Privacy Policy

Who operates Neral

Neral is operated in China under the public operator name “Neral 运营者”. In this policy, “we”, “us”, and “the Operator” refer to Neral 运营者.

Privacy and support questions may be sent to [email protected].

Information we process

We process account details, authentication identifiers, display and language preferences, and the situations, decisions, outcomes, experiences, patterns, reflections, and other content you choose to record.

We also process limited operational data such as feature usage, model and token counts, request status and duration, provider identifiers, and sanitized error reports. Paid checkout is disabled during the public Beta, and Neral does not ask for or store payment-card details.

AI processing

When you request an AI-supported operation, the text needed for that operation and bounded relevant context from your own history may be sent to the configured AI provider to generate a result. Inputs are not anonymized before this processing.

The configured AI provider and model may vary by operation or availability. Provider processing regions and retention are governed by the deployed provider configuration and provider terms. Neral does not promise zero provider retention.

Storage and security

Supabase provides production authentication and database hosting. Core decision-journey records use application-layer envelope encryption. Some supporting and legacy records are stored as