Privacy Policy

Overview

Effective: 2026-10-06. Gal Game is provided by E13Lau.

AI data flow

With your own OpenRouter account, after your authorization, messages, character instructions and necessary conversation history go directly from your device to OpenRouter and the selected model provider, without passing through our servers. With Pro AI, this content passes through our AppKit backend and Cloudflare AI Gateway to OpenRouter and model providers for replies and content safety checks; we do not persist conversation text. Third parties process received data under their own privacy policies. This version does not offer OpenAI / ChatGPT OAuth sign-in.

Credentials and device storage

API keys / tokens obtained through OAuth are stored only in the device Keychain. They are not uploaded to our backend or written to analytics or conversation logs. For provider requests, the device sends credentials over an encrypted connection to that provider for authentication. Disconnecting removes the local credentials.

Character cards, conversations and settings are stored on your device. Necessary content is transmitted through the AI route above when you send a message.

Account, purchase and usage data

We process random device IDs, anonymous or Apple sign-in user IDs, product and transaction status, app and device information, and feature usage events for accounts, subscriptions, analytics and troubleshooting. These data are linked to users, not used for cross-app tracking or targeted advertising. Apple processes payments; we do not receive payment card details.

Credits and usage records

Pro currently includes 100 credits per day, refreshed at 00:00 UTC. Unused credits do not carry over. Free accounts currently receive no credits; your own OpenRouter account uses its own allowance. Pro charges credits based on actual input, cached input and output tokens. Daily credits and rates may change; the current rules shown in the App apply. We record account identifiers, token usage, model, latency, charges, balance and rate version for billing, quota controls and troubleshooting, without conversation text in analytics. Interrupted streams incur no credit charge. Exhausted credits require waiting for the reset; cost and safety limits also apply, so conversations are not unlimited.

Retention and deletion

Email support@116116.xyz to request deletion of your account and linked server records. Deleting local conversations or disconnecting a provider does not delete data held by that provider; contact the provider for those requests.

Usage events in Cloudflare Analytics Engine are linked by random user identifiers and cannot be deleted per user. They expire about 3 months (90 days) after ingestion. Account deletion does not remove these events early. Events exclude conversation text and credentials, but are not fully anonymous.

Third parties and contact

Cloudflare hosts our backend and analytics, Apple handles purchases, and OpenRouter and model providers process AI requests. For privacy questions contact support@116116.xyz.