Last Updated: January 10, 2026
This Privacy Policy explains how NADA AI PTE. LTD (“NADA AI,” “we,” “our,” or “us”) handles information when you use Aippy and any other NADA AI websites, applications, platforms, or related services that link to this Policy (collectively, the “Services”). It forms part of our Terms of Service. If you do not agree with this Policy, please do not use the Services.
- Information we handle
- Account details, content you provide, payment records, device and usage data, and AI interactions.
- How we use it
- To operate, personalize, improve, secure, support, and lawfully administer the Services.
- Your choices
- You may have rights to access, correct, delete, restrict, object, port, or withdraw consent.
1. Legal Bases for Processing
Depending on the context and applicable law, we process personal data on one or more of the following bases:
- Performance of a contract. To register and authenticate accounts; provide AI creation, remix, community, project, purchase, subscription, survey, beta, feedback, and support features; and otherwise deliver the Services you request.
- Legitimate interests. To operate and improve the Services, maintain security, prevent fraud and abuse, conduct internal analytics, understand product use, and improve user experience where those interests do not override your rights and freedoms.
- Legal obligations. To comply with applicable laws, respond to lawful requests, enforce our rights, maintain required records, and protect users or the public from fraud or harm.
- Consent. Where required, for optional marketing or surveys; non-essential cookies and similar technologies; advertising or attribution identifiers such as IDFA or GAID; third-party login data; access to device features; and certain cross-border transfers.
- Vital interests. In rare circumstances, to prevent serious harm or respond to an emergency.
You may withdraw consent through available app, browser, device, or cookie settings, or by contacting contact@nadaai.ai. Withdrawal does not affect processing already carried out lawfully, but it may limit some features.
2. Information We Collect
We collect information directly from you, automatically when you use the Services, and from selected third parties.
Information you provide
- Account and profile information: email address, nickname, username, profile picture, location, biography, website link, and other profile details you choose to provide.
- User content: prompts, generated code, project files, comments, images, videos, fonts, uploads, and other shared materials.
- Payment records: order ID, amount, currency, time, and payment channel. Full payment credentials, such as card numbers and passwords, are processed by providers such as Stripe and are not stored by us.
- Support and feedback: information submitted through surveys, beta programs, support requests, and other communications.
Sensitive information. We do not intentionally collect biometric identifiers, health information, precise geolocation, or other sensitive personal data, and ask that you do not upload it.
Information collected automatically
- Device information: identifiers such as IDFA, IDFV, or GAID; IP address; browser; device model; operating system; language; time zone; screen resolution; network type; app version; logs; and crash reports.
- Usage information: pages and features accessed, clicks, taps, input events, timestamps, session duration, and system logs.
When the same account is used across devices, we may associate activity across sessions to provide a consistent experience.
Information from third parties
- Login providers: if you sign in with Google, Apple, or another provider, we may receive your name, email, public profile picture, and provider-specific account ID, subject to your choices with that provider.
- Analytics partners: aggregated metrics such as feature-use frequency, navigation flows, and session statistics.
AI interaction data
Prompts, inputs, and generated outputs may be processed by third-party AI service providers to produce results and operate the Services. We may retain this information for delivery, troubleshooting, safety, and feature improvement. In accordance with their own privacy policies, some AI providers may retain inputs or outputs to improve, train, or optimize their models.
3. How We Use Information
We use personal data to provide, operate, maintain, improve, and secure the Services and to meet contractual and legal obligations. This includes:
- Service delivery and account management: registration, authentication, AI generation, project saving, sharing and Remix, device synchronization, preferences, performance, and reliability.
- Personalization: analyzing creative activity and interaction patterns to tailor content, feature suggestions, offers, advertising, and AI-generated results.
- Product improvement, research, and analytics: evaluating stability, performance, AI accuracy, usability, product updates, marketing effectiveness, and relevant AI models.
- Support and billing: responding to technical, account, subscription, billing, access, correction, and deletion requests, and sending essential service communications.
- Security and continuity: protecting systems and proprietary information, preventing unauthorized access, fraud, misuse, or policy violations, and investigating incidents.
