Last updated: October 15, 2026
When you create an account, we collect your name and email address. If you sign in with Google, we receive your Google profile name, email, and profile picture. We also collect usage data such as which tools you use, page views, and IP addresses for analytics and rate limiting purposes.
We use the following third-party services to operate NexTool:
Your data is stored in a secure PostgreSQL database. Passwords are hashed using bcrypt with a cost factor of 12. All connections use HTTPS encryption. We implement security headers, rate limiting, and input validation to protect your data.
You can update your profile information and change your password at any time through your account settings. You can cancel your subscription through the billing portal. You can request deletion of your entire account and associated data here. Requests are verified and processed manually, with a target of completion within 30 days. Status is available on the request page and completion is confirmed by email. Submitting a request does not immediately cancel subscriptions; web subscriptions are checked and stopped before account removal. Apple subscriptions must be cancelled in your Apple account. Deleting a NexTool account does not cancel billing by Apple. Required accounting records are handled separately and backups follow their retention periods. Purchase references retained for accounting or fraud prevention are separated from your deleted profile and are never included in model-research samples. A contact address is kept encrypted for the completion notice and removed from the request record after that notice is accepted for sending.
We use essential cookies for authentication and session management. Optional analytics and advertising technologies are described in our Cookie Policy.
Human player decisions, personality profiles, private conversations, and account details are not offered for sale or licensing. The older standalone-game telemetry intake has been retired: it no longer reads, stores, or logs uploaded gameplay event bodies. Older game versions may still attempt uploads; their local privacy controls can be used to turn those attempts off.
Historical game records are restricted to internal access. Session identifiers or shortened IP addresses do not by themselves make a record anonymous. This policy does not automatically delete historical records; contact us about access or deletion.
Optional AI model metrics: Where available in AI-GameFriend, the account-based contribution program requires an explicit choice before upload. It accepts only a version, an event identifier, a feature category, the provider and model label, a desktop-reported source label, an outcome category, and coarse latency and output-token ranges. These client-reported observations are not independently verified provider benchmarks.
This metrics program excludes prompts, conversation text, model response text, player actions, human ratings, personality profiles, and demographics. It is separate from data sent to a provider to fulfill an AI request, local game history, and operational records needed for account access, billing, or abuse prevention.
Control and retention: Contribution receipts are linked to your account so that your choice, quota, and deletion requests can be enforced. The program retains observations and their receipts for up to 90 days, with expired records removed by the scheduled cleanup. Stopping contribution clears queued uploads and requests removal of linked observations; the app shows when the server confirms this. Minimal choice and quota records are separate from observations.
Model-metrics contributions may support aggregate evaluations of AI models. They do not grant permission to sell account-linked records or human gameplay, publish individual runs as verified results, or use private user content as a training dataset.
AI House family days: In AI-GameFriend's AI House you can choose to contribute, after a consent that states its version (currently ai-house-contribution-v2). While contributing is on, every family day you finish is sent automatically and stored with your account. A day holds what the AI models did: provider and exact model per resident, whether each decision was live or a local fallback, the residents' actions, rooms and timing, the models' own words and short reasons, token counts and costs, and counts of how you took part (events sent, Magic Moments, role goals, renamed residents). It never holds what you typed or any provider key. Days are used to evaluate AI models and may be licensed as model data, without your account, e-mail or name; a day you took part in is marked as such and is never published as a measurement.
Days are kept until you withdraw or close your account. You can withdraw in the app or under Settings: withdrawing stops the sending and deletes every day stored for your account, and closing your account deletes them too.
Feedback from AI-GameFriend: a message you send from the app or the site is stored with its type, the app version and the e-mail address if you give one, for up to 180 days. If you are signed in when you send it, it is linked to your account and deleted with it; a message sent without an account and without an e-mail address cannot be found again for deletion before it expires.
Saved workbench documents, decisions and your reported outcomes are stored with your account. They can be exported and deleted in the workbench. Private customer sources, quotes and human decisions are not included in AI data licenses. An independent AI judgment sends the visible situation, goal and available choices to the provider; the separate private choice and reasoning fields are withheld from that first judgment.
Club members see others' choices only after everyone has committed and the host opens the answers. Rooms are usable for seven days. Members can leave and hosts can delete rooms, including expired rooms. Expired rooms are also removed when their host creates a new room; expiry alone is not an automatic deletion schedule.
A company can explicitly publish a quote form with its prices and terms. Internal costs, margins and the original customer name stay private. A visitor who submits a request shares the entered name, contact email and quantities with that company for its private quote review. The visitor can download their draft and use its reference when requesting access or deletion. No automatic email or payment is made. Separately licensed AI packages are delivered only to named accounts; revocation stops future downloads but cannot recall copies already downloaded under the recipient's agreement.
Familarius stores each creature's game history, learned rituals, relationship experiences, current intentions and small learned models of care outcomes and ball attempts in your private home. Its recent experience history is limited to 96 structured game events per creature; learned habits can remain after older event details leave that history. The capability model retains up to 32 sampled ball outcomes, up to 24 sampled window observations and the first observed moon, plus bounded familiarity counts for places in the fictional room. A validated time zone aligns the room clock across devices; no device location is collected for this. Learned expectations can be wrong and do not establish subjective consciousness. The records are retained with event references, separately from those 96 recent events. These records do not copy your conversation wording. Event significance and care expectations are derived from game actions, not a profile of the player. Relevant descriptions are sent to your selected AI provider when you request an AI response. Your editable memory notes and the creature's latest reply are stored separately. Memory settings let you reset a creature's learned experiences and latest reply, remove your notes, or erase the whole home. Resetting one creature does not erase other family members' own memories. A departed creature's descriptions may remain in the memory book until you erase the home. This feature grants no permission for research, advertising, profiling of the player or sale of private memories.
