Zhipu Qingyan and Kimi Are Involved in Gathering Personal Information Illegally

Recent developments have placed two Chinese AI platforms—Zhipu Qingyan and Kimi—under intense scrutiny. Authorities have alleged that both applications collected user data without clear permission. These reports have once again pushed the discussion about data privacy and the ethical use of artificial intelligence to the forefront, especially in a rapidly digitising world.

Allegations Against Zhipu Qingyan and Kimi

According to a national notice issued on 20 May 2025, Zhipu Qingyan and Kimi were identified among 35 apps that failed to comply with data protection regulations. The core issue lies in the unauthorised collection of user data—specifically, gathering more information than users consented to or collecting data unrelated to the app's primary function.

Zhipu Qingyan, developed by Beijing Zhipu Huazhang Technology, positions itself as a generative AI assistant capable of handling a range of tasks such as general queries, creative writing, and code generation. It’s based on the ChatGLM2 model and aims to mirror capabilities found in other well-known global AI assistants. Despite its advanced interface, the app has been found collecting additional data outside its operational necessity.

Kimi, developed by Moonshot AI, has also come under fire for similar reasons. While the app offers AI-driven functionalities and has attracted attention for its sleek interface and responsive dialogue system, the recent allegations suggest it may be accessing personal user data that is irrelevant to its services.

The issue goes beyond a single app malfunction. It brings attention to systemic oversights in the development and deployment of AI technology. When developers push AI boundaries without prioritising legal compliance or user trust, they risk undermining the very innovation they aim to promote.

Read Also: Top AI Question Answer Apps and Websites to Know in 2025

Legal Context and Data Privacy Implications

China’s Personal Information Protection Law (PIPL), enacted in 2021, sets out strict requirements for data handling. Under the law, companies must obtain informed, explicit user consent before collecting or processing personal data. Moreover, the information gathered must serve a clear, functional purpose related to the service the application provides.

In the cases of Zhipu Qingyan and Kimi, the primary concern is a violation of the principle of necessity. Collecting data not directly linked to app functionality suggests a disregard for legal requirements and ethical considerations. It’s not just about what data is collected, but why and how.

Equally worrying is the lack of transparency surrounding these platforms. Publicly available whitepapers are either too technical to interpret or, in some cases, completely inaccessible. For instance, attempts to view the whitepaper associated with Zhipu Qingyan have been unsuccessful, raising further concerns about accountability and user education.

The fallout from these allegations could be significant. If proven, these breaches may lead to penalties, regulatory actions, or even a ban on operations for non-compliant apps. But more broadly, they reflect a larger challenge faced by AI developers: how to balance technological advancement with regulatory expectations and user rights.

Read Also: NSFW AI Art: Guide and List of Websites

Broader Impact on AI and Crypto Technologies

Although Zhipu Qingyan and Kimi are not directly associated with cryptocurrency, the case holds valuable lessons for the crypto space. Both industries rely heavily on trust, transparency, and data integrity. Just as users must trust an AI app not to misuse their data, investors must trust crypto platforms to safeguard their assets and personal information.

Blockchain technology often promotes decentralisation and privacy as core benefits. Yet, if AI platforms tied to crypto projects engage in questionable data practices, they could erode user confidence across both sectors. This is especially relevant for newer crypto tokens that integrate AI features without fully disclosing how they process or secure user data.

It’s also worth noting that some blockchain projects claim to incorporate AI capabilities similar to those offered by Zhipu Qingyan or Kimi. In such cases, developers and investors alike should conduct thorough due diligence. Verify whitepapers, assess the necessity of permissions granted, and question the legitimacy of any AI-linked feature that seems to collect more information than it should.

There’s an urgent need for clear industry standards that span both crypto and AI. These should include consistent policies on user consent, data storage, and third-party sharing. Without them, users remain vulnerable to exploitation by technology that often operates behind opaque systems.

Note of Caution

It’s important to remain critical when engaging with technologies or digital assets whose structures and intentions are not fully transparent. In the case of Zhipu Qingyan, even its whitepaper—a document crucial for understanding the technical and strategic framework—was not accessible at the time of writing. This lack of visibility is a red flag for potential users or partners.

Want to explore regulated investment options with transparent data policies?

Register and invest with Bitrue, a trusted crypto exchange platform known for its user-centric approach.

Sign up at Bitrue

Frequently Asked Questions

What data were Zhipu Qingyan and Kimi collecting illegally?

The apps reportedly gathered more personal information than users agreed to, including data unrelated to their primary functions.

Is this a violation of Chinese law?

Yes, it appears to breach the Personal Information Protection Law, which mandates informed consent and data collection tied to clear, stated purposes.

Can these issues affect crypto and blockchain projects?

Yes, any AI-driven technology integrated with crypto services must also comply with data laws. Lack of transparency can erode user trust in both sectors.