Privacy Policy

Your privacy is important to us. This policy explains what data we collect, why we collect it, how it is used, and what becomes public when you choose to publish or share.

AiToolK.it is operated by BytesBrains Pte. Ltd.

1. Data We Collect

Basic account data (name, email, and photo where provided) from Google or email sign-in; the content you create — prompts, categories, tags, notes, AI companions, and the websites you build; images you upload (stored in Firebase Storage); your Naderu chat conversations (see "Chat, AI & Generation" below); and usage metadata such as message counts and storage used, which we use to apply plan limits.

2. How We Use Data

To provide and synchronize your workspace, organize your content, generate chat replies and the websites and companions you create, apply plan limits, improve reliability, and communicate important notices.

3. Content You Publish or Share Is Public

Some features are public by design. When you publish a website, its content becomes publicly accessible on the internet at a *.wrok.in address, served through our content-delivery provider (Cloudflare); it can be viewed, cached, and indexed by third parties such as search engines. When you share an AI companion to the community gallery, it becomes visible to other users, who may install it. Do not put anything private in content you publish or share. When you unpublish or remove such content, we remove it from our systems, but copies already cached or indexed by third parties may persist for a time outside our control.

4. Data Sharing & Sub-processors

We do not sell your personal data. We rely on a small set of trusted providers that process data on our behalf: Google / Firebase (authentication, database, file storage, and hosting); Cloudflare (serving your published websites); and third-party AI providers (such as OpenAI, Google, Anthropic, and xAI) that process chat and generation content as described in section 7. We share only what each provider needs to perform its function.

5. Security

We apply security rules and best practices; no system is 100% secure. You are responsible for safeguarding access to your account.

6. Your Choices

You can export or delete your data, and unpublish or remove anything you have published or shared. Contact support for account-deletion assistance if needed.

7. Chat, AI & Generation

Messages you send to Naderu are stored with your account so your conversations sync across your devices. To generate each reply — and to generate the websites and companions you create — your message or creation brief and the relevant recent context are sent to a third-party AI provider (such as OpenAI, Google, Anthropic, or xAI) that processes them on our behalf under its API terms; we send only the content needed to produce the result — never your name, email, or account identity. Replies are stored alongside your messages together with technical metadata (such as token counts and reply language) used for service monitoring. When you delete a chat, its messages are deleted from our active systems as well (cleanup completes shortly after); if backup copies exist, they expire automatically within our backup retention period. Contact support with any deletion question.

8. Voice Input

Voice features (like speak-to-fill) are optional. When you use them, your dictated audio is processed by your device's operating system, which may send it to the platform's speech provider (for example, Google or Apple) to convert your speech to text. AiToolK.it never receives, stores, or shares your voice audio — the app only receives the resulting text, and nothing is submitted until you choose to send it. You can revoke microphone access at any time in your device settings; everything still works by typing.

9. Retention & International Transfers

We keep your data for as long as your account is active or as needed to provide the service, and delete it on request. Our providers may process data in countries other than your own; where they do, they act as our processors under their applicable terms.

10. Children

The service is not directed to children under 13 (or the minimum age required in your country). If you believe a child has provided us data, contact support and we will remove it.

11. Changes

We may update this policy. Significant changes will be highlighted in-app.

Last updated: 26 July 2026