Privacy Policy

Toonly is an AI comic and manga maker operated by Minu Pte. Ltd., a company incorporated in Singapore with its registered address at 10A Braddell Hill, #15-02, Braddell View, Singapore 579720 (“Minu”, “we”, “us”, or “our”). Minu Pte. Ltd. is the data controller responsible for the personal data described in this policy.

This Privacy Policy explains how we collect, use, share, and protect your personal data when you use the Toonly website at https://toonly.minu.ai, the Toonly iOS and Android apps, Toonly Studio, and any related services (together, the “Service”). By using the Service, you acknowledge that your personal data will be handled as described here. If you do not agree with this policy, please do not use the Service.

We collect the following categories of information:

• Account data — your name or display name, email address, avatar image, and the sign-in provider you use (email/password, email one-time code, or a third-party provider such as Google or Apple). Authentication is built on Firebase Authentication.
• Content you create or upload — the prompts you write, photos you upload, and the comics and manga episodes you generate or publish, including series details and creator profile information you add through Toonly Studio.
• Purchase and billing data — records of your subscriptions, Credit purchases, and creator payouts, such as the product purchased, transaction identifiers, and payout details you provide (for example a PayPal email or bank account for creator payouts). Payments themselves are handled by our payment providers; we do not store your full card numbers.
• Device and usage data — device type, operating system, app version, language, IP address, identifiers assigned to your device or account, and how you interact with the Service (for example screens viewed, features used, comics read, and generation activity).
• Communications — messages you send to our support team, feedback, and reports you submit about content or other users.

We use your information to:

• Provide, operate, and improve the Service — including processing your prompts and photos through AI models to generate your comics and manga episodes, and maintaining your library, Credit balance, and reading history.
• Process purchases and payouts — activate subscriptions, add Credit packs, unlock paid episodes, and pay eligible creators.
• Personalize your experience — for example recommending comics and series you may enjoy.
• Understand and improve performance — through analytics and diagnostics that help us fix bugs and develop new features.
• Communicate with you — respond to support requests and send service messages such as receipts, security notices, and updates to our terms and policies.
• Keep the Service safe — detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service, including enforcing age restrictions on mature content.
• Comply with the law — meet our legal, tax, accounting, and regulatory obligations.

We do not sell your personal data.

Purchases made on our website are processed by our online reseller Paddle.com. Paddle is the Merchant of Record for web orders, which means Paddle collects and processes your payment information — including your card details and billing address — under its own privacy policy, and handles customer-service inquiries and refunds for those orders. We receive information about your order (such as the product purchased and transaction status) but never your full card number.

Purchases made in our iOS and Android apps are processed by the Apple App Store or Google Play under those platforms’ own billing terms and privacy policies. We use RevenueCat to manage the state of your purchases and subscriptions across platforms; RevenueCat receives purchase receipts and related identifiers for this purpose.

We share personal data only as described below, and we require the service providers we work with to protect it:

• Service providers — cloud hosting providers, Firebase, RevenueCat, and the AI model providers that process your prompts and photos in order to fulfil your generation requests.
• Payment processors — Paddle for web orders, and Apple and Google for purchases made through their app stores.
• Analytics providers — Google Analytics, Mixpanel, and Firebase, which help us understand how the Service is used.
• Sign-in providers — if you sign in with a third-party account such as Google or Apple, that provider shares basic profile information with us and knows that you use Toonly.
• Legal requirements — courts, regulators, law enforcement, or other parties where we believe disclosure is required by law or necessary to protect the rights, safety, or property of Minu, our users, or others.
• Business transfers — a buyer or successor entity in connection with a merger, acquisition, financing, or sale of all or part of our business, subject to this policy.

Please note that comics you publish and your creator profile are public by design: they can be viewed by other users of the Service and may be visible to anyone on the web. Think carefully before including personal information in content you publish.

We and our analytics providers use cookies and similar technologies (such as local storage and SDK identifiers) to keep you signed in, remember your preferences, measure how the Service is used, and improve performance and reliability. Analytics data helps us understand, for example, which features are popular and where users run into problems.

You can control cookies through your browser settings, including blocking or deleting them; note that some parts of the Service, such as staying signed in, may not work properly without them. On mobile devices you can also use your operating system’s privacy settings to limit ad and analytics identifiers.

We keep your personal data for as long as your account exists and as needed to provide the Service. You can delete your account at any time from Settings in the app, or by emailing us at support@minu.ai. When your account is deleted, we delete or anonymize your personal data within a reasonable period.

We may retain certain records for longer where the law requires it or where we have a legitimate need — for example transaction and tax records, records needed to resolve disputes or enforce our agreements, and data needed to prevent fraud and abuse.

We use reasonable technical and organizational measures designed to protect your personal data against unauthorized access, loss, misuse, or alteration — including encryption in transit and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Please use a strong, unique password and contact us immediately at support@minu.ai if you suspect unauthorized access to your account.

We are based in Singapore and work with service providers located in other countries, so your personal data may be transferred to and processed in countries other than your own, which may have different data protection laws. Where we transfer personal data internationally, we take steps to ensure it receives an adequate level of protection, including using appropriate safeguards such as contractual protections recognized under applicable law (for example, standard contractual clauses for transfers subject to the GDPR or UK GDPR).

Depending on where you live, you have rights over your personal data:

• Singapore (PDPA) — you may request access to and correction of your personal data, and withdraw consent to its collection, use, or disclosure, subject to legal and contractual limits.
• EEA and UK (GDPR / UK GDPR) — you may request access, rectification, erasure, restriction of processing, and data portability, and you may object to processing based on our legitimate interests. Where we rely on consent, you may withdraw it at any time. You also have the right to lodge a complaint with your local supervisory authority.
• California (CCPA) — you have the right to know what personal information we collect and how we use and share it, the right to request deletion, and the right not to be discriminated against for exercising your rights. We do not sell personal information.

You can exercise many of these rights directly in the app — for example by editing your profile or using Delete account in Settings — or by emailing support@minu.ai. We will verify your request and respond within the time required by applicable law. If an authorized agent submits a request on your behalf, we may ask for proof of authorization.

The Service is intended for users aged 13 and older and is not directed to children under 13. Some content on the Service is flagged as mature and is restricted to users who are 18 or older. We do not knowingly collect personal data from children under 13. If we learn that we have collected personal data from a child under 13, we will delete the account and associated data. If you believe a child under 13 is using the Service, please contact us at support@minu.ai.

We may update this Privacy Policy from time to time to reflect changes in the Service, our practices, or the law. When we make material changes, we will notify you — for example by email, an in-app notice, or a notice on our website — before the changes take effect, and we will update the “Last updated” date at the top of this page. Your continued use of the Service after a change takes effect means you accept the updated policy.

If you have questions about this Privacy Policy or how we handle your personal data, or wish to exercise your rights, contact us at support@minu.ai or by post at Minu Pte. Ltd., 10A Braddell Hill, #15-02, Braddell View, Singapore 579720.