Terms & Privacy
Last updated: December 2025
Summary
Use Narufield responsibly. Your conversations are encrypted and not used to train AI models. We collect minimal data to run the service. You can delete your account and data anytime.
Terms of Service
What you agree to
- You're at least 16 years old (or have parental consent)
- You won't use Narufield for illegal activities, harassment, or generating harmful content
- You understand AI outputs need verification before acting on them
- You won't attempt to circumvent usage limits or abuse the service
What we provide
- Access to AI reasoning tools through multiple providers
- Encrypted storage of your recent conversations
- The right to modify, suspend, or discontinue features
Liability
Narufield is provided "as is." We're not liable for decisions made based on AI outputs. Always verify important information independently.
Privacy Policy
This policy explains how Narufield ("we", "us") collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR).
Data Controller
Joseph Fortner, Germany
Contact: contact@narufield.com
Data we collect
| Data | Purpose | Legal Basis |
|---|---|---|
| Email address | Account authentication | Contract (Art. 6(1)(b) GDPR) |
| Conversations (encrypted) | Provide chat history feature — encrypted at rest, we cannot read them | Contract (Art. 6(1)(b) GDPR) |
| Payment information | Process subscriptions | Contract (Art. 6(1)(b) GDPR) |
Data we don't collect
- No tracking cookies or advertising identifiers
- No behavioral profiling
- No selling or sharing data with third parties for marketing
Cookies
Narufield uses only essential cookies required for authentication and session management. We do not use tracking, analytics, or advertising cookies.
Data retention
| Data | Retention |
|---|---|
| Conversations | Rolling window — only recent conversations visible in your history are stored. Older conversations are automatically purged. |
| Account data | Until you delete your account or request deletion |
Third-party processors
We use the following service providers who may process data on our behalf:
| Provider | Purpose | Data processed |
|---|---|---|
| Cloudflare | CDN, security, DDoS protection | IP addresses (temporary), request metadata |
| Stripe | Payment processing | Payment details, billing address |
| Anthropic, OpenAI, Google | AI response generation | Message content only (no identity attached) |
Each provider operates under their own privacy policy and GDPR-compliant data processing agreements.
AI providers
Your messages are sent to AI providers (Anthropic, OpenAI, Google) to generate responses. We do not share your identity, email, or account information with these providers.
- Not used for training — API data is not used to train AI models
- Temporary retention — Providers retain API logs briefly for safety monitoring (e.g., Anthropic: 7 days), then delete
- No identity linked — Messages are sent without your email or account details
Encryption
Conversations are encrypted at rest. Data in transit is protected via TLS.
Your rights (GDPR)
Under GDPR, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — delete your account and all associated data
- Data portability — export your data in a portable format
- Object — object to certain processing activities
- Withdraw consent — where processing is based on consent
To exercise these rights, contact us at contact@narufield.com or use the account deletion feature in your account settings.
Right to complain
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For Germany, this is the data protection authority of your federal state (Landesdatenschutzbeauftragter).
International transfers
Some of our processors (Cloudflare, Stripe, AI providers) may transfer data outside the EU/EEA. These transfers are protected by Standard Contractual Clauses (SCCs) or other GDPR-compliant mechanisms.
Changes
We may update these terms. Material changes will be communicated via email or in-app notice. Continued use after changes constitutes acceptance.