Fluffer Privacy Policy

MB Technologies LLC, the company behind Fluffer by Motorbunny ("MB Technologies", "we", "us"), makes Fluffer. This policy explains what the Fluffer app, the Fluffer website (fluffer.app), the Fluffer Store and the Fluffer developer platform collect, why, who else handles it, how long we keep it, and the choices you have. Motorbunny is part of the same company, but our Motorbunny online shop is covered by its own privacy policy, not this one.

If you live in Washington, Nevada or Connecticut, or a consumer health data law otherwise applies to you, our Consumer Health Data Privacy Policy also applies.

#The short version

• Adults only. Fluffer is for people 18 and over.
• No ads, no tracking, no selling. We don't show ads, use advertising IDs or tracking tools, or sell your information.
• Your intimate information stays private. How you use your toy is used only to run the features you choose and keep them working. It's never sold, never used for ads, and never used to train AI.
• Messages and calls are end-to-end encrypted. We can't read, see or hear them, unless someone in the conversation reports a message to us.
• We check profile pictures and reported pictures for child sexual abuse material, and report matches to NCMEC as the law requires. Nobody at Fluffer looks at reported content.
• AI features are optional and off until you turn them on. They send small pieces of chat or audiobook text, never your name or email.
• Guest mode keeps your library on your phone.
• You can delete your account in the app. A few safety and legal records stay afterward, and we tell you which.
• Questions: privacy@fluffer.app

#Information we collect

#Your account

When you create an account we collect your email address, a password (stored only in protected, hashed form by our sign-in provider), a username, your birthday (to confirm you're old enough) and, if you add them, a display name and profile picture. If you sign in with Apple or Google, we receive your email address and, if you allow it, your name from them. We also keep how you sign in, when you last signed in, and your country and language settings. [To be confirmed]

Your username, display name and profile picture can be seen by other Fluffer users and on public pages of fluffer.app, and public pages may be found by search engines. Profile pictures are stored so that anyone with the link can view them, so don't use a picture you want to keep private.

#Guest mode

If you continue as a guest, we don't create an account. Your settings, patterns and history stay on your phone. Our servers and providers still receive technical information when the app connects (such as your IP address and crash reports), and features you use as a guest send what's described below. Messages, syncing and Tip4Fuel history need an account.

#Your toys and how you use them

To connect and control your toy, Fluffer uses Bluetooth on your phone. With your account we store:

• the names you give your toys, linked to the toy's Bluetooth ID (on Android, this is the toy's hardware address);
• your toy settings, such as power limits;
• the patterns, vibetracks and folders you save to your library;
• while Remote API is on, your toy's type, battery and motor state.

Your play history and recently played items stay on your phone. If you share a vibetrack, anyone with its link can play it. Links don't show who made them, and you can turn sharing off.

#Tip4Fuel and streaming (if you use it)

If you connect your Chaturbate room, you give Fluffer a token from Chaturbate. It stays on your phone and is sent only to Chaturbate. Fluffer then receives your room's tips, chat and room events from Chaturbate. Your room's chat is used on your phone while you're live and we don't store it. If you turn on Felix or Vibe Market, a few recent chat lines are sent to our AI provider (see "AI features").

For each tip we store the amount, the time, the tipper's Chaturbate username, the fuel it added and, in Fan Control, Felix's decision and short reason, so you can see your tip history, statistics and leaderboards. Tip history stays until you delete it or your account, unless you choose to have older tips deleted automatically in Tip Statistics → Keep tip history. The OBS overlay widgets are served from your phone over your own Wi-Fi network and show tippers' usernames on your stream, as your room already does.

If you tip a streamer who uses Fluffer: Fluffer receives your tips from Chaturbate through the streamer's own connection. We store your Chaturbate username, the tip amount and time, and what the tip did, so the streamer can see their tip history. Your username may show in the streamer's overlay unless you tip anonymously. We keep tip records only as long as the streamer keeps their tip history, and use them for nothing else. To ask what we hold or have your username removed, email privacy@fluffer.app with your Chaturbate username.

#Messages and calls (where available)

Messages and calls are being rolled out and may not be available to you yet.

Messages, photos, videos, voice messages and calls between Fluffer friends are end-to-end encrypted. They're locked on your phone and can only be unlocked on the phones of the people you're talking to, so we can't read, see or hear them. Photos and videos have location and camera details removed on your phone before they're sent.

To deliver them, our servers handle information that isn't end-to-end encrypted:

• who your friends are, who you message and call, and when;
• how large messages are and whether they were delivered;
• your groups and their members, and who you've blocked;
• a random ID for each of your phones and when it was last seen.

