Privacy Policy

What we collect

• Account info: an account identifier, email, and public nickname from the sign-in method or profile you choose (Patreon, Google, Facebook, or email), plus your Patreon membership status if you use Patreon.
• Usage & credits: your credit balance and transaction history, and the characters, stories, prompts, and generation jobs you create.
• Generated content: the images, audio, video, and pose references you create, stored so you can return to them.
• Gallery & safety data: content you share, your Gallery reactions, reports you submit (including the selected reason and any details), and moderation actions taken in response. For automated safety checks, we may also retain content hashes, category scores, allow/block decisions, policy versions, provider request identifiers, and timestamps.
• Technical data: authentication cookies, device and browser details, IP address, and basic logs and request data our hosting and providers record to operate and secure the service.

How we use it

To provide the service: authenticate you, track and spend credits, run generations, and store your permitted content. We use automated systems to screen prompts and generated media for compliance with our Content Policy, review reports, enforce our Terms, keep the service secure, prevent abuse, protect users, and comply with law. We don't use your prompts or generated content to train our own models.

Analytics & cookies

We use Google Analytics 4 to understand how people find and use Nooklet and to measure which campaigns work. Google Analytics may process page views, interactions, referral and campaign information, device and browser details, IP-derived approximate location, and cookie or similar identifiers. We do not send your prompts, generated media, email address, or other direct account identifiers to Google Analytics, and we disable Google signals and ad personalization.

Analytics storage is denied by default. If you choose “Allow measurement,” Google Analytics may store and access analytics cookies; if you choose “Not now,” analytics storage remains denied. Nooklet stores your choice in a first-party consent cookie for up to 12 months. You can change it by clearing Nooklet's site cookies and choosing again when the consent prompt appears. Learn more about how Google uses information from sites that use its services.

Who we share it with

We use third-party providers to run Nooklet: Vercel (website hosting), Supabase (accounts, credits, and application data), Google (Analytics and, when chosen, sign-in), Meta/Facebook (when you choose its sign-in method), Stripe and Patreon (payments and membership; we never see your full card details), Cloudflare R2 (media storage), RunPod (image generation), ElevenLabs (voice generation), Atlas Cloud (motion generation), and Cloudflare Workers AI (automated content safety). Prompts and generated images may be sent to Cloudflare solely to classify whether they comply with our Content Policy. These providers process data to provide their part of the service under their own privacy terms. We don't sell your data. When required by law, or when reasonably necessary to address suspected child exploitation, credible threats, or other serious harm, we may preserve and disclose relevant content, reports, and account information to law enforcement or appropriate child-safety authorities.

Your content & retention

Characters and Stories you delete move to Trash and are permanently removed when Trash is swept. Content you choose to share in the Gallery is visible to Gallery members until you unshare or delete it. We keep account and transaction records as long as your account is active or as needed for legal, fraud-prevention, and accounting purposes. Safety reports and moderation records may be retained as needed to investigate abuse, resolve disputes, enforce our Terms, or meet legal obligations, including after related Gallery content is removed. Blocked media is not made available to users. We may keep it in access-restricted quarantine for up to 14 days for safety review before deletion; moderation metadata may be retained longer for abuse prevention, appeals, and legal compliance. You can request deletion of your account and associated content at any time, subject to records we must or are permitted to retain.

Your choices

You can ask what we hold about you or request deletion of your account and associated content by emailing info@nooklet.ai. Depending on where you live, you may have additional rights over your personal data.

Contact

Questions about your data, or to make a request, email info@nooklet.ai.