Nami AI

Privacy Policy

Effective date: 15 September 2026

1. Introduction

This Privacy Policy explains how the operator of Nami AI (“Nami AI”, “we”, “us”) collects, uses, shares and protects personal data when you use the Nami AI mobile app and the websites https://namiai.ru and https://support.namiai.ru (together, the “Service”).

Nami AI is operated by an independent individual developer. The data controller for personal data processed through the Service is the operator of Nami AI, who can be contacted at nami.ai2026@gmail.com.

Nami AI is an aggregator: it gives you access to AI models developed by third parties, such as OpenAI (ChatGPT), Google (Gemini), Anthropic (Claude), DeepSeek, ElevenLabs and Runway. To generate responses, the content you submit is sent to these providers, as described in this Policy.

By using the Service, you acknowledge that you have read this Policy. If you do not agree with it, please do not use the Service.

2. Data we collect

Depending on how you use the Service, we collect the following data:

  • Account data: your email address, login and password. Passwords are stored only as a cryptographic hash, never in plain text. We also process one-time codes used to verify your email address or reset your password.
  • Settings: your app language and similar preferences.
  • Content you submit to AI models: prompts and messages, chat history, images, files and voice recordings you upload, and the responses generated by AI models.
  • Balance and usage: your namitokens balance and the history of credits and charges for AI requests.
  • Support requests: messages you send to support in the app, through our Telegram bot or through the website form, including the email address you provide for a reply, attachments and correspondence history. For requests via Telegram we also receive your Telegram account identifier and the name shown in your Telegram profile.
  • Purchase records: store transaction identifiers, the product purchased (for example, a namitokens pack), price, currency and date. Payments are processed by Google Play or the Apple App Store, and purchase status is managed through RevenueCat. We do not receive or store your payment card details.
  • Device and app data: a push notification token (Firebase Cloud Messaging); crash reports and diagnostic data (Firebase Crashlytics); usage analytics (Google Analytics for Firebase), including the advertising identifier where permitted by your device settings; device model, operating system and app version; and your time zone offset, which is used to send reminders at a suitable local time.
  • Server logs: IP address, user agent, request time and similar technical data recorded when your device or browser communicates with our servers.
  • Website data: your language preference stored in a cookie and in your browser’s local storage (see “Cookies and local storage”).

We do not ask for special categories of personal data. Please do not include sensitive information, such as health data, government ID numbers or payment card numbers, in your prompts or files.

3. How we use data and legal bases

We use personal data for the following purposes:

  • Providing the Service — creating and maintaining your account, signing you in, processing AI requests, storing chat history, and crediting and charging namitokens. Legal basis: performance of our contract with you (the Terms of Use).
  • Payments and accounting — verifying purchases, handling refunds and chargebacks, and keeping financial records. Legal basis: performance of a contract and compliance with legal obligations.
  • Support — answering your requests and resolving problems. Legal basis: performance of a contract and our legitimate interest in helping users.
  • Security and abuse prevention — protecting accounts, detecting fraud and misuse, and enforcing limits and the Terms of Use. Legal basis: our legitimate interests and compliance with legal obligations.
  • Stability and product improvement — analyzing crashes and aggregated usage statistics. Legal basis: our legitimate interests or, where required by law, your consent.
  • Notifications — sending service notifications and reminders. Legal basis: your consent, given through the device notification permission, which you can withdraw at any time.
  • Email communication — sending verification codes, password reset codes and replies to support requests. Legal basis: performance of a contract.
  • Legal compliance — responding to lawful requests from authorities and establishing, exercising or defending legal claims. Legal basis: compliance with legal obligations and our legitimate interests.

4. AI model providers

When you send a request, its content — your prompt, the relevant chat context and any attached images, files or audio — is transmitted to the provider of the AI model you selected (for example, OpenAI, Google, Anthropic, DeepSeek, ElevenLabs or Runway) so that the model can generate a response.

These providers process the content under their own terms and privacy policies, which may include temporary retention for abuse monitoring and safety purposes. We encourage you to review the policies of the providers whose models you use.

We do not include your password or payment details in requests to AI model providers. Do not submit content that you do not want to be processed by third-party AI providers.