Encrypted messages and media wait on our servers only until they're delivered, and at most 30 days (view-once media: 24 hours). Encrypted chat backup is on by default so you don't lose your chats when you change phones. Only your key can unlock it, we don't have your key, and turning backup off deletes it. Calls are not recorded and we keep no call history. Our call servers, in Virginia, USA, keep technical logs without IP addresses for 2 days.

Other people can find you by your exact username only if you turn that on. Online and typing indicators can be turned off.

#Fluffer Audio (if you use it)

Audiobook files you add stay on your phone. Only add files you have the right to use. To time vibration to a chapter, your phone turns the chapter's audio into text on the phone where it can. Otherwise, with your permission, it sends short pieces of the chapter's audio (4 MB or less) to our transcription provider, Groq, to turn into text. [To be confirmed] The chapter's text, not its audio, is then sent to our AI provider to time the vibration. Searches for books send your search words to the catalogs we search (Audible, Open Library, Audnexus, LibriVox and the Internet Archive). If you post takes or comments, they appear with your public creator profile.

#Your phone's features

Fluffer asks before using these, and you can turn them off in your phone's settings:

• Camera: scanning QR codes, taking a profile photo, video calls, photos in Messages, and games you allow.
• Microphone: Music mode (it reacts to sound on your phone and records nothing), voice messages, calls, and games you allow to listen for words. Speech in games is recognized on your phone.
• Photos: saving pictures and videos you make in games (Fluffer can only add them), and choosing a profile picture.
• Bluetooth (and Location on Android 11 and older, which Android needs for Bluetooth scanning): to find and connect to your toy. We don't collect your precise location. We may know your approximate region from your IP address.
• Notifications: messages, calls, invites and updates. Lock-screen previews are off unless you turn them on, and never include what a message says. For each phone we keep a notification token with its type, app version and language, and remove it when you sign out or delete your account. We keep a log of non-message notifications we send you, including their title and text, for up to 30 days to fix delivery problems.
• Face ID or fingerprint: if you turn on app lock, your phone checks your face or fingerprint and tells Fluffer only whether it matched. We never receive biometric data.
• Face hiding: when you choose to hide faces in a photo or video, your phone finds faces so it can blur them. It doesn't identify anyone, and nothing about the faces is stored or sent to us.
• Now Playing (Android, optional): if you allow notification access, Fluffer reads only what another audio app is playing (the app, title, artist and position) so it can follow along. It ignores all other notifications.

#Support, crashes and technical information

When you contact support or report a bug through Gleap, we receive what you send and your account ID. Bug reports can also include a screenshot of the screen you were on and technical logs from the app, so check the screenshot before you send it. When the app crashes, our crash reporting (Sentry) sends us technical details and your account ID, configured not to include your name or email.

When the app connects, our servers and providers see your IP address and basic device details, such as a device label (for example "iPhone, iOS 26"). We keep IP addresses used to block repeated sign-in attempts for up to 7 days, and only a scrambled (hashed) version for account transfers and remote codes.

Our website uses only the cookies and storage it needs to work, plus the Gleap support widget, which stores an identifier so it can show your support conversation. [To be confirmed] We don't use advertising or analytics cookies.

#Sensitive information and your consent

Using Fluffer can reveal information about your sex life and sexual wellness: the fact that you use Fluffer, the toys you connect, how you control them, your patterns and vibetracks, your toy settings, and some Tip4Fuel and Fluffer Audio activity. We treat all of this as sensitive personal information and, where it applies, as consumer health data.

We process it only with your consent and only to provide and secure the features you use. We ask for that consent when you create an account or first use Fluffer.

Saving your toy data to your account is a separate choice, and it's off unless you turn it on. Toy data means your patterns, vibetracks, folders and toy names. With it off, they stay on your phone and we don't receive them. With it on, we keep them in your account so they're on all your phones. You can change this at any time in Settings → Privacy, and delete what's already in your account from there. You can also withdraw your consent completely by deleting your account, or by clearing Fluffer's data on your phone if you use it as a guest. Without consent, we can't provide the features that depend on it.

We don't use sensitive information to infer things about you, sell it, use it for advertising, or use it to train AI.

#What our staff can and can't see

We can't see: your messages, photos, videos, voice messages, group names or reactions; your calls; your encrypted files and chat backup; your password; your Chaturbate token; your play history; or your own audiobook files.

A small number of our staff can see, when they need it for support, safety or fixing problems: your email, birthday, country, language, how you sign in and when you last signed in; your tip history with your account email; who your friends are and who you've blocked; and the facts of a report (when it was made, which rule it fell under and what happened), never the reported content itself. Staff access is logged.

