Privacy Policy

This policy explains how Himalaya Trading Company handles personal data when you use Noni.

1. Data we collect

We may collect your email address, account identifiers, age and Terms confirmation, selected companion, chat messages, conversation summaries, saved memories, image prompts, uploaded reference images, generated-image records, plan and credit balances, payment references, support messages, IP/security logs and basic device or browser information.

2. Why we use it

We use data to create and secure accounts, provide personalized conversations, deliver and retain requested images, remember relevant context, enforce limits, process or verify purchases, prevent abuse, troubleshoot errors, respond to support requests and comply with law.

3. AI, hosting and payment processors

Relevant prompts and recent conversation context may be sent to configured AI/model providers to generate requested responses or images. Supabase may support authentication, database and file storage; Railway may provide application hosting; and Razorpay or another disclosed payment provider may process payment transactions. We receive payment references/status needed to provision purchases, but Noni should not collect your card PIN, CVV, UPI PIN, OTP or banking password.

4. Data minimization and sharing

We aim to send only the context needed for a response. We do not sell personal data. We may share data with processors needed to operate the service, professional advisers, authorities where legally required, or a successor in a lawful business transfer.

5. Storage and retention

Account, chat and image records may remain while your account is active so history and memories work. Security and intermediary records may be preserved for 180 days or longer where a lawful order requires it. Limited billing, fraud, dispute and legal records may remain after deletion only for the applicable purpose and period. Other personal data is erased or anonymized when its purpose ends and retention is not legally required.

6. Your choices, withdrawal and rights

You may ask to access, correct or delete eligible personal data, withdraw consent where processing relies on consent, or raise a grievance. Withdrawal is available by emailing kaushikscienceprojects@gmail.com from your registered email and is handled through the same simple verified-request process used for account consent. Withdrawing or deleting required data can make some features unavailable.

7. Security and breaches

We use access controls, authenticated sessions and protected server credentials. No internet service is completely secure. If a personal-data breach requires notice under applicable law, affected users and authorities will be informed as required.

8. Adults only

The service is not intended for anyone under 18. We do not knowingly permit minors to create accounts. Report suspected underage access immediately.

9. Cookies, local storage and device data

The app may use cookies, browser storage, service workers and device tokens to keep you signed in, remember preferences, provide PIN/app-lock functionality, enable notifications, prevent abuse and support installation as a web app. You can clear browser storage, but doing so may sign you out or reset device-only preferences.

10. Cross-border processing and updates

Some processors or AI model providers may process data outside your state or country, subject to applicable law. Policy changes will be published here with an updated effective date and, where required, renewed notice or consent.