Legal

Privacy Policy

Effective Date: October 23, 2026

This Privacy Policy explains how MobAI Inc. collects, uses, shares, and protects information when you use mobai-game.com, MobAI account services, Lunaverse, and related OAuth or API services.

1. Information We Collect

Google and Apple sign-in information

When you sign in with Google or Apple, we receive information permitted by your consent, such as your provider account identifier, email address, email verification status, and any name or profile information the provider makes available. We use this information to create and secure your MobAI or Lunaverse account.

Facebook Login

If you choose to sign in with Facebook, we receive your Facebook user ID and, where available and permitted by the permissions you grant, your name, profile picture, and the email address linked to your Facebook account. We use this information to create your Lunaverse Stories account, sign you in, and keep your story progress tied to your account across devices.

We do not sell this information and do not use it for advertising. You can remove our access at any time in Facebook under Settings & privacy > Settings > Apps and Websites. You can ask us to delete your account and the data we received from Facebook by following the steps at our account and data deletion page.

Account and session information

We store MobAI user IDs, linked identity provider IDs, session records, authentication cookies, token metadata, OAuth client consent records, and security timestamps.

OAuth application information

When a MOBAI application asks to use your MobAI account, we store the client application, requested scopes, granted scopes, consent time, access token metadata, refresh token metadata, and revocation state.

Usage and technical information

We may collect IP address, user agent, device information, request logs, error logs, and approximate interaction timing to operate, secure, debug, and improve the services.

2. How We Use Information

• Authenticate you and maintain secure sessions.
• Provide Google, Apple, or Facebook sign-in and MobAI OAuth/OIDC services to connected MOBAI applications.
• Show account information and authorized application status.
• Prevent abuse, fraud, unauthorized access, and service misuse.
• Operate, monitor, debug, and improve MobAI services.
• Comply with legal obligations and enforce our Terms.

3. Cookies and Tokens

We use secure, HttpOnly cookies to maintain your MobAI session. OAuth access tokens and refresh tokens are used to authorize connected MOBAI applications. Client-side JavaScript cannot read HttpOnly session cookies.

4. Sharing

We do not sell personal information. We may share information with connected MOBAI applications you authorize, infrastructure providers that help operate the services, legal authorities when required, and professional advisors under confidentiality obligations.

5. Identity Provider Data

MobAI uses Google, Apple, and Facebook account data only for authentication, account identification, account display, fraud prevention, and account support. Account identification keeps your Lunaverse Stories progress linked to your account across devices. We do not use identity-provider data for advertising and do not sell it.

6. Data Retention

We keep account information while your account is active or as needed to provide the services. Session and token records expire according to their configured lifetimes. We may retain limited logs where needed for security, compliance, or dispute resolution.

7. Your Choices

You may sign out of your MobAI account, revoke access for connected applications where available, and request account assistance by contacting us. You can also manage provider permissions in your Google, Apple, or Facebook account settings.

The MobAI Account Center and self-service web deletion are not available yet. To request deletion of your account or personal data, including data received from Facebook, follow the instructions on our account and data deletion page, or contact legal@mobai.dev and include enough information for us to verify the request.

8. Security

We use technical and organizational safeguards such as HTTPS, secure cookies, scoped tokens, database access controls, and secret management. No system is perfectly secure, and we cannot guarantee absolute security.

9. Children

The services are not directed to children under 13 or the minimum age required in your jurisdiction. If we learn that we collected information from a child without required consent, we will take appropriate steps to delete it.

10. International Use

MobAI is operated by a Delaware company and may process information in countries where we or our service providers operate. By using the services, you understand that information may be processed outside your jurisdiction.

11. Changes

We may update this Privacy Policy by posting a revised version and updating the effective date. Material changes will be communicated where required by law.

12. Contact

MobAI Inc.
Email: [email protected]