Stored on our servers but not end-to-end encrypted: the patterns and vibetracks you save, your toy names and settings, and documents apps save for you. (Files apps save are end-to-end encrypted.) Our engineers could access these if they had to, for example to fix a problem, and that access is limited and logged. [To be confirmed]

#How we use information

We use information to:

• run Fluffer and the features you choose, and sync your account across your phones;
• keep Fluffer safe and secure, prevent abuse and fraud, and enforce our Terms;
• respond to you and provide support;
• fix problems;
• send you service messages, and notifications you've allowed;
• meet legal obligations.

We don't use your intimate information or your messages for advertising or marketing, we don't sell them, and we don't use them to train AI.

#AI features

A few optional features use AI. Each is off until you turn it on, and Fluffer asks you before any of your information is sent to an AI provider. Each sends only what it needs, never your name, email or username:

• Felix (Fan Control): the tip amount, how many times this person has tipped, a mood score, and that tipper's last 5 chat lines. We remove usernames, but the chat text itself may mention names. Felix decides how much fuel a tip earns, and we store its decision and short reason with the tip.
• Vibe Market: up to 40 recent room chat lines (usernames removed) and room statistics, such as viewer count, to read the room's mood.
• Fluffer Audio: a chapter's text, to time vibration to the story, and, if your phone can't transcribe it, short pieces of the chapter's audio to Groq to turn into text.

Not sent to AI: your messages, calls, patterns, play history, toy settings, or anything about how you use your toy.

Our AI service provider and Groq (transcription) process this for us under contracts that don't allow them to use it to train their models. [To be confirmed] You can turn each one off again on its mode's page (Tip4Fuel → Mode), or by using You Control, which uses no AI.

#Keeping people safe

Because Fluffer is end-to-end encrypted, we don't scan your messages. When someone reports a message, their phone sends us the reported message or media so we can check the report is genuine. Every profile picture you upload, and pictures and video frames that someone reports, are checked automatically against known child sexual abuse material using Microsoft PhotoDNA. Nothing else is scanned. Our staff don't view reported messages or media: the checks are automated, and staff see only facts about a report.

If reported material matches known child sexual abuse material, the law requires us to report it to the National Center for Missing & Exploited Children (NCMEC), which may share it with law enforcement in the US and other countries. We file these reports automatically, without anyone at Fluffer viewing the material. A report includes the matched files; the user ID, username, display name and email of the account that sent them; and the user ID and username of the person who reported it. We also report to NCMEC any other apparent child sexual exploitation, enticement or trafficking of a minor that we become aware of. We keep reported material and related information securely for at least one year, as federal law requires, and may keep it longer to help protect children. Accounts reported to NCMEC are suspended without notice.

If an intimate image of you is on Fluffer without your consent, you can ask us to remove it, even if you don't have an account. See our Safety page. We remove valid requests within 48 hours.

Accounts that receive several verified reports may be suspended automatically, as described in our Terms. You can appeal a suspension once in the app.

#Third-party apps and games, and the Remote API

Apps and games in the Fluffer Store are made by us or by other developers. An app gets nothing about you until you allow it. If you allow it, it gets:

• a private ID that's different for every app;
• your display name;
• confirmation that you're 18 or older;
• your profile picture, only if you agree.

It never gets your email address. An app you allow to see tips receives them while you use it, including amounts, tip messages and tippers' usernames (unless the tipper is anonymous). Apps can save data in your account. It's kept separate for each app, and you can erase it per app. You can see and remove apps' access in Settings → Apps with access.

Each developer is responsible for how their app uses what you allow it to see, so read an app's own privacy notice before you use it.

If you create Remote API keys, the code or AI assistants you connect can do what the key allows while remote control is on: control your toy within your power limits, add fuel or tips, or read your toy's status. You can delete a key at any time.

#Who we share information with

We share information only:

• With service providers who run parts of Fluffer for us, under contracts that limit their use of it to providing their service to us, require them to protect it, and require them to delete it when we ask:
• Supabase: database, sign-in and storage, in Virginia, USA
• Vercel: website and servers
• Hetzner: call servers in Virginia, USA
• Google Cloud: malware scanning of developer uploads (file fingerprints are also checked against abuse.ch MalwareBazaar)
• Our AI service provider: AI features
• Groq: audio transcription
• Sentry: crash reports
• Gleap: support and bug reports
• Expo: app updates
• Apple and Google: sign-in and notifications
• Google (Gmail): account emails
• Microsoft: PhotoDNA checks
• With book catalogs (Audible, Open Library, Audnexus, LibriVox and the Internet Archive): only the words you search for and your phone's IP address, not your account.
• With Chaturbate, when you connect your room, as needed for Tip4Fuel.
• With other users and apps, when you share something, allow an app, or message or call someone.
• With NCMEC and law enforcement, as described in "Keeping people safe", and to comply with the law or a valid legal request, to protect people from harm, or to protect our rights.
• In a business transfer, such as a merger or sale. The new owner must follow this policy, and we'll tell you before your information is covered by a different one.

