Privacy Policy

1. Who is responsible for your data

The controller of your personal data is Nocty (“we”, “us”), who runs Nocty. For any question about privacy, or to exercise your rights, write to support@nocty.chat.

This policy covers the Nocty mobile app, the servers it talks to, these web pages and your communications with us. It explains what data we process, why and on what legal basis, who receives it, how long we keep it and what your rights are. It is part of our Terms of Service.

2. The data we process

We only process data that you give us or that results from your use of the Service. We don’t buy data or receive it from other companies; the only exception is the information about your purchases that Google Play gives us when you buy credits (see “Purchases” below).

• Account data: your email address; your password, stored only as a salted, deliberately slow cryptographic hash (PBKDF2-SHA256), never in readable form; your display name (until you choose one, we use the part of your email address before the @); your app language; the date you confirmed you are 18 or older; the version of the Terms you accepted and when; when your account was created, set up and last changed, and when your password last changed; whether and when you confirmed your email address; whether you received the welcome bonus; and your account type (regular, official or administrator).
• Sign-in sessions: for each device where you are signed in, a random session identifier; cryptographic hashes (never the tokens themselves) of your current and previous sign-in tokens; when the session started, was last used and expires, and whether and why it was ended; and the device description the app sends (app version, operating system and its version).
• Characters you create: every field you fill in (name, tagline, gender, age, relationship type, art style, appearance, traits, personality, speaking style, backstory, scenario, greeting, secret and tags); whether the character is private or public and its status; its portraits, with the appearance text and technical settings the current one was made from; a fingerprint of the last version approved by moderation; its statistics (likes, number of people who chatted with it, messages and counted reports); and when it was created, changed and published. Your display name is stored with it as its creator.
• Chats: the messages you send and the characters’ replies, with their dates; your trust points with the character and how many you gained today; the reply length you chose; a short preview of the latest message; a summary of the earlier part of the story that an AI writes from time to time (it can include facts you shared about yourself); whether a reply was refused; and the AI usage and credits of each reply. Suggested messages are not stored unless you send them.
• Community activity: the characters you like, the characters you have chatted with, and the characters you report, with the reason you give and the date.
• Reports of AI messages: the reason you give; a copy of the reported message as it was when you reported it; a copy of your own message right before it (there is none for a greeting); which character and message the report refers to; the date; and whether we have reviewed it.
• Credits and usage: your wallet (balance, free credits used today, credits spent today, streak, last daily bonus, and lifetime totals of credits and AI tokens); credits reserved for AI actions in progress; daily usage statistics (credits, AI tokens, replies, portraits and other AI actions, their cost to us, and the counters behind the daily limits).
• Purchases: for each purchase, the credit pack and its credits, its list price in US dollars, the platform and the date. For purchases on Google Play also: the Google Play order number, the purchase token and the product; whether it was a test purchase by a tester (no money is charged); when the app sent us your agreement to receive the credits straight away and your acknowledgement that you then lose your right of withdrawal; when the purchase was confirmed to Google Play; when we emailed you its confirmation; and, if the purchase was refunded or reversed, when, and how many credits we took back. To make sure a purchase can only be credited to your account, the app gives Google Play a purchase identifier for your account with each purchase: a one-way cryptographic hash of your internal account identifier, which doesn’t reveal your email address. Google Play tells us whether the payment is complete, pending, cancelled or refunded, but never gives us your payment details. Some versions of the app also offer test purchases, marked as such, in which no payment takes place.
• Security data: your IP address (for IPv6 addresses, only the first half, which identifies the network) and the email addresses typed on the sign-in screen, stored in short-lived counters that limit sign-up, sign-in, session-renewal and email-code attempts; and, when we email you a one-time code to confirm your email address or to reset your password: the address it was sent to, what it is for, the code itself stored only as a keyed cryptographic hash (never in readable form), when it expires, when it was last sent and the number of attempts to enter it. A new code replaces the previous one for the same purpose.
• Server logs: for each request to our servers, the time, a request identifier, the address path called (which can contain character or message identifiers), your internal account identifier, the result and how long it took; and records of events such as sign-ups, sign-ins, purchases, reports, account deletions and the usage figures of AI calls (tokens and cost). They are designed not to contain your messages, passwords, sign-in tokens or email address. Our hosting provider may add technical details of the request to these logs, which can include your IP address and approximate location.
• Support communications: the emails you send to support@nocty.chat and our replies, including requests to exercise your rights: your email address and name as they appear in the email, what you write, any attachments, and the technical details the email carries (such as its date and the mail servers it passed through). Also the service emails we send you (section 4). If you ask for a password reset, we create a temporary password for you.
• On your device: see section 10.

