Privacy Policy

Effective date: October 7, 2026

Who we are and what this policy covers

Ngini (“ngini”, “we”, “us”, “our”) is a free AI assistant and creative studio available at https://ngini.com. In one chat, ngini can research a topic, write and edit text, plan your week, generate images, video and music, write and explain code, and read the files you upload (for example spreadsheets, slides and documents). You can use the core experience in your browser without creating an account.

This privacy policy explains what personal data we collect when you use ngini (the website, the mobile app, and the related APIs), why we collect it, how we use and share it, how long we keep it, and the rights you have over it.

Information we collect

Information you give us

  • Account information. If you create an account, we collect your email address, a username, and (optionally) a display name and profile image.
  • Content you submit. The prompts you type, messages, memories, and any files or images you upload so ngini can work on them.
  • Generated content. Text, images, video, audio, code and other output produced for you by the AI tools, together with the prompts that produced it.
  • Support and feedback. Messages you send to our support or feedback channels.

Information collected automatically

  • Usage and device data. IP address, browser type and version, operating system, device identifiers, language, referring page, pages viewed, and interaction events (for example which tool you used and whether a generation succeeded).
  • Cookies and similar technologies. A small number of strictly necessary cookies and local-storage entries, used to keep you signed in, remember your language/market choice, and measure aggregate usage. We do not use advertising cookies.
  • Credits and billing data. Your credit balance, credit purchases and consumption. Payments are processed by Stripe; we never receive or store your full card number.

Information from sign-in providers (Google, Apple)

If you choose “Continue with Google” or “Continue with Apple”, the provider sends us a unique account identifier and basic profile information: your name, email address, and, where you have one, your profile picture. We use this only to create and secure your ngini account and to display your name/avatar inside the product. We do not request or receive access to your Gmail, Google Drive, Google Calendar, contacts, or any other Google service data, and we do not use Google user data to build advertising profiles.

Google API Services: Limited Use. ngini’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use Google user data only to provide and improve the sign-in and account features described here; we do not sell it; we do not use it for advertising; we do not transfer it to third parties except as necessary to provide those features or as required by law; and we do not allow humans to read it except with your explicit consent, for security purposes, to comply with law, or where the data has been aggregated and anonymised.

How we use your information

We use personal data to:

  • provide, operate, maintain and improve ngini and its AI tools;
  • generate the responses, images, video, audio and code you ask for;
  • create and secure your account, and keep you signed in;
  • manage your credits, process payments, and provide billing transparency;
  • send service messages (security alerts, billing, support, material policy changes), not marketing you did not ask for;
  • measure aggregate usage and diagnose errors so we can fix and improve the product;
  • detect, prevent and respond to fraud, abuse, and violations of our Terms of Service or Community Guidelines;
  • comply with our legal obligations.

We do not sell your personal information. We do not use your prompts, uploads, or conversations to train our own or third parties’ AI models, and we do not use advertising cookies or third-party ad trackers.

Where the GDPR applies, we rely on: performance of a contract (providing the service you asked for), legitimate interests (keeping the service secure, preventing abuse, and improving the product, balanced against your rights), consent (where we ask for it, e.g. optional account creation or optional memory features), and legal obligation (billing, tax and lawful requests).

When we share information

We share personal data only with service providers that help us run ngini, and only as needed to provide the service:

  • AI model providers: your prompt (and any file you attach to it) is sent to the model provider that generates the result. Providers process it to return the output and are bound by contract not to use it for training.
  • Cloud and infrastructure providers: hosting, storage, content delivery and logging, on infrastructure located in Germany (European Union).
  • Sign-in providers: Google and Apple, when you choose to sign in with them, as described above.
  • Payment processor: Stripe, for one-off payments and subscriptions.
  • Email and support providers: to deliver account emails and support replies.
  • Authorities: when required by law, subpoena, or court order, or to protect the rights, safety and security of our users and the public.
  • Successors: if ngini is involved in a merger, acquisition or asset sale, data may be transferred as part of that transaction, under this policy.

Data retention

  • Account data is kept while your account is active and is deleted (or anonymised) within 30 days of you closing your account.
  • Conversations, memories and generated content are kept until you delete them or close your account.
  • Uploaded files are kept only as long as needed to produce your result, unless you save them to your account.
  • Payment and invoice records are kept for up to 7 years to meet tax and accounting obligations.
  • Server logs and aggregate analytics are kept for a limited period and then deleted or anonymised.

Security

We protect your data with encryption in transit (TLS) and at rest, strict access controls, least-privilege service accounts, and regular reviews. No system is perfectly secure, so we cannot promise absolute security, but we work to detect and remediate issues quickly.

AI content rules: no non-consensual intimate imagery

ngini’s AI tools must not be used to create non-consensual intimate imagery (NCII), sexual content depicting real people, or any content that sexualises minors. This is prohibited by our Terms of Service and Community Guidelines, we block and remove such use, and we report it where the law requires. ngini does not use Google APIs to generate NCII.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to receive a portable copy, and to withdraw consent at any time.

  • EEA/UK: you also have the right to lodge a complaint with your local supervisory authority.
  • California (CCPA/CPRA): you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights. We do not sell personal information and we do not share it for cross-context behavioural advertising.

To exercise any of these rights, email contact@ngini.com. We will verify your request and respond within the timeframe required by law (30 days under the GDPR, 45 days under the CPRA).

International data transfers

Our infrastructure is hosted in Germany. Where personal data is transferred outside the EEA/UK (for example to a model or payment provider), we rely on appropriate safeguards such as Standard Contractual Clauses and equivalent measures.

Children

ngini is not directed to children. You must be at least 16 years old (or the minimum age of digital consent in your country) to use ngini. We do not knowingly collect personal data from children; if we learn we have, we delete it.

Changes to this policy

We may update this policy as the product or the law evolves. We will post the new version here with a new effective date and, for material changes, notify you in the product or by email.

Contact