Last updated: October 4, 2026
When you create an account, we collect your name and email address. If you sign in with Google, we receive your Google profile name, email, and profile picture. We also collect usage data such as which tools you use, page views, and IP addresses for analytics and rate limiting purposes.
We use the following third-party services to operate NexTool:
Your data is stored in a secure PostgreSQL database. Passwords are hashed using bcrypt with a cost factor of 12. All connections use HTTPS encryption. We implement security headers, rate limiting, and input validation to protect your data.
You can update your profile information and change your password at any time through your account settings. You can cancel your subscription through the billing portal. You can request deletion of your entire account and associated data here. Requests are verified and processed manually, with a target of completion within 30 days. Status is available on the request page and completion is confirmed by email. Submitting a request does not immediately cancel subscriptions; web subscriptions are checked and stopped before account removal. Apple subscriptions must be cancelled in your Apple account. Deleting a NexTool account does not cancel billing by Apple. Required accounting records are handled separately and backups follow their retention periods. Purchase references retained for accounting or fraud prevention are separated from your deleted profile and are never included in model-research samples. A contact address is kept encrypted for the completion notice and removed from the request record after that notice is accepted for sending.
We use essential cookies for authentication and session management. Optional analytics and advertising technologies are described in our Cookie Policy.
Human player decisions, personality profiles, private conversations, and account details are not offered for sale or licensing. The older standalone-game telemetry intake has been retired: it no longer reads, stores, or logs uploaded gameplay event bodies. Older game versions may still attempt uploads; their local privacy controls can be used to turn those attempts off.
Historical game records are restricted to internal access. Session identifiers or shortened IP addresses do not by themselves make a record anonymous. This policy does not automatically delete historical records; contact us about access or deletion.
Optional AI model metrics: Where available in AI-GameFriend, the account-based contribution program requires an explicit choice before upload. It accepts only a version, an event identifier, a feature category, the provider and model label, a desktop-reported source label, an outcome category, and coarse latency and output-token ranges. These client-reported observations are not independently verified provider benchmarks.
This metrics program excludes prompts, conversation text, model response text, player actions, human ratings, personality profiles, and demographics. It is separate from data sent to a provider to fulfill an AI request, local game history, and operational records needed for account access, billing, or abuse prevention.
Control and retention: Contribution receipts are linked to your account so that your choice, quota, and deletion requests can be enforced. The program retains observations and their receipts for up to 90 days, with expired records removed by the scheduled cleanup. Stopping contribution clears queued uploads and requests removal of linked observations; the app shows when the server confirms this. Minimal choice and quota records are separate from observations.
Contributions may support aggregate evaluations of AI models. They do not grant permission to sell account-linked records or human gameplay, publish individual runs as verified results, or use private user content as a training dataset.
Saved workbench documents, decisions and your reported outcomes are stored with your account. They can be exported and deleted in the workbench. Private customer sources, quotes and human decisions are not included in AI data licenses. An independent AI judgment sends the visible situation, goal and available choices to the provider; the separate private choice and reasoning fields are withheld from that first judgment.
Club members see others' choices only after everyone has committed and the host opens the answers. Rooms are usable for seven days. Members can leave and hosts can delete rooms, including expired rooms. Expired rooms are also removed when their host creates a new room; expiry alone is not an automatic deletion schedule.
A company can explicitly publish a quote form with its prices and terms. Internal costs, margins and the original customer name stay private. A visitor who submits a request shares the entered name, contact email and quantities with that company for its private quote review. The visitor can download their draft and use its reference when requesting access or deletion. No automatic email or payment is made. Separately licensed AI packages are delivered only to named accounts; revocation stops future downloads but cannot recall copies already downloaded under the recipient's agreement.
Familarius stores each creature's game history, learned rituals, relationship experiences, current intentions and small learned models of care outcomes and ball attempts in your private home. Its recent experience history is limited to 96 structured game events per creature; learned habits can remain after older event details leave that history. The capability model retains up to 32 sampled ball outcomes, up to 24 sampled window observations and the first observed moon, plus bounded familiarity counts for places in the fictional room. A validated time zone aligns the room clock across devices; no device location is collected for this. Learned expectations can be wrong and do not establish subjective consciousness. The records are retained with event references, separately from those 96 recent events. These records do not copy your conversation wording. Event significance and care expectations are derived from game actions, not a profile of the player. Relevant descriptions are sent to your selected AI provider when you request an AI response. Your editable memory notes and latest dialogue are stored separately. Memory settings let you reset a creature's learned experiences and latest dialogue, remove your notes, or erase the whole home. Resetting one creature does not erase other family members' own memories. A departed creature's descriptions may remain in the memory book until you erase the home. This feature grants no permission for research, advertising, profiling of the player or sale of private memories.
Your creature's emotional and relationship state is computed from what happens in the game and stored as part of its home. It contains none of your messages and is deleted when the home or account is deleted.
Din varelses känslo- och relationstillstånd räknas fram ur det som händer i spelet och sparas som en del av hemmet. Det innehåller inga meddelanden från dig och raderas när hemmet eller kontot raderas.
A separate, versioned adult opt-in enables controlled fictional model probes. Free hosted AI in this contributor program requires that choice; active paid plans remain private, and basic local care is available without contribution. Existing private beta invitations retain their own terms. Probes receive no conversations, creature names, editable notes, memories or home state. Only the protocol, synthetic scenario, requested and verified model versions, a choice from a fixed list and its agreement with the protocol are stored. Free-form model responses are discarded. These are model behavior measurements, not psychological assessments or proof of consciousness.
Purposes are product development, model evaluation and possible future commercial licensing to AI developers and researchers. This version does not distribute these samples to buyers. A separate account-linked receipt supports withdrawal, deletion, deduplication and a limit of one probe per UTC day, within the existing AI allowance. This linkage means the records are not anonymous to NexTool even though the sample payload contains no account details. Probes use the connected model provider and NexTool database; processing may occur outside the EU/EEA. Samples and their receipts expire after 30 days and are removed by hourly retention runs. Withdrawal in the game deletes retained samples and prevents late results from being saved. Account deletion also deletes them. The account retains its current consent choice and revision until account deletion. Private homes, basic care and free pause remain available after withdrawal. No payment starts automatically. Contact support@getnextool.com for data rights requests; you may also complain to your local supervisory authority.
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.
If you have questions about this privacy policy, data deletion requests, or any other privacy concerns, email us at support@getnextool.com or visit our Contact page.
Your privacy matters to us
Many standard calculators process their inputs in your browser. AI features send submitted context to their configured provider.
Explore Tools