NightLily

Last updated: August 25, 2026

NightLily (“we,” “us,” or “our”) operates the AI storytelling service at nightlily.app(the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with Singapore’s Personal Data Protection Act (PDPA).

1. Data We Collect

  • Account information (email, username). Sign-in is handled by our authentication provider (Clerk) — we never receive or store your password directly.
  • Scene interactions and inputs/outputs with our AI, and the Storybots/Personas you create (may include personal or sensitive content).
  • Images you choose to upload as a Persona avatar or Storybot cover. Uploaded images are stored at a public URL — anyone with the direct link can view one, even if not signed in.
  • Cookies required to keep you signed in.
  • Any other information you voluntarily provide.

2. How We Use Your Data

  • To provide, personalise, and improve the AI roleplay Service.
  • For internal service maintenance (Scenes may be reviewed by authorised staff for moderation or troubleshooting — this is not anonymous).
  • To respond to your requests (e.g., data access/deletion).

3. Consent & Age Requirement

By using NightLily, you confirm you are 18 years or older and consent to this Privacy Policy and our Terms of Service. NightLily is a fiction and roleplay service for adults. We do not knowingly collect data from minors.

4. Sharing & Transfers

We may use third-party hosting, AI providers, or tools. Our AI providers apply their own data-retention limits to any content they process on our behalf. Any overseas transfers will use reasonable safeguards. We do not sell your personal data.

Published stories: if you publish a story to the Garden, other players can play their own copy of its world, cast, opening and starting facts with their own character. Your play history is never copied.

5. Data Security & Retention

We implement reasonable security measures (e.g., encryption, access controls). Deleting a Storybot is immediate and permanent — its scenes, messages, memory and images are erased straight away, and we cannot bring it back, so please be sure before you delete. Deleting your account is different: it enters a 90-day grace period, a safety window during which a mistaken deletion can still be reversed by contacting us. Full account data becomes eligible for permanent removal after those 90 days and is purged by our team on request; it is not on an automated schedule, so contact us if you want confirmation it has been completed. Otherwise, your data is retained for as long as your account is active or until you request deletion.

6. Your Rights

You may request access, correction, or deletion of your data by contacting our DPO. We will respond within a reasonable time.

7. Data Protection Officer (DPO)

NightLily has appointed a Data Protection Officer to oversee compliance with the Personal Data Protection Act (PDPA) and handle your data-related queries.

Contact our DPO: support@nightlily.app
(For access, correction, deletion requests, or privacy concerns.)

8. Changes to This Policy

We may update this Policy. Continued use after changes means you accept the updates.

Contact Us

For questions: support@nightlily.app

NightLily mascot