We don’t collect your precise location, contacts, photos, microphone recordings, advertising identifier or browsing history, and the app contains no third-party analytics, advertising or tracking tools.

3. Sensitive information

We don’t ask for sensitive information, such as information about your health, sex life or sexual orientation, religion, political opinions or ethnic origin, and we recommend that you don’t include it in your messages, display name or characters. If you choose to include it in a chat anyway, we only use it to provide that chat: it is sent to Anthropic to write the replies, suggestions and story summaries (section 5), it can end up in the story summary, and it stays in that chat until you reset the story or delete your account. If you report a message, the copies kept with the report (your previous message and the reported reply) follow the retention period for reports (section 9), even if you reset the chat. Please don’t include personal data about other people either.

4. Why we use your data and on what legal basis

• To provide the Service you signed up for (performance of our contract with you, Article 6(1)(b) GDPR): creating and running your account and sign-in sessions; storing and showing your characters and chats; writing AI replies, story summaries, message suggestions, character drafts and portraits; publishing your public characters in Discover; managing your credits, bonuses, streaks and purchases (including checking each purchase with Google Play and confirming it to Google Play); answering your messages; and sending you important service emails, such as the codes to confirm your email address or reset your password, notice of changes to our Terms or this policy and the confirmation of each purchase.
• To keep the Service safe and lawful (our legitimate interest in protecting users and the Service and in enforcing our Terms, Article 6(1)(f), and our legal obligations as a hosting service under the EU Digital Services Act, Article 6(1)(c)): reviewing public characters before they are published, handling reports, hiding or removing content, suspending abusive accounts and cooperating with the authorities.
• To prevent fraud and abuse and to protect accounts (legitimate interest, Article 6(1)(f)): limiting sign-up and sign-in attempts per IP address and per email address, applying daily limits and an overall AI budget, detecting the reuse of stolen sign-in tokens, allowing only one welcome bonus per email address, crediting a purchase only to the account it was made from, and taking back the credits of purchases that were refunded or reversed.
• To keep a record of your age confirmation, of your acceptance of the Terms and, when you buy credits, of your agreement to receive them straight away and your acknowledgement that you then lose your right of withdrawal (legitimate interest in being able to show that our users are adults and accepted our Terms, Article 6(1)(f), and our legal obligations, including the consumer-law obligation to confirm that agreement to you, Article 6(1)(c)).
• To operate and fix the Service (legitimate interest, Article 6(1)(f)): using logs and usage statistics to find and fix errors, monitor performance and capacity, and control our AI costs.
• To comply with the law and to establish, exercise or defend legal claims (Article 6(1)(c) and (f)): for example answering lawful requests from authorities, handling disputes, refunds and chargebacks, and keeping the purchase records that accounting and tax law require (section 9).

Where we rely on legitimate interests, we have weighed them against your rights and we keep the data to a minimum; you can object at any time (section 12). We don’t use your data for advertising or marketing, and we don’t currently rely on your consent for any processing. If we ever ask for your consent, you will be able to withdraw it at any time.

What you have to give us. To create an account you need to give us an email address and a password, and to use the Service you need to choose a display name (the app suggests the first part of your email address, which you can change), confirm that you are 18 or older and accept the Terms. This is a requirement of our contract with you: without it we can’t provide the Service. Everything else, such as your characters, what you write in chats and your reports, is up to you, although some features need it (for example, a chat reply needs your message). No law requires you to give us any data.

