> cat ./privacy_policy.md
// Last updated: July 2026
> §1. Scope
This Privacy Policy describes how NGMOB Pte. Ltd. ("NGMOB", "we", "us") collects, uses and shares personal information across our website (ngmob.com) and the products we operate:
- > Floniks — MCP-native, all-modal creative studio (image / video / drama).
- > Naga — LLM reasoning engine for studio use.
- > Hollow Lullaby — Game agentic coding — Rust · Bevy · Lua.
- > Kolens — TikTok creator intelligence with a Claude MCP plugin.
- > GoGlow — AI portrait studio for photo, video and animation styles.
- > TimeDodge — TikTok mini-game — a casual reaction game running natively inside the TikTok mini-game platform.
Each product may present a product-specific privacy notice at its own point of use. Where a product notice conflicts with this policy, the product notice governs for that product.
> §2. Information We Collect
Depending on which product or feature you use, we may collect:
- Account data — email, name, and authentication identifiers (e.g. OAuth subject IDs) when you sign up or sign in.
- Content you submit — prompts, uploads (photos, video, audio), workflows, keywords, and export destinations.
- Product usage — feature interactions, generation results, credit consumption, watchlists and lists you build.
- Device and technical data — IP address, user agent, device model, OS version, crash reports and diagnostic logs.
- Payment metadata — transaction IDs, plan tier, and billing status (card numbers are handled by our payment processor and never stored by NGMOB).
- Game telemetry (TimeDodge) — anonymous session events, scores, and platform-provided identifiers issued by the TikTok mini-game host; we do not receive your TikTok account credentials.
> §3. How We Use Information
- Operate, secure and improve the products.
- Fulfil what you asked for — run generations, deliver export files, sync watchlists.
- Process payments, manage credits and prevent abuse or fraud.
- Send transactional messages (receipts, security alerts, product-critical notices).
- Comply with applicable law and enforce our Terms of Service.
We do not use content you submit (photos, prompts, exports) to train foundation models, and we do not sell personal information.
> §4. Sharing & Third-Party Sub-Processors
We share personal information only with vetted sub-processors that help us operate the products, and only to the extent necessary. Representative categories include:
- Cloud hosting & CDN — for serving the website and product APIs.
- Generative AI providers — e.g. FAL.ai, MiniMax, Hailuo, Anthropic — invoked by Floniks and other products to produce the outputs you request.
- Payment processor — Stripe, for handling billing.
- Analytics & error reporting — for measuring uptime and diagnosing crashes.
- TikTok mini-game platform — TimeDodge runs inside the TikTok mini-game host, which provides platform APIs and identifiers under TikTok's own terms.
We disclose personal information to authorities only when compelled by valid legal process, and we may transfer information as part of a merger, acquisition or sale of assets, in which case we will notify affected users.
> §5. Data Retention
We retain personal information only as long as needed to provide the products, comply with our legal obligations, resolve disputes and enforce our agreements. Prompts, uploads and exports are retained for the duration of your account plus a short grace window; you can delete individual items or your entire account at any time.
> §6. Security
We apply reasonable technical and organisational measures — TLS in transit, encryption at rest for sensitive stores, role-based access, least-privilege credentials and centralised audit logging. No system is perfectly secure; if a breach affects your information we will notify you as required by law.
> §7. Cookies & Similar Technologies
Our website uses strictly necessary cookies for authentication and preferences. We may use privacy-respecting analytics that measure aggregate traffic without persistent cross-site identifiers. You can control cookies through your browser settings.
> §8. Your Rights
Depending on where you live, you may have the right to access, correct, delete, export or restrict processing of your personal information, and to withdraw consent or object to certain processing. Contact us at privacy@ngmob.com and we will respond within the timeframes required by applicable law.
> §9. Children
Our products are not directed to children under 13 (or the higher minimum age in your jurisdiction). If you believe a child has provided us personal information, contact us and we will delete it. TimeDodge follows the TikTok mini-game platform's own age gating.
> §10. International Transfers
NGMOB is based in Singapore. Personal information may be processed in Singapore, the United States and other jurisdictions where our sub-processors operate, under appropriate safeguards.
> §11. Changes to This Policy
We may update this policy from time to time. Material changes will be announced at the top of this page and, where required, by email or in-product notice. Continued use after the effective date constitutes acceptance of the updated policy.
> §12. Contact
Questions or requests: email privacy@ngmob.com. For general inquiries, use bd@ngmob.com.