- Compliance and legal administration: sanctions and export controls, auditing, accounting, governance, lawful requests, agreement enforcement, dispute resolution, and legal defense.
No significant automated decisions. We do not use personal data to make automated decisions that produce legal or similarly significant effects. AI outputs respond to creative inputs; they are not evaluations or determinations about the user.
5. Storage, Retention, and Security
We use reasonable technical and organizational measures designed to protect the confidentiality, integrity, and availability of personal data.
- Security: information is stored on secured cloud infrastructure and protected through measures such as access controls, encryption, and security reviews. No system is completely secure, and users remain responsible for protecting account credentials.
- Retention: we keep information only as long as reasonably necessary to deliver the Services, fulfill the purposes in this Policy, and meet legal obligations, after which it is deleted or anonymized where appropriate. AI providers may retain some interaction data longer for service improvement or model training under their policies.
- Cross-border transfers: information may be processed outside your country or region. Where required, we use safeguards intended to protect it in accordance with applicable law.
- Third-party services: providers operate under their own privacy and security terms and are expected to comply with applicable data-protection requirements.
For more about our security practices, see Security at NADA AI.
7. Your Privacy Rights
Depending on where you live, you may have rights to:
- access personal data we hold about you;
- correct inaccurate or incomplete data;
- request deletion where the data is no longer required for service delivery or legal compliance;
- withdraw consent, where processing is based on consent;
- object to or restrict certain processing; and
- exercise other rights granted by applicable law.
You may delete an Aippy account through Settings → Account → Delete Account. Because of the nature of AI systems, some intermediate information or third-party provider logs may not be retrievable or deletable by us; we will assist to the extent technically and contractually feasible.
How to submit a request
Email contact@nadaai.ai. We may verify your identity or an authorized agent’s authority before responding. Exercising some rights may affect access to features that require the relevant information.
8. Age Restrictions and Protection of Minors
The Services are not intended for people under 18, or under the age of majority where local law sets a different threshold. We do not knowingly collect personal information from anyone below the applicable age. If we learn that such information was collected, we will take appropriate steps to delete it and, where necessary, deactivate the account. To report a concern, email contact@nadaai.ai.
9. Updates to This Policy
We may revise this Policy to reflect changes in law, technology, the Services, or our practices. We will publish the revised version and update the “Last Updated” date. For material changes, we may provide additional notice through the app, email, or another appropriate channel. Please review this page periodically.
10. California Privacy Rights
California residents may have rights under the California Consumer Privacy Act and California Privacy Rights Act, subject to applicable exceptions:
- Right to know: request information about personal data collected, used, disclosed, or shared in the preceding 12 months.
- Right to delete: request deletion, subject to legal and operational exceptions.
- Right to non-discrimination: receive equal service and pricing when exercising privacy rights.
- Right to opt out: we do not sell or share personal data as those terms are defined by the CCPA. If that changes, we will provide a way to opt out.
To make a request or authorize an agent, email contact@nadaai.ai. We may verify identity and authorization as required by law.
11. EEA Privacy Rights
People in the European Economic Area may have the following rights under the General Data Protection Regulation, subject to applicable conditions and limitations:
- Access: confirmation of whether we process your data and access to a copy.
- Rectification: correction of inaccurate or incomplete data.
- Erasure: deletion in circumstances such as when data is no longer needed or consent-based processing has been withdrawn.
- Restriction: limited processing in certain cases, including while accuracy or an objection is being assessed.
- Objection: objection to processing based on legitimate interests or for direct marketing.
- Portability: receipt of data you provided in a structured, commonly used, machine-readable format where legally applicable.
- Withdrawal of consent: withdrawal at any time without affecting prior lawful processing.
- Complaint: the right to lodge a complaint with your local data-protection authority.
Email contact@nadaai.ai to exercise these rights. We may verify your identity or require evidence of an agent’s authority.
12. Contact Us
For privacy requests, Aippy product support, or general NADA AI enquiries, email contact@nadaai.ai.
Please include enough account and request information for us to identify and respond to the issue, but do not email passwords or full payment credentials.