AllureInn AI (the “Site”, at allureinn.app and app.allureinn.app) is a role-play interactive fiction platform. This policy explains what data the Site collects, how it is used, who processes it, and how you can ask for it to be deleted.
1. Data we collect
- Account data: nickname, email, password (stored only as a hash — we cannot see your password), avatar, bio, preferences, and who invited you.
- When you sign in with Google: the account identifier, email, and name Google provides. We never receive your Google password or read anything else in your Google account.
- Content you create and enter: works you create (character cards, worldbuilding, images), images you upload and generate in the AI image area, your play conversations, posts in chat rooms and forums, comments, favorites, recommendations, ratings, follows, and messages to the site owner.
- Points and usage records: the history of points earned and spent, and the model and usage of each turn, used for billing, support, and preventing abuse.
- Payment data: when you buy points or a membership, payment is handled by a payment service provider. We receive only the order, amount, payment status, and (for USDT withdrawals) the receiving address you set yourself. We never see or store your card number.
- Technical data for sign-in and protection: sign-in cookies; to prevent brute-force password attempts we briefly record the connecting IP and number of failures (kept only in server memory and cleared on restart); and ordinary server operation logs.
- Sign-in records: the time, method, IP, and browser of each sign-in, kept for 90 days for account security (for example, checking whether an account has been taken over).
2. How we use data
We do not sell your data, show ads, or use third-party tracking or advertising cookies.
- To provide sign-in, play, creation, chat rooms, and in-app messages.
- To produce AI replies, images, and short videos (see section 3).
- To process payments, orders, and support.
- To keep the Site safe, for example preventing flooding, abuse, and unauthorized sign-ins.
3. Services that handle your data
- Language model services: when you play, your input and the story settings are sent to the language model you chose to produce a reply. Features such as memory tidy-up, AI creation help, and translating image descriptions also send the relevant content to a language model. It may be a model we host ourselves, or one of these commercial services: xAI (Grok), DeepSeek, Google (Gemini), OpenAI (ChatGPT), Zhipu (GLM). Each service handles the content it receives under its own privacy policy.
- Images: generated on our own equipment or by the cloud image service you choose: xAI (Grok), Google (Gemini), OpenAI (ChatGPT images). When a cloud service is used, the scene description and reference images (such as character portraits or pictures you uploaded) are sent to that service.
- Image recognition: some features send images to Google (Gemini) or xAI (Grok) to be read, for example to find a character’s face for an avatar crop, to confirm that the people in uploaded images are adults (an age check), or to align map pins. Account avatars are not sent.
- Short videos and audio dramas: generated on our own equipment, without third-party services.
- Hosting, storage, and network: the Site runs on Railway (servers in Singapore); images, short videos, and audio files are also backed up on Cloudflare R2; network delivery and protection are provided by Cloudflare.
- Payments: handled by a payment service provider (its name will be listed here once confirmed).
- Email: system emails such as “forgot password” are sent by Resend.
- Google sign-in: used only if you choose to sign in with Google.
- Fonts: if you pick the serif, kai, or rounded font in the play page reading settings, or open reading settings, your browser downloads the font from Google Fonts, and Google can see your IP address and browser information; your account and conversations are not sent.
4. Who can see your data
- Only you can see your conversations; we do not read them.
- Works you publish, your nickname, avatar, and bio, your posts in chat rooms, forums, and comments, and saves you share can be seen by other users.
- The site owner and any administrators the owner authorizes (within the permissions each is given) can see account data (nickname, email, registration time, status, and so on), points and usage records, sign-in records, and internal notes used for management, support, and preventing account takeover.
5. Retention and deletion
Your data is kept while you use the Site. You can delete your own conversations and works at any time, and you can delete your whole account at the bottom of “Account settings”: your works, conversations, points, comments, and similar data are deleted together (records of other people playing your works disappear too). If you cannot use that feature, ask through “Me → Contact the owner” in the app or the contact page, and we will handle it within a reasonable time. Model usage, cost, and order records are kept as accounting records but no longer tied to your personal data. To guard against data loss we back up data to another location periodically; deleted data may remain in older backups.
6. Age limit
The Site is intended for adults and may only be used by users aged 18 or over.
7. Policy updates
If this policy changes, we will update this page and post a notice in the app.
8. Contact
For any question about this policy, see the contact page, or after logging in write to us under “Me → Contact the owner”.