5. How we share data

We share personal data only with the following recipients and only to the extent necessary:

  • AI model providers — to generate responses to your requests (see “AI model providers”).
  • Google Firebase (Google) — push notifications (Firebase Cloud Messaging), crash reporting (Firebase Crashlytics) and analytics (Google Analytics for Firebase).
  • RevenueCat — managing in-app purchases and purchase status.
  • Google Play and the Apple App Store — processing payments and refunds under their own terms and privacy policies.
  • Email delivery (Google / Gmail) — sending verification codes, password reset codes and support replies.
  • Hosting and infrastructure providers — storing and processing data on the servers that run the Service.
  • Telegram — when you contact support through Telegram, your messages are transmitted through the Telegram platform.
  • Authorities and other parties — where required by law, or where necessary to protect the rights, safety and property of users, the public or the operator of Nami AI.
  • A new operator — if the Service is transferred to another operator, provided that the recipient continues to protect your data in line with this Policy.

We do not sell your personal data.

6. International data transfers

Our service providers, including AI model providers, Google and RevenueCat, may process data in countries other than your country of residence, including the United States. Data protection laws in those countries may differ from those in your country.

Where required by applicable law, such transfers are carried out with appropriate safeguards, such as standard contractual clauses offered by these providers.

7. Data retention

We keep personal data only for as long as necessary for the purposes described in this Policy:

  • Account data — for as long as your account exists; it is deleted when you delete your account.
  • Chat history and uploaded files — until you delete them or delete your account.
  • Support requests — for as long as needed to resolve them and handle follow-up questions. After your account is deleted, request texts may be kept only without personal data.
  • Purchase records — kept in anonymized form for as long as required for accounting, tax and other legal obligations, including after your account is deleted.
  • Server logs — for a limited period needed for security and troubleshooting, after which they are deleted or anonymized.
  • Analytics and crash data — in accordance with the retention settings of Google Firebase.

Data removed from our systems may remain in backups for a limited time until they are overwritten.

8. Security

We use reasonable technical and organizational measures to protect personal data, including encrypted connections (HTTPS), password hashing and restricted access to production systems.

No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. Keep your password confidential and use a unique password for Nami AI.

9. Your rights

Depending on the law that applies to you, you may have the right to:

  • access the personal data we hold about you;
  • correct inaccurate or incomplete data;
  • delete your data;
  • receive a copy of your data in a structured, commonly used format (data export);
  • object to or restrict certain processing;
  • withdraw your consent at any time, without affecting processing carried out before the withdrawal;
  • lodge a complaint with a data protection authority.

To exercise these rights, email nami.ai2026@gmail.com from the email address linked to your account. We may need to verify your identity before responding, and we will respond within the time required by applicable law.

10. Deleting your account

You can delete your account and the data linked to it at any time:

Deletion is permanent. Your account, email address and login, chat history, balance and namitokens, uploaded files and device tokens are deleted. Anonymized records required for accounting and legal obligations are retained as described in “Data retention”. Remaining namitokens and completed purchases are not refunded.

11. Children

The Service is not intended for children under 16, or under the minimum age required by the law of their country to consent to the processing of personal data, if that age is higher.

We do not knowingly collect personal data from such children. If you believe that a child has provided us with personal data, contact us at nami.ai2026@gmail.com and we will delete it.

12. Push notifications

If you allow notifications, we use Firebase Cloud Messaging to send you service messages and reminders. Your time zone offset is used only to deliver reminders at a suitable local time.

You can turn notifications off at any time in your device settings. The push token is deleted when you delete your account.

13. Cookies and local storage

The website does not use advertising or tracking cookies. It stores only what is needed to remember your language:

  • the nami_locale cookie — remembers the language you selected so that pages open in it. It is valid for one year and is shared between namiai.ru and support.namiai.ru;
  • local storage (nami_locale) — a copy of the same language preference in your browser.

You can delete them in your browser settings; the website will then use your browser’s language.

14. Changes to this Policy

We may update this Policy from time to time. The updated version will be published on this page with a new effective date. If the changes are material, we will also notify you in the app or by email where appropriate.

By continuing to use the Service after the changes take effect, you acknowledge the updated Policy.

15. Contact

If you have questions about this Policy or your personal data, contact the operator of Nami AI at nami.ai2026@gmail.com.

← Back to home