> cat ./privacy_policy.md

This Privacy Policy describes how NGMOB Pte. Ltd. ("NGMOB", "we", "us") collects, uses and shares personal information across our website (ngmob.com) and the products we operate:

• > Floniks — MCP-native, all-modal creative studio (image / video / drama).
• > Kolens — TikTok creator intelligence with a Claude MCP plugin.
• > Haze Day — Live haze (PM2.5) readings and guidance for Southeast Asia, with a Telegram alert bot.
• > GoGlow — AI portrait studio for photo, video and animation styles.
• > Hanakoi — AI companion characters with memory, voice, photos and story chapters. [own privacy policy]
• > TokenLiquid — Unified LLM gateway compatible with OpenAI, Anthropic and Gemini protocols.
• > Doubo — Native IPTV / M3U player for iPhone, iPad and Mac — no bundled channels. [own privacy policy]
• > Naga — LLM reasoning engine for studio use.
• > Hollow Lullaby — Game agentic coding — Rust · Bevy · Lua.
• > TimeDodge — TikTok mini-game — a casual reaction game running natively inside the TikTok mini-game platform.

Hanakoi and Doubo publish their own privacy policies, linked above, and other products may present a product-specific notice at the point of use. Where a product notice conflicts with this policy, the product notice governs for that product.

Depending on which product or feature you use, we may collect:

• Account data — email, name, and authentication identifiers (e.g. OAuth subject IDs) when you sign up or sign in.
• Content you submit — prompts, uploads (photos, video, audio), workflows, keywords, export destinations, messages to AI characters, and API requests you route through our products.
• Product usage — feature interactions, generation results, credit consumption, watchlists and lists you build.
• Device and technical data — IP address, user agent, device model, OS version, crash reports and diagnostic logs.
• Payment metadata — transaction IDs, plan tier, and billing status (card numbers are handled by our payment processor and never stored by NGMOB).

What each product actually collects differs; see §3 for product-specific practices.

• Operate, secure and improve the products.
• Fulfil what you asked for — run generations, deliver export files, sync watchlists.
• Process payments, manage credits and prevent abuse or fraud.
• Send transactional messages (receipts, security alerts, product-critical notices).
• Comply with applicable law and enforce our Terms of Service.

We do not use content you submit (photos, prompts, exports) to train foundation models, and we do not sell personal information.

We share personal information only with vetted sub-processors that help us operate the products, and only to the extent necessary. Representative categories include:

• Cloud hosting, identity & CDN — for serving the websites and product APIs, including Google (Firebase Authentication, Cloud Firestore, Cloud Run) for Hanakoi.
• Generative AI providers — e.g. FAL.ai, MiniMax, Hailuo, Anthropic, OpenAI — invoked by Floniks, Hanakoi, the Haze Day bot and other products to produce the outputs you request.
• Model providers you call through TokenLiquid — e.g. OpenAI, Anthropic, Google — which receive the API requests you send to their models.
• Content moderation — an automated moderation provider that screens Hanakoi messages and character personas.
• Payments — Stripe for web billing; RevenueCat, the Apple App Store and Google Play for in-app subscriptions.
• Analytics & error reporting — Google Tag Manager / Google Analytics 4 on product websites, and tools for measuring uptime and diagnosing crashes.
• Telegram — Haze Day bot messages are delivered through Telegram under Telegram's own terms.
• TikTok mini-game platform — TimeDodge runs inside the TikTok mini-game host, which provides platform APIs and identifiers under TikTok's own terms.

We disclose personal information to authorities only when compelled by valid legal process, and we may transfer information as part of a merger, acquisition or sale of assets, in which case we will notify affected users.

We retain personal information only as long as needed to provide the products, comply with our legal obligations, resolve disputes and enforce our agreements. Prompts, uploads and exports are retained for the duration of your account plus a short grace window; you can delete individual items or your entire account at any time. Product-specific retention periods are described in §3.

We apply reasonable technical and organisational measures — TLS in transit, encryption at rest for sensitive stores, role-based access, least-privilege credentials and centralised audit logging. No system is perfectly secure; if a breach affects your information we will notify you as required by law.

This website (ngmob.com) does not load advertising or analytics scripts. Product websites — including hanakoi.ai, haze.day, tokenliquid.cc and doubo.tv — use Google Tag Manager and Google Analytics 4, which may set cookies and collect device data and your IP address to measure usage. Where a product offers a cookie banner or "Cookie settings" control, you can decline or withdraw analytics consent there; you can also control cookies through your browser settings or the Google Analytics opt-out browser add-on.

Depending on where you live, you may have the right to access, correct, delete, export or restrict processing of your personal information, and to withdraw consent or object to certain processing. Contact us at privacy@ngmob.com and we will respond within the timeframes required by applicable law. For Hanakoi, write to privacy@hanakoi.ai.

As a Singapore company, NGMOB handles personal data in accordance with the Personal Data Protection Act 2012 (PDPA). If you are not satisfied with our response, you may complain to Singapore's Personal Data Protection Commission.

Our products are not directed to children under 13 (or the higher minimum age in your jurisdiction). If you believe a child has provided us personal information, contact us and we will delete it. Hanakoi asks every user to declare a year of birth before chatting and applies additional protections to minor accounts. TimeDodge follows the TikTok mini-game platform's own age gating.

NGMOB is based in Singapore. Personal information may be processed in Singapore, the United States and other jurisdictions where our sub-processors operate, under appropriate safeguards.

We may update this policy from time to time. Material changes will be announced at the top of this page and, where required, by email or in-product notice. Continued use after the effective date constitutes acceptance of the updated policy.

Questions or requests: email privacy@ngmob.com. For general inquiries, use bd@ngmob.com.