← Nygui

Privacy information — development build

Oh you opened this shit? Well I had to type it.

Nygui stores your daily journal, food log, personal comfort notes, moods, and goals in this browser or device by default. It stores local painting projects in your browser's IndexedDB. Clearing browser data or uninstalling the app may permanently erase local work. Use the export options to keep a backup.

Optional account

If you register, your username, optional email, password hash, session records, theme preferences (colours and fonts, but custom background pictures remain local by default), aggregate usage time, and artwork you explicitly back up are stored on the server hosting this project. Journal, food, goals and mood data sync only when you turn on the relevant opt-in. Your health-condition and comfort notes remain local in this build.

Community

Notes, comments, shared pages and art packs are visible to other users. Do not post personal medical information or private photos. Chat attachments are shared with their intended recipients or group members. Moderators can review reported contributions and suspend accounts.

Friends, messaging and groups

Friend invitations require acceptance. Direct and group messages, including images and animated GIFs, are stored on the host server so they can be delivered across devices. Message content is not end-to-end encrypted in this developer build. Server operators and authorized administrators may have access to stored data. Group members can view shared garden activity and drawings. Account blocks stop direct messages and friend requests; group participation may require leaving that group separately.

Your room, mailbox and pinboard

Signed-in members can change their room title, available visitor goodies, and mailbox/pinboard settings. Only accepted friends can leave mailbox notes or collect goodies. The room owner sees incoming notes privately and decides which notes to pin; up to six pinned notes may appear to viewers permitted by their profile privacy settings. The author username and text of pinned notes are shown to those viewers. Pickup records include who visited, which goodie was taken, and the day, so two-per-friend-per-room daily limits work across devices. Friend gifts currently become collectible keepsakes, not usable gardening supplies. You can remove mailbox notes, and notes can be reported to moderators.

Audio and video calls

Voice and video calls use browser WebRTC with the app server exchanging connection setup messages. Camera and microphone permissions are requested when initiating or accepting a call. WebRTC may expose network address information to the other participant, depending on the network and browser settings. A production TURN relay and security review are needed before public launch. Calls are not recorded by this app. Incoming call alerts work only while the app is connected.

External services

When you check the weather, the Open-Meteo API receives the location or city needed to provide your forecast. If you request location access, your browser/device asks for permission. Radio searches contact the Radio Browser directory. Embedded players from third-party music sites contact those providers; opening external links also contacts their websites. Provider accounts and music availability are controlled by each service.

Data controls

The app offers local backup/export, a separately downloadable server-account records export, local wellness erasure, account logout and account deletion. Exports can contain sensitive personal information and should be stored securely. When account deletion is used, server records associated with that account are removed. Copies in independent backups may require additional retention policies on the hosting service.

Billing and the $9.99 membership

A premium colouring membership is proposed at $9.99 USD per month. This development build cannot take subscription payments or activate premium entitlements. No recurring charges occur. Gold in this build is earned in the app, not money held on deposit.

Before public launch

This is developer-facing privacy information, not a final legal privacy policy. A public operator must publish its legal identity, contact method, retention periods, applicable children's access policy, third-party processor disclosures, and jurisdiction-specific rights. Production hosting requires HTTPS, private database backups and security review.