5. How the AI features use your data

Replies, story summaries, message suggestions, character drafts, safety reviews and translations are written by Claude AI models from Anthropic. Portraits are painted by FLUX image models running on Cloudflare Workers AI. Our servers send them only the text each task needs:

• Chat replies and “Suggest my next message”: the character’s description written by its creator (for replies, including its secret once your trust level unlocks it), your display name, your trust level, your app language, the story summary, the recent messages of the chat (up to the latest 80 since the last summary) and, for replies, your new message.
• Story summaries: your display name, the character’s name, the previous summary and a block of older messages from the chat.
• Character drafts (“generate from idea”): the idea you type and the options you choose.
• Safety review of public characters: every field of the character (including its secret), the appearance text its portrait was made from and your display name as its creator.
• Translations: a character’s greeting, when someone starts a chat in a different language (the translation is stored and reused for other people who use that language); and a character’s appearance, which is rewritten in English, without the character’s name, before a portrait is painted.
• Portraits: a short English description built from the character’s art style, gender, approximate age and appearance (without its name) and an expression chosen from its traits. Nothing about you is included.

We never send your email address, your account identifier or your IP address to Anthropic or to the image models: the requests come from our servers. Your trust points come from a rating that the AI adds to each reply (how your message made the character feel); it only affects the game.

Anthropic processes this data as our processor. Under its terms it may not use it to train its models, and it deletes it within 30 days, unless the content is flagged as a possible violation of its usage policy (in which case it may be kept for up to 2 years, and the related safety scores for up to 7 years) or the law requires it to be kept longer. Cloudflare does not use Workers AI inputs or outputs to train models, and the portraits are kept only in our own storage.

6. Automated decisions

• When you publish or edit a public character, an automatic contact-details filter and an AI moderator decide whether it can be published. If it is blocked, the app tells you why, and you can edit it and try again.
• A public character that receives several reports from established accounts is automatically hidden from Discover until we review it.
• An image safety filter may refuse to create a portrait.

These decisions only concern whether content is published; they don’t produce legal effects concerning you or similarly significant effects. You can always ask for a person to review any of them by writing to support@nocty.chat. We don’t profile you for any other purpose.

7. Who can see your data

• Other users can see your public characters: their profile (all fields except the secret), their portrait, their statistics and your display name as their creator. The app also receives an internal identifier of the creator’s account, which it doesn’t display. Portraits are served from web addresses that are not published anywhere but are not password-protected. Remember that the AI can reveal a public character’s secret in other users’ chats (see the Terms of Service). If you make a public character private or delete it, people who had already chatted with it can still see it (without the secret) and their own chat with it, but they can’t continue the chat. If you change your display name, characters you already published keep showing the previous one as their creator until you next edit each of them (deleted characters keep it until you delete your account).
• Nobody else sees your chats. Character creators can’t see other people’s chats with their characters, and they never learn who reported them.
• We, the operator, can access the data stored on our servers. We only do so when it is necessary: to review reports, to answer your requests, to investigate abuse or security incidents, to fix problems, or because the law requires it.
• Our service providers (processors), who only process data on our instructions and under data processing agreements: Cloudflare, Inc. (servers, database, image storage, server logs and AI image generation; sending our emails through Cloudflare Email Service; and receiving the emails sent to support@nocty.chat and forwarding them to our mailbox through Cloudflare Email Routing) and Anthropic (AI text models, see section 5).
• Google (Gmail): the emails you send to support@nocty.chat are forwarded to our mailbox hosted by Google, which stores them and delivers our replies.
• Google, for purchases: when you buy credits, Google Play processes the purchase and your payment as an independent controller, under its own terms and privacy policy. To check, confirm and follow up each purchase (including refunds), our servers exchange with Google the purchase identifiers and the purchase identifier of your account described in section 2, through the Google Play Developer API and the purchase notifications Google sends us through Google Cloud Pub/Sub; for this exchange Google acts as our service provider (processor). We never receive your payment details.
• Authorities and courts, when the law requires it, and other parties when it is necessary to establish, exercise or defend legal claims.
• A successor: if the Service is transferred to another organization, your data would be transferred with it, and we would tell you in advance.

