Privacy Policy

1. Information We Collect

We collect the information needed to operate NikNok and to keep it secure:

• Account and sign-in: your account is created from a device-based identifier. If you sign in with Google (Android), we receive the email address you authorize. If you sign in with Apple (iOS), we receive a stable account identifier; Apple sign-in does not return your email address or name to us unless you choose to share them.
• Profile: the display name and avatar you choose.
• Content: the messages, images, and other content you send and receive, and any content you create with our AI features.
• Notifications: a device push token when you enable notifications.
• Location: your approximate location while the app is in use, when you use features such as finding people nearby.
• Contacts: your address book, when you choose to sync contacts so we can help you find people you already know.
• Advertising identifier: with your permission, your device's advertising identifier (IDFA), used to measure ad performance and personalize your experience.
• Diagnostics: crash and performance data used to keep the app stable.
• Purchases: information about the plans or credits you purchase. Payments are processed by the store and payment providers; we do not receive or store your full payment card details.

2. How We Use Your Information

• To create and manage your account
• To display your profile within the application (name, avatar)
• To provide messaging, group chat, calls, and contact features
• To show people nearby when you enable location features
• To generate AI replies, images, videos, and other content you request
• To send push notifications for new messages and important updates
• To process purchases and provide paid features
• To measure ad performance and attribution
• To diagnose crashes and improve the service
• To communicate important service updates

3. Permissions and Your Choices

You control the optional permissions NikNok requests. You can turn off notifications, location, contacts, and tracking at any time in your device settings or in the app; the related features will stop working until you enable them again. Content you create or share is processed only to provide the service to you and your intended recipients.

4. Data Storage and Security

Your data is stored on secure servers and transmitted using encryption. Messages and media are routed through our messaging infrastructure, and images, avatars, and generated artifacts are kept in cloud object storage. We retain your account data for as long as your account remains active. You may request deletion of your account and associated data at any time.

5. Third-Party Services

We rely on the following third parties to operate the service. Their handling of data is governed by their own privacy policies:

• Tencent Cloud Chat and TRTC — our messaging and real-time audio/video infrastructure, used to transmit and deliver your messages and calls.
• Cloudflare R2 (S3-compatible object storage) and its CDN — used to store and deliver images, avatars, and generated artifacts.
• BytePlus (Volcengine) RangersAppLog — our in-app behavioral analytics SDK, used to understand feature usage.
• AppsFlyer — used to measure installs and ad attribution.
• Sentry — used to collect crash and error reports.
• PostHog Cloud US — our server-side product analytics provider, used to measure feature usage and improve the service. PostHog receives limited event data such as event names, platform, app version, enumerated categories, counts, durations, and an anonymous or internal account identifier. It does not receive message text, prompts, AI responses, images, files, contact details, or authentication credentials.
• Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM), via Tencent Cloud — used to deliver push notifications.
• Apple (Sign in with Apple) and Google (Google Sign-In) — used when you choose to sign in with a third-party account.
• AI model providers — Anthropic (Claude), OpenAI (GPT), Google (Gemini), DeepSeek, ByteDance (Doubao / Volcengine), and Moonshot (Kimi). When you use AI features, your messages and conversation context are sent to the relevant provider to generate responses; requests are routed through a model gateway. You must consent within the app before any data is transmitted.
• Tavily — when AI web search is enabled, search queries are sent to this service so AI responses can use current information.
• Payment providers — Apple In-App Purchase and Google Play Billing, and Onerway / Pacypay for direct payments. Payment data is handled by these providers.
• Lark (Feishu) — used for our internal operations notifications, which may include your display name, username, and email address, so our team can monitor service health and handle support and payment issues.
• Google Fonts — our website (niknok.ai) loads its web fonts from Google Fonts, which receives your IP address when you visit the site.

We do not sell, trade, or share your personal information with third parties for their own marketing purposes. You can withdraw your consent to AI data sharing at any time in the app settings. To request access, correction, or deletion of your personal data, contact us at [email protected].

6. User Content

We process the content you send only to deliver it to your intended recipients and to operate the service. We have zero tolerance for objectionable content and abusive behavior; content you report may be reviewed and removed, and offending accounts may be suspended. See our Terms of Service for details.

7. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at the email address below.

8. Contact

If you have questions about this Privacy Policy, contact us at [email protected] .