We don't sell personal information, "share" it for cross-context behavioral advertising, or use it for targeted advertising, and we haven't in the past 12 months.

#How long we keep information

These are the longest we keep each kind of information. We may delete it sooner, and we don't promise to keep any of it for you, so keep your own copies of anything that matters to you.

#What stays after you delete your account

Deleting your account removes your profile, profile picture, username, library, toy names and settings, tip history, friends and groups, encrypted backups and cloud files, app data, Remote API keys and notification registrations from our servers, and clears Fluffer on that phone. We also ask our service providers to delete their copies. It can't be undone. Your public Fluffer Audio takes and comments and your Store reviews are deleted too.

We keep only:

• safety records, such as reports involving you, suspensions and NCMEC filings, for the periods above, so a banned person can't simply start over;
• our staff audit log;
• message delivery records, until they expire;
• information we must keep to comply with the law or to defend legal claims;
• backups, until they expire.

Things other people already have, such as messages you sent them, stay with them.

#Your choices and rights

Everyone can:

• delete their account: in the app, Settings → Delete Account, or without the app at fluffer.app/delete-account, or by emailing privacy@fluffer.app from your account email;
• change settings and phone permissions, and turn AI features off;
• remove apps' access: Settings → Apps with access;
• ask us for a copy of their information, ask us to correct it, or ask what we hold, by emailing privacy@fluffer.app.

US state privacy rights. Depending on your state (including California, Colorado, Connecticut, Delaware, Maryland, Minnesota, Oregon, Texas, Virginia and others), you may also have the right to:

• confirm whether we process your information, and access it;
• correct it, delete it, or get a portable copy;
• opt out of sale, targeted advertising and significant profiling (we don't do any of these);
• withdraw consent to, or limit, our use of sensitive information;
• get a list of the third parties we disclose your information to.

We'll confirm it's you, normally by asking you to sign in or reply from your account email, and respond within 45 days (we may extend this once by 45 days where the law allows, and we'll tell you). An authorized agent can make a request for you with your signed permission. If we decline, you can appeal by replying to our decision or emailing privacy@fluffer.app with "Appeal" in the subject. We'll respond within 45 days (60 in Colorado). If you're not satisfied, you can contact your state Attorney General. We won't treat you differently for using your rights.

We use and disclose sensitive personal information only to provide the services you ask for, which is why we don't offer a separate "Limit the use of my sensitive personal information" link. We treat Global Privacy Control as an opt-out request. Because we don't track you across sites, our website doesn't change its behavior for "Do Not Track" signals.

California notice at collection.

EEA, UK and Switzerland. [To be confirmed]

#Security

We protect information with encryption in transit, end-to-end encryption for messages, calls and files apps store in your encrypted cloud, secure storage for keys on your phone, and access controls. The OBS overlay is served by your phone over your own Wi-Fi network. If you lose all your phones and your recovery code, we can't recover end-to-end encrypted data. We can't promise nothing will ever go wrong, so use a strong password and turn on app lock. If we learn of a breach that affects you, we'll tell you as the law requires.

#Adults only

Fluffer is only for people 18 and over. Everyone, including guests, must confirm their age before using Fluffer. We ask for your birthday when you sign up. We don't check ID, so we rely on your honesty, and we may ask you to confirm your age later. We don't knowingly collect information from anyone under 18. If we learn we have, we delete it and close the account. If you believe a minor is using Fluffer, tell us at safety@fluffer.app.

#Where information is processed

We're based in the United States. Our database is in Virginia, USA, and calls run through Virginia too. Our providers may process information in other countries.

#Changes

We'll post changes here and update the date above. If a change is significant, we'll tell you in the app or by email before it takes effect. We won't use information we've already collected in a materially different way without your consent.

#Contact

MB Technologies LLC, the controller of your information 530B Harkle Rd, Ste 100, Santa Fe, NM 87505, USA Privacy questions and requests: privacy@fluffer.app Safety: safety@fluffer.app Everything else: support@fluffer.app Phone: (505) 501-7874