Emails. We send account emails (the codes to confirm your email address or reset your password, purchase confirmations and important notices about your account or our terms) from no-reply@nocty.chat through Cloudflare Email Service. That address doesn’t receive replies: to write to us, use support@nocty.chat. Emails you send to support@nocty.chat are received by Cloudflare Email Routing and forwarded to our mailbox hosted by Google (Gmail), where we read, answer and keep them.

We don’t sell or rent your personal data, and we don’t share it with advertisers or data brokers.

8. Where your data is processed

• Our database and our image storage were created at Cloudflare with a location hint for Western Europe, so they are stored mainly there. Your requests are handled in the Cloudflare data center closest to you, which may be outside the European Economic Area (EEA) if you are, and portraits may be generated in Cloudflare data centers outside the EEA. The emails we send you and the emails you send to our support address also pass through Cloudflare’s network, which may process them outside the EEA.
• Cloudflare, Inc. is based in the United States and is certified under the EU-U.S. Data Privacy Framework, which the European Commission considers to provide adequate protection. Its data processing terms also include the EU Standard Contractual Clauses as a fallback.
• Anthropic stores the data it receives in the United States and may process it in data centers in the United States, Europe, Asia and Australia. These transfers are covered by the EU Standard Contractual Clauses included in Anthropic’s data processing terms.
• The purchase information we exchange with Google and the support emails in our Gmail mailbox may be processed in the United States and elsewhere. Google LLC is certified under the EU-U.S. Data Privacy Framework, which the European Commission considers to provide adequate protection; for the purchase information, Google’s data processing terms also include the EU Standard Contractual Clauses.
• You can ask us for more information about these safeguards at support@nocty.chat.

9. How long we keep your data

• Account data, wallet and usage statistics: until you delete your account. If we ask you to confirm your email address, an account whose address is never confirmed and that was never set up is deleted automatically after 7 days, or after 24 hours if someone signs up again with the same address.
• Purchases: kept in your account’s purchase history until you delete your account. When you delete it, test purchases (in which no money is charged) are deleted, and we keep the records of your paid purchases (section 2) without the link to your account (they still include the Google Play order number, which Google can match to your Google account), for as long as needed for our accounting and tax obligations, up to 6 years after each purchase, and then delete them automatically. We also need them to handle refunds and chargebacks that Google reports after the deletion. If Google tells us that a purchase was refunded before its credits were added to an account, we keep its purchase token for the same time, so that it can’t be credited later. Google keeps its own records of your Google Play purchases under its privacy policy.
• Chats: until you reset the story or delete the conversation, or until you delete your account. When you ask for a new version of a reply, the previous version is deleted. Copies of messages included in a report you sent are kept with the report, as explained below.
• Sign-in sessions: a session ends after 30 days without use, and after 90 days in any case. Ended sessions are deleted within a day, or 7 days after you sign out. Changing your password ends all your other sessions, and deleting your account deletes all of them.
• Characters: until you delete them. Deleted characters disappear from Discover and can no longer be chatted with, but we keep them in our database, with all their texts (including the secret) and their portraits, so that the existing chats of people who already talked to them keep working; they are currently not deleted automatically. Earlier portraits that you replaced are also kept in our image storage. When you delete your account, the characters that were never public are erased completely, with their texts and all their portraits; for what happens to the others, see how account deletion works.
• Likes and the record of the characters you chatted with: a like until you remove it; the record of a chat even after you reset or delete it (so that a character’s count of people who chatted with it doesn’t count you twice). Both are deleted when you delete your account; the characters’ totals of likes and of people who chatted with them keep counting you, as plain numbers that aren’t linked to you.
• Character reports: kept without a fixed time limit, with the reason you give and the date, so that we can deal with the reported characters. After you delete your account they are linked only to an internal identifier that no longer belongs to any account.
• Reports of AI messages: deleted automatically 12 months after the report. If you delete your account before then, the report is kept until that date without the link to your account and without the copy of your own message; the copy of the reported AI message is kept, and it may mention your display name or things you told the character.
• Fingerprint of your email address: when you delete your account, we keep a one-way cryptographic hash of your email address, whether it received the welcome bonus and the date of deletion, so that the same address can’t claim the welcome bonus again. We keep it without a fixed time limit, for as long as we offer the welcome bonus.
• Security counters (IP addresses and email addresses typed on the sign-in screen): deleted automatically after about 8 days.
• One-time codes we email you: a code is deleted as soon as it is used, replaced when you ask for a new one and deleted with your account; otherwise our daily cleanup deletes it within a day after it expires (codes are valid for 24 hours to confirm your email address and for 1 hour to reset your password).
• Emails we send you: we don’t keep copies of them; for purchase confirmations we only record when we sent them (section 2). Cloudflare may keep delivery records of these emails (such as the recipient address and the time) for a limited period as part of its service.
• Server logs: kept by Cloudflare for up to 7 days.
• Backups: our database provider automatically keeps a point-in-time history of the database for 30 days, which we only use to recover from incidents. Deleted data disappears from it after 30 days. If we ever restore an earlier state, we will delete again any data that had been deleted in the meantime.
• AI providers: Anthropic deletes the text it receives within 30 days (longer only in the cases described in section 5).
• Support emails: kept in our Gmail mailbox for as long as needed to deal with your request and any follow-up, and to defend ourselves against possible claims; then we delete them.

