Nilna Privacy Policy

This Privacy Policy explains how Nilna (“we”, “our”, or “us”) handles information when you use the Nilna iOS app. Nilna helps you prepare an in-person gift handoff: you build a Gift File (audience, gift, opening line, blocking steps), optionally draft a spoken line, rehearse it, and log a debrief afterward.

Nilna does not sell Credits, subscriptions, or in-app purchases. There is no public feed.

1. Information we handle

• Gift File content you type: recipient name, relationship, occasion, personality notes, gift name, price band, wrapping, opening line, handoff steps, debrief text, and star rating.
• Rehearsal records: timer length and, if you allow the microphone, an audio take of your opening line stored in the app sandbox.
• Profile you provide: display name (2–20 characters) and an optional avatar photo.
• Local session flags: a device user id created when you tap Enter rehearsal, login time, and whether you have logged in before.
• Studio / Worker context sent when the app opens a studio session: a stable installation id, app version, system version, device model, language, country/region, time zone, and whether the client is using staging or production.

Nilna does not ask for an email address or password. We do not show your Gift Files to other users inside the app.

2. How we use it

• Show Home, Create, Archive, Studio, Result, Detail, and History.
• Open a Worker studio session so Nilna can obtain drafting configuration and an optional stage page URL.
• Draft or polish one spoken opening line from the Gift File fields you entered.
• Save archives, wax-seal favorites, debriefs, and rehearsal takes on this device.
• Let you set a Studio photo from the camera or the photo library.
• Show Terms and Privacy inside the app WebView from the fixed legal URLs configured for Nilna.

3. Studio Worker and stage page

When you tap Enter rehearsal (and on some cold starts while logged in), Nilna calls Nilna’s edge Worker (/v1/studio/entry). The Worker returns a studio session token, drafting configuration (endpoint, model list, bearer used only for line generation), action codes for the stage WebView, and a stage URL.

The stage URL may be a Worker-hosted welcome page (for example the fixed Nilna welcome theme) or a configured web experience. Launch parameters for a configured experience may include encrypted values needed to run that page (such as installation id, session-related tokens, package identity, service origins, Terms/Privacy URLs, app version, and app name). Gift File contents are not uploaded as part of that studio entry call.

4. Opening-line generation

Nilna uses OpenRouter, a third-party AI service, for opening-line generation. Drafting URL, model chain, and bearer are delivered by the Worker at studio entry and kept in memory on the device for the session. When you tap “Draft a line for me” or “Bind the file”, Nilna sends the recipient, relationship, occasion, personality notes, gift, and any draft line you entered to that drafting endpoint (OpenRouter). OpenRouter routes the request to a model provider. The generated line is saved on your device after a successful request.

Only those request fields are sent for generation; your saved Gift Files, profile photo, rehearsal audio, debriefs, price band, wrapping choice, and handoff steps are not sent in the AI request. OpenRouter and its model providers may process and retain request data under their own policies. See OpenRouter's Privacy Policy. Nilna cannot delete data retained by OpenRouter or a model provider when you delete your local account.

Nilna shows an on-device notice titled “AI service and your data” before you use the creation flow. You choose what details to enter and submit.

5. Permissions

• Camera: take a Studio profile picture.
• Photo Library: choose a Studio profile picture.
• Microphone: record your opening line while you rehearse, then play it back.

You can deny any permission. Creating a Gift File, generating a line, timed rehearsal, and the archive still work without camera, photos, or microphone. If you refuse a permission and later ask for it again, Nilna may guide you to iOS Settings.

6. Storage

Saved Gift Files, scripts, rehearsal audio, avatar, nickname, and local session flags are stored in the Nilna app sandbox and app preferences on your device. Worker studio tokens and drafting credentials are held in memory for the running session (and the installation id / API environment preference may persist locally). Script and audio items are stored by file name. Fields you submit for AI generation are also sent to OpenRouter and a model provider as described above.

7. Sharing

We do not sell your Gift Files, photos, or audio. Limited information may be shared with:

• Nilna’s edge Worker, for studio session, drafting configuration, and stage URL.
• OpenRouter and the model provider it routes to, only the fields you submit when you request a drafted or bound opening line.
• Operators of a configured stage web experience, only through the encrypted launch parameters described above when that experience is shown.
• Parties required by law, regulation, legal process, or to protect rights and safety.

Share on the Result or Detail screen copies a rehearsal card to the clipboard on this device. It does not post to a social network inside Nilna.

8. Retention and deletion

Log out clears the local login token, clears the in-memory Worker studio session and drafting credentials, and returns you to the start screen. Gift Files and profile stay on the device.

Delete account removes Gift Files, rehearsal audio, debriefs, avatar, nickname, and related preferences on this device, and clears the Worker studio cache. Nilna keeps only the flag that you have logged in before. This local deletion does not delete request data that OpenRouter or its model providers may retain; their retention and deletion practices are governed by their own policies. Unreachable Worker sessions expire under the Worker’s session TTL.

Uninstalling Nilna also removes local data stored in the app.

9. Children

Nilna is not directed to children.

10. International use

You use Nilna from the country where your device is located. Information you submit for line generation, and traffic to the Worker or a configured stage page, may be processed in regions where those services operate.

11. Changes

We may update this Policy. The date above shows the latest version. Continued use after an update means you accept the revised Policy.

12. Contact

Questions: email martimpinto1111@outlook.com, or see the Terms of Service.