Privacy Policy

1. Introduction

This Privacy Policy describes how NITE AI ("we", "us", or "our") collects, uses, and protects your personal information when you use our AI-powered legal research assistant ("the Service"). We are committed to protecting your privacy and handling your data with transparency.

2. Information We Collect

2.1 Account Information

When you sign in with Google, we collect your name, email address, and profile picture as provided by Google's OAuth service.

2.2 Chat & Query Data

We store the questions you ask and the AI-generated responses to provide your chat history and improve the Service. Chat data is associated with your user account.

2.3 Subscription & Payment Data

If you subscribe to Pro, our payment processor (Lemon Squeezy) handles your payment information. We receive subscription status, billing cycle dates, and transaction identifiers — but we never store your credit card details.

2.4 Usage Data

We may collect anonymized usage data including device type, browser information, IP address, and interaction patterns to improve the Service.

3. How We Use Your Information

• Provide the Service: Authenticate your identity, maintain your chat history, and process your queries
• Manage Subscriptions: Track your subscription status, credit usage, and billing cycles
• Improve the Service:Analyze usage patterns to enhance the AI's accuracy and user experience
• Communicate: Send service-related notifications, updates, and respond to support requests
• Security: Detect and prevent fraud, abuse, and unauthorized access

4. Data Storage & Security

Your data is stored securely using Supabase, a trusted cloud database platform. We implement industry-standard security measures including encryption in transit (TLS/SSL) and at rest, row-level security policies, and secure authentication via OAuth 2.0. Access to your data is restricted to authorized personnel only.

5. Data Sharing

We do not sell your personal information. We may share data with:

• Service Providers: Third-party services that help us operate the platform (e.g., Supabase for database, Lemon Squeezy for payments, Google for authentication)
• AI Processing:Your queries are sent to AI model providers (e.g., Google AI, OpenAI) to generate responses. These queries are processed according to the providers' own data policies
• Legal Compliance: When required by law, court order, or governmental authority

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a portable format
• Withdraw Consent: Withdraw consent for data processing at any time by deleting your account

To exercise these rights, contact us at niteai.info@protonmail.com.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law.

8. Cookies & Local Storage

We use cookies and local storage for authentication, session management, and language preferences. These are essential for the Service to function and cannot be disabled while using the platform.

8A. Mobile Application

8A.1 Local Data Storage

The NITE AI mobile application caches your chat history on your device using encrypted local storage. On iOS, this data is protected by the device Keychain. On Android, data is stored in the app's private sandbox directory. Local data is cleared when you sign out of your account.

8A.2 Push Notifications

If you grant notification permission, we generate a Firebase Cloud Messaging (FCM) token — a unique identifier for your device. This token is stored on our server to deliver push notifications about subscription updates and credit refills. You can revoke notification permission at any time through your device settings, which will prevent further push messages.

8A.3 Device Permissions

The mobile app requests only the following device permissions:

• Internet access: Required to communicate with our servers and process your legal queries
• Notifications (optional): To send subscription and credit notifications. Can be declined or revoked at any time

The app does not access your camera, microphone, location, contacts, files, or any other device sensors.

8A.4 Third-Party Mobile SDKs

The mobile app includes the following third-party SDKs that may process data according to their own privacy policies:

• Firebase Cloud Messaging: Push notification delivery (Firebase Privacy Policy)
• Firebase Analytics: Anonymized usage metrics and engagement tracking — no personally identifiable information is transmitted (Firebase Privacy Policy)
• Firebase Crashlytics: Crash reports and stability monitoring — stack traces are sanitized to remove user data before transmission (Firebase Privacy Policy)
• Supabase: Authentication, database, and real-time sync (Supabase Privacy Policy)
• Lemon Squeezy: Subscription and payment processing (Lemon Squeezy Privacy Policy)

8A.5 Cross-Platform Data Sync

Your account, chat history, and subscription status sync between the web and mobile applications in real-time through your Supabase account. Data deletion on one platform affects all platforms.

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service. Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at niteai.info@protonmail.com.