Trust & Security
How PonPon protects your data — in plain language. Last updated: June 25, 2026
What we do with your data
PonPon is an AI creation platform that gives you access to many AI models from a single place. To generate something, the prompt and any media you submit are sent to the AI model you chose. We hold your account details (such as your email) and your generation history so the Service works for you. We give you multi-model power and help you keep track of where your data goes.
Do you train AI on my data?
No. We do not use your prompts, uploads, or generated content to train our own models, and we do not sell your personal data. When your prompt is sent to a third-party model provider to fulfil a generation, we are securing written no-training / no-retention commitments from those providers. See our sub-processor list for who they are.
Where is my data stored?
Account data and generated media are stored on managed cloud infrastructure, encrypted in transit (TLS) and at rest. Data may be processed in the United States and other regions depending on the provider involved; the per-provider regions are listed in our sub-processor list.
Which AI providers do you use?
Because we aggregate many models, your data flows to the provider behind the model you pick (for example OpenAI, Google, ByteDance or Kuaishou). We publish the full list openly — including the data each receives and the region it operates in — on our sub-processor list.
How do I delete my data?
You can delete generated items from your library at any time. To delete your account and the personal data associated with it, or to request a copy of your data, email privacy@ponpon.ai and we will action it in line with applicable law.
Your rights
Under GDPR / UK GDPR you have the right to access, correct, delete, and port your personal data, and to object to or restrict certain processing. You also have the right to lodge a complaint with your data protection authority — in the UK, the Information Commissioner's Office (ICO). Full detail is in our Privacy Policy.
For enterprise & procurement
Running a vendor security review? We can provide a Data Processing Agreement (DPA), a security overview with a data-flow diagram, and our full sub-processor list. We are also happy to complete your security questionnaire or sign your DPA. Reach us at privacy@ponpon.ai.
What we have not done yet
We are honest about our stage: we have the GDPR-aligned basics in place, but we do not yet hold SOC 2 or ISO 27001 certification. We will pursue formal certification as enterprise demand makes it worthwhile.