Your creature's emotional and relationship state is computed from what happens in the game and stored as part of its home. It contains none of your messages and is deleted when the home or account is deleted.
Din varelses känslo- och relationstillstånd räknas fram ur det som händer i spelet och sparas som en del av hemmet. Det innehåller inga meddelanden från dig och raderas när hemmet eller kontot raderas.
Not stored: the words you write to your creatures are not stored on our servers. They are sent to your selected AI provider in the request that answers them. So that the next reply can follow the conversation, the game keeps the last thing you said to each creature in the open page or app, in memory only and not in browser storage, and sends it with your next message to that creature. It is gone when you reload, forget the conversation or erase the home. No server log line contains your messages. A message that shows serious distress is answered outside the game, is not stored and is not sent to a model. Only a count of such replies per calendar month, with no account, day or text, is kept.
Stored with your home, linked to your account until you erase the home or delete the account:
Stored for each action, as a receipt linked to your account until the account is deleted: the request reference, a request digest, the creature reference, the home's revision, status, the reserved and charged AI cost, an error code and when the receipt was created and last updated. For an AI reply it also stores details of the call: the action, the requested and reported model, token counts and how they were charged, response time, the chosen behaviour, whether it was applied, a fingerprint of the creature's reply and a fingerprint of the prompt. The request digest leaves out what you wrote (messages, memory notes and names), and the prompt fingerprint is keyed with a key that exists only in the server's memory. Erasing the home removes the creature reference, the call details and the error code from these receipts. The reference, digest, cost and times stay, so that erasing cannot refill the AI allowance. The shared AI allowance also keeps each call's reserved and charged amount with your account for 63 days.
Until October 15, 2026 the latest message you wrote to each creature was stored with the home for up to 30 days. It has been removed from every home. Receipts created before that day keep a request digest that was computed over the message too.
Sparas inte: det du skriver till djuren sparas inte på våra servrar. Det skickas till den AI-leverantör du valt i anropet som svarar på det. För att nästa svar ska kunna följa samtalet håller spelet det du senast sa till varje djur i den öppna sidan eller appen, bara i minnet och inte i webbläsarens lagring, och skickar det med ditt nästa meddelande till samma djur. Det försvinner när du laddar om, glömmer samtalet eller raderar hemmet. Ingen serverlogg innehåller dina meddelanden. Ett meddelande som visar allvarlig nöd besvaras utanför spelet, sparas inte och skickas inte till någon modell. Bara antalet sådana svar per kalendermånad sparas, utan konto, dag eller text.
Sparas med hemmet, kopplat till kontot tills du raderar hemmet eller kontot:
Sparas för varje handling, som ett kvitto kopplat till kontot tills kontot raderas: anropets referens, en sammanfattning (digest) av anropet, djurets referens, hemmets revision, status, reserverad och debiterad AI-kostnad, en felkod och när kvittot skapades och senast ändrades. För ett AI-svar sparas också uppgifter om anropet: handlingen, begärd och rapporterad modell, antal tokens och hur de debiterades, svarstid, valt beteende, om svaret tillämpades, ett fingeravtryck av djurets svar och ett fingeravtryck av prompten. Sammanfattningen utelämnar det du skrev (meddelanden, anteckningar och namn), och promptens fingeravtryck är nycklat med en nyckel som bara finns i serverns minne. När hemmet raderas tas djurets referens, anropsuppgifterna och felkoden bort ur kvittona. Referensen, sammanfattningen, kostnaden och tiderna finns kvar, så att en radering inte kan fylla på AI-utrymmet. Det gemensamma AI-utrymmet sparar dessutom varje anrops reserverade och debiterade belopp med ditt konto i 63 dagar.
Fram till den 15 oktober 2026 sparades det senaste du skrev till varje djur med hemmet i högst 30 dagar. Det är nu borttaget ur alla hem. Kvitton från före den dagen har kvar en sammanfattning som räknades fram även ur meddelandet.
A separate, versioned adult opt-in enables controlled fictional model probes. Free hosted AI in this contributor program requires that choice; active paid plans remain private, and basic local care is available without contribution. Existing private beta invitations retain their own terms. Probes receive no conversations, creature names, editable notes, memories or home state. Only the protocol, synthetic scenario, requested and verified model versions, a choice from a fixed list and its agreement with the protocol are stored. Free-form model responses are discarded. These are model behavior measurements, not psychological assessments or proof of consciousness.
Purposes are product development, model evaluation and possible future commercial licensing to AI developers and researchers. This version does not distribute these samples to buyers. A separate account-linked receipt supports withdrawal, deletion, deduplication and a limit of one probe per UTC day, within the existing AI allowance. This linkage means the records are not anonymous to NexTool even though the sample payload contains no account details. Probes use the connected model provider and NexTool database; processing may occur outside the EU/EEA. Samples and their receipts expire after 30 days and are removed by hourly retention runs. Withdrawal in the game deletes retained samples and prevents late results from being saved. Account deletion also deletes them. The account retains its current consent choice and revision until account deletion. Private homes, basic care and free pause remain available after withdrawal. No payment starts automatically. Contact support@getnextool.com for data rights requests; you may also complain to your local supervisory authority.
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.
If you have questions about this privacy policy, data deletion requests, or any other privacy concerns, email us at support@getnextool.com or visit our Contact page.
Your privacy matters to us
Many standard calculators process their inputs in your browser. AI features send submitted context to their configured provider.
Explore Tools