10. Data stored on your device

• Your sign-in tokens, in your device’s encrypted secure storage. They are removed when you sign out.
• Your app language, in the same secure storage, so that the app opens in your language. It stays after you sign out.
• Character portraits, cached so that they load faster. You can remove them by clearing the app’s storage or uninstalling it.
• When you copy a message, it is placed on your device’s clipboard.

This storage is strictly necessary for the app to work. The app uses no cookies, advertising identifiers or tracking technologies.

11. How we protect your data

• All connections between the app and our servers are encrypted (HTTPS).
• Passwords are only stored as salted, deliberately slow hashes. Access tokens expire after 15 minutes and are renewed with single-use tokens, of which we only store a hash; if an old token is reused, the whole session is ended.
• Sign-up, sign-in and other sensitive actions are rate-limited to slow down attacks.
• Our database and image storage are encrypted at rest by Cloudflare.
• Only the operator has access to the servers and the database.

No system is completely secure. If a data breach is likely to put your rights at risk, we will inform you and the authorities as the law requires.

12. Your rights

Under the GDPR you have the right to:

• access your data and get a copy of it;
• correct inaccurate data (you can change your display name and language in the app, although characters you already published keep showing your previous name until you edit them, see section 7; write to us for anything else, such as your email address);
• have your data erased (you can delete your account in the app at any time: see how account deletion works);
• restrict the processing of your data in certain cases;
• receive the data you gave us in a structured, commonly used and machine-readable format, and have it sent to someone else (portability);
• object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests;
• withdraw any consent you have given, without affecting the processing carried out before;
• not be subject to decisions based solely on automated processing that produce legal or similarly significant effects (see section 6).

To exercise your rights, write to support@nocty.chat from your account’s email address, so that we can check it is you. It is free, and we reply within one month (up to two more months for complex requests, in which case we will tell you).

If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or to the data protection authority of the EU country where you live or work. We would appreciate the chance to sort it out with you first.

13. Adults only

Nocty is only for people aged 18 or over, and we don’t knowingly process data of minors. If you believe a minor is using the Service, tell us at support@nocty.chat and we will close the account and delete its data.

14. Changes to this policy

This version is dated November 8, 2026. If we change this policy in a way that matters, we will tell you by email to your account’s address before the change takes effect, explaining what changes; once it does, the app will ask you to read the new version together with the Terms before you continue. Earlier versions are available on request.

15. Contact

Nocty. Contact: support@nocty.chat.