data in a structured, commonly used, and machine-readable format;
withdraw previously provided consent;
request an explanation if we refuse to fulfill a rights request; and
lodge a complaint with a competent data protection or privacy authority.
Users may manage their information by:
managing or deleting their account through the in-game account settings;
contacting contact@d2eam.com to submit an account and data deletion request;
disabling cloud AI to stop new AI gameplay data from being transmitted;
managing or withdrawing third-party sign-in authorization through the relevant third-party platform; or
contacting contact@d2eam.com to submit an access, correction, deletion, or other privacy-rights request.
To protect accounts and personal data, we may need to verify the requester’s identity and ownership of the relevant account. We will respond within the period required by applicable law.
Users will not receive discriminatory treatment for exercising their privacy rights. However, if information necessary to provide a particular feature is deleted, that feature may no longer be available.
11. Personal Data Relating to Minors
VivaNova’s online Services are available only to users who are at least 15 years old.
With the permission of a parent or legal guardian, users under the age of 15 may use offline guest mode only. They may not register for or use an online account, cloud AI, in-game purchases, or other online features. Game data in offline guest mode is ordinarily stored locally on the device and is not actively collected by D2eam.
We do not knowingly collect online personal data from users under the age of 15. If we discover that an account is being used by someone who does not meet the applicable age requirement, we may restrict or terminate the account and delete personal data that is no longer required.
A parent or legal guardian who believes that we have mistakenly collected personal data from a user under the age of 15 may contact us at contact@d2eam.com.
12. Automated Processing and AI-Generated Content
Cloud AI automatically generates fictional character behavior, tasks, interactions, and other gameplay content based on structured in-game data.
This processing is used solely for entertainment and gameplay. It is not used to make decisions about users that produce legal effects or similarly significant effects in the real world.
AI-generated results may be inaccurate, incomplete, or different from what the user expects. Users may choose not to enable cloud AI or may disable the feature.
13. Changes to This Policy
We may update this Policy in response to changes to the Services, applicable law, security requirements, or our data-processing practices.
When this Policy is updated, we will revise the “Last Updated” date. If a change may materially affect users’ rights, we will notify users through an in-game notice, email, or another appropriate method and obtain renewed consent where required by applicable law.
14. Contact Us
For questions about this Policy, our processing of personal data, or the exercise of privacy rights, please contact:
Beijing Second Dream Technology Co., Ltd (北京第二梦科技有限公司)
Contact Email: contact@d2eam.com
Business Address: A139, 1st Floor, Building 106, Lize Zhongyuan, Chaoyang District, Beijing
Account and Data Deletion: contact@d2eam.com