Privacy Policy

1. Introduction

Not.tf ("Not.tf", "Not Too Far", "we", "our", or "us") operates a mobile app building platform. This Privacy Policy explains how we collect, use, disclose, and handle your information when you use our Service.

By using our Service, you unconditionally consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, you must not access or use the Service.

Your continued use of the Service constitutes acceptance of any changes to this Privacy Policy, whether or not you have reviewed them.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Name and email address when you create an account
• Profile information such as username and avatar
• Payment information processed through our payment provider, Lemon Squeezy (a Stripe company) — we do not store full card details
• Communication data when you contact us for support
• Any other information you choose to provide

2.2 Project and Usage Data

When you use our Service, we automatically collect extensive data including:

• All project data including app names, descriptions, generated code, and configurations
• All AI prompts, chat messages, and interactions with our interface
• Complete usage statistics including feature usage, session duration, and credit consumption
• Device information, browser type, operating system, and hardware specifications
• IP address, precise location data, and network information
• Cookies, web beacons, and similar tracking technologies
• Click patterns, navigation paths, and behavioral analytics
• Any content you create, upload, or transmit through the Service

2.3 Team and Collaboration Data

If you use team features, we collect:

• Team member information and roles
• Shared projects and collaboration activity
• Team invitation and membership data

3. How We Use Your Information

We may use the information we collect for any lawful purpose, including but not limited to:

• Providing, maintaining, and improving our Service in our sole discretion
• Processing transactions and managing your account
• Training, improving, and developing our AI models using your data and interactions
• Analyzing usage patterns and user behavior for any business purpose
• Creating aggregated, anonymized, or de-identified datasets for commercial use
• Marketing, advertising, and promotional purposes
• Communicating with you about our Service, updates, or offers
• Monitoring and analyzing trends, usage, and activities
• Detecting, preventing, and addressing technical issues, fraud, or security threats
• Enforcing our Terms of Service and other policies
• Complying with legal obligations and protecting our rights
• Any other purpose disclosed at the time of collection or with your consent

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Lemon Squeezy — payment processing and subscription management (merchant of record)
• MongoDB Atlas — cloud database hosting
• Cloudinary — file and image storage
• NVIDIA, Anthropic, and other AI providers — AI model inference (prompts are processed but not retained by these providers for training without separate consent)
• Resend — transactional email delivery
• Sentry — error monitoring (anonymized stack traces)

4.2 Team Members

If you're part of a team, your project data may be accessible to other team members based on their assigned roles and permissions.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4.4 Business Transfers

In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business, your information may be transferred.

5. AI and Machine Learning

Our Service uses artificial intelligence extensively. By using our Service, you grant us a perpetual, irrevocable, worldwide, royalty-free license to use your data as follows:

• All prompts, code, and content you submit are processed by AI models and may be retained indefinitely
• We may use your data (whether anonymized or not) to train, improve, and develop our AI models
• Your interactions may be used to create training datasets for machine learning purposes
• Generated outputs may be influenced by data from all users of the platform
• We reserve the right to use any data, prompts, or content for research and development purposes
• You retain ownership of projects created, but grant us full rights to use, modify, and incorporate any submitted content

6. Data Security

While we implement certain technical measures to protect information, we make no guarantees regarding the security of your data. You acknowledge and agree that:

• No method of transmission or storage is 100% secure
• We cannot guarantee the security of any information you transmit to us
• You transmit all information at your own risk
• We are not responsible for any interception, loss, or unauthorized access to your data
• Security measures may be changed or discontinued at any time without notice
• We have no obligation to detect, prevent, or mitigate security breaches

In the event of a data breach affecting your personal data, we will notify affected users and relevant authorities as required by applicable law (including within 72 hours to supervisory authorities under GDPR where required).

7. Data Retention

We retain your information for as long as we deem necessary for any lawful purpose, including:

• Providing and maintaining our Service indefinitely
• Training and improving AI models (which may require indefinite retention)
• Complying with legal obligations and defending legal claims
• Supporting business operations, analytics, and research
• Any other legitimate business purpose

When you delete your account, your personal data (profile, projects, chat history, sessions) is deleted immediately, except where retention is required by law (e.g., financial and transaction records retained for 7 years as required by tax law) or where data has been anonymized and incorporated into aggregated datasets. Anonymized or aggregated data is no longer considered personal data and may be retained indefinitely. Backups are purged on a rolling 90-day cycle.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete personal data
• Deletion (Right to Erasure): Request deletion of your personal data — available via account deletion in Settings. We will fulfill this within 30 days except where retention is legally required
• Portability: Request an export of your data in a machine-readable format via Settings → Export Data
• Objection: Object to processing of your personal data for direct marketing or where our legitimate interests are the legal basis
• Restriction: Request restriction of processing in certain circumstances
• Opt-out of marketing: Unsubscribe from marketing emails at any time via the unsubscribe link in any email

To exercise any of these rights, contact us at privacy@not.tf. We will respond within 30 days. We may require identity verification before fulfilling a request. EU/EEA users may also lodge a complaint with their local supervisory authority.

California residents (CCPA): You have the right to know what personal information is collected, to delete it, to opt-out of its sale (we do not sell personal data), and to non-discrimination for exercising these rights.

9. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your session and keep you logged in
• Remember your preferences (like theme selection)
• Understand how you use our Service
• Improve our Service performance

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our Service.

10. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18.

If you are under 18, you must not access or use the Service. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We reserve the right to terminate any account we believe belongs to someone under 18, with or without notice.

11. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country. By using our Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

12. Changes to This Privacy Policy

We may update this Privacy Policy at any time without notice. Changes become effective immediately upon posting. We have no obligation to notify you of changes.

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy. It is your responsibility to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy, you may contact us at: