The short version
- We store what the Service needs to work: your account, your chats, memories, characters and images.
- NYVELLE stores and processes account content to provide the Service. Do not treat an AI conversation as confidential professional advice.
- This marketing website does not load an analytics script or an advertising tracker.
- Card payments for paid plans and gems are handled by Stripe; we never see or store your full card number.
- Export is on every plan.
1. What we collect
| Data | Why it is used |
|---|---|
| Email address (stored encrypted), sign-in codes and session records, 21+ confirmation date (NYVELLE uses emailed sign-in codes, not passwords) | Run your account, send notices |
| Chats, memories, characters, settings | Provide the Service and memory features |
| Generated images and portraits | Show them to you; moderation |
| Moderation logs (flags, reports, hashes of blocked images) | Safety, legal obligations, abuse prevention |
| Billing records from Stripe (customer and subscription ids, plan, amounts, dates, receipts, billing country; card brand and last four digits only) | Bill you, receipts, refunds, tax and accounting obligations |
| Subscription consent record (time, plan, price, the consent wording you agreed to, and a keyed hash of your IP address) | Prove the renewal terms you agreed to (kept at least 3 years after the order, and at least 1 year after your membership ends) |
| Sign-up records: the version of the Terms you accepted, your 21+ confirmation, and your sensitive-data consent or withdrawal (version, time) | Prove what you agreed to (kept 3 years after your account is deleted; see "How long we keep it") |
| Safety counts (how many crisis-support cards were shown each month, by category). While you have an account, your own counts are kept with your account so you can see them in Settings → Safety; they never include message text. When you delete your account, your counts are added to monthly totals with no account attached. | Safety, and the yearly report California law requires |
| Guest preview (no account): the preview conversation, chosen character and unsent draft (encrypted), a cookie that links your browser to the preview, the notice version you agreed to, and daily per-network counters kept under a keyed code instead of your IP address | Run the preview, move it into an account if you sign up, enforce preview limits, prevent abuse |
| Server logs (IP address, user agent, timestamps) | Security, rate limits, debugging |
| Approximate country looked up from your IP address on our own server, using the DB-IP "IP to Country Lite" database. It is checked on each visit and not stored with your account. IP Geolocation by DB-IP (licensed under CC BY 4.0). | Keep NYVELLE available only in the United States and its territories |
2. How we use it
To run the Service, keep it safe, bill you, answer support, and send the notices described in the Terms. Conversation context is sent to DeepInfra to generate replies with DeepSeek V4 Flash (and DeepSeek V4.1 Flash for premium-model replies), to speak replies with Kokoro voices, and, only for characters where you turn memory on, to write memory notes. Conversation context and generated replies are also checked by OpenAI's moderation service. If you create images, the image prompt (and, for "Looks like my character", the companion's NYVELLE-made portrait) is sent to Runware. Providers process requests under their own terms; NYVELLE does not promise that all provider policies are identical. NYVELLE does not use your chats to train AI models, and we do not sell your personal information or share it for targeted (cross-context behavioural) advertising.
No biometric data
NYVELLE does not collect biometric identifiers or biometric information (such as face geometry, voiceprints or fingerprints). The app does not record your voice; character voices are synthetic. "Looks like my character" images use only portraits that NYVELLE made of fictional characters, not photos you upload, and no face scan or face template is created.
Sensitive information you choose to share
Chats are open-ended, so you might tell a character about your health (including mental health), your sex life or sexual orientation, or other sensitive things. Laws such as Connecticut's Data Privacy Act treat that as sensitive data. We only process it to run the conversation you asked for: to store your chats and memories, to send the current conversation to the AI provider that writes the reply, and to run our safety checks. We ask for your clear consent to this when you sign up, record the date and the version of the wording you agreed to, and ask again if the wording changes. We never sell or share your chats or any sensitive data for advertising, and we don't use it to profile you. You can withdraw consent at any time in the app (Settings, General) or by deleting your account. After you withdraw it, the app asks for your consent again before you can keep chatting. We record each consent and withdrawal with its date.
Trying NYVELLE without an account (guest preview)
You can try a few replies before you create an account. Before the preview starts, we show you how it handles your messages and ask you to agree.
- What we keep: your preview conversation, the character you chose and any unsent draft, stored encrypted on our server for at most 24 hours. If you create a free account or sign in within that time, they move into your account and the preview copy is deleted; otherwise they are deleted after 24 hours. Memory stays off.
- Who processes it: the same providers as for accounts: DeepInfra writes the replies (and voices them if you choose), and OpenAI checks the text. When you start a preview, Cloudflare Turnstile, a spam check, runs in your browser and reads technical signals such as your IP address and browser details; our server also sends your IP address to Cloudflare when it checks the result.
- Limits and abuse prevention: to enforce daily preview limits, we count previews and replies per network under a keyed code that changes every day, not your IP address itself. These counters are deleted within 2 days. If someone says they are under 21, new previews from that network are paused for 24 hours.
- A short record: we keep a small record without your messages (the notice version you agreed to, the time, and safety or abuse signals such as a statement that someone is under 21) for up to 30 days, longer only where the law requires us to preserve it.
3. Who we share it with
- AI providers to generate replies, voices and images: DeepInfra (text, voice and memory notes), Runware (images, when you create one) and OpenAI (content moderation only). They receive the content of the current request, not your account details.
- DigitalOcean hosts our servers and backups in the United States. Encrypted copies of server backups are also kept on the operator's own storage in the United States.
- Google (Google Drive), for our server backups: encrypted copies of our server backups and of the stored images are kept in the operator's Google Drive account. Google stores these files as our processor; they are encrypted before upload with a key Google does not have, so Google cannot read them.
- Google, for your own backups, only if you choose to back up to Google Drive: the app saves an encrypted backup file to your own Drive, with access limited to the files NYVELLE creates. We cannot read the backup without your passphrase.
- Stripe processes card payments and the billing page where you cancel or update your card, under its own privacy policy.
- SendGrid delivers our emails: sign-in codes, receipts, renewal notices, cancellation links and replies to removal requests.
- Cloudflare hosts this website, runs the Turnstile spam check when you start a guest preview, and forwards email you send to our nyvelle.app addresses to our mailbox, which Google (Gmail) hosts.
- Law enforcement when the law requires it, and only what is required.
This website does not load advertising trackers.
4. Cookies
The website sets no cookies of its own. The app uses a session cookie to keep you logged in, a device-presentation cookie for layout and, if you try the guest preview, a cookie that links your browser to your preview. Starting a guest preview loads Cloudflare Turnstile, a spam check, which may use what it needs in your browser; it is not used for advertising. No advertising or cross-site cookies.
5. Your rights
Wherever you live you can export your data (Settings, Export everything), delete chats, characters and images, delete your whole account in the app (Account → Delete my account), or ask us questions at support@nyvelle.app. Residents of California and other US states with privacy laws have additional rights: to know and access what we hold, to correct it, to delete it, to get a portable copy, to withdraw consent for sensitive data, to opt out of sale, targeted advertising and profiling (we do none of these), and not to be treated differently for using these rights. Send requests to support@nyvelle.app from the email address on your account; we may need to confirm it is you. We answer within 30 days. If we turn down a request, you can appeal by replying to our answer with the word "Appeal"; we answer appeals within 60 days and, if we still say no, tell you how to contact your state attorney general.
How long we keep it
- Account, chats, memories, characters and images: until you delete them or your account. Account deletion has a 7-day grace period (you can cancel it), then the account and its content are erased.
- Backups: deleted data can stay in encrypted backups until those backups are replaced on their normal rotation, within about five weeks: server backups are rotated after about a week, the operator's copies after 28 days, and the Google Drive copies after 7 more days. Google then keeps deleted Drive files in its trash for up to 30 days before erasing them.
- Billing records (amounts, dates, Stripe ids): 7 years, for tax and accounting, under a pseudonymous account id after account deletion.
- Subscription consent records: at least 3 years after the order and at least 1 year after the membership ends.
- Sign-up and consent records (the Terms version you accepted, your 21+ confirmation, your sensitive-data consent and any withdrawal): 3 years after your account is deleted, under a pseudonymous account id with no e-mail address, then erased. We keep them because we must be able to show what you agreed to and when (for example under Connecticut's and other states' consumer privacy laws, and to answer legal claims).
- Moderation and takedown records: as long as needed for safety and legal obligations. For a removed image we keep the request, dates, the image id, a fingerprint of the file and the account involved, not the image. The one exception is an image that may show a child: federal law requires us to report it and preserve it, so it is kept in a sealed store that is never shown to anyone and is deleted when the legal preservation period ends.
- Crisis-support counts: monthly totals with no account, kept for the yearly report California law requires.
- Guest preview: the conversation at most 24 hours (it moves into your account if you sign up or sign in within that time); the short record without your messages 30 days; per-network counters 2 days.
6. Security
Connections to the Service use HTTPS. Your chats are stored on our server so characters can reply, and our server backups are encrypted with keys we hold. Encrypted backups you download (.nyvbak) are encrypted in your browser with AES-256-GCM and a passphrase you choose; we don't see it. If we discover a breach affecting you, we tell you without undue delay.
7. Children
The Service is for adults 21+. We do not knowingly collect data from anyone under 21, and we delete accounts we find that belong to minors. If you believe a minor is using the Service, email support@nyvelle.app.
8. Changes
We email you before material changes to this policy, with an export link, as described in the Terms.
9. Contact
Timothy Sell, 28116 W Maple Ave, Wauconda, IL 60084. Privacy questions: support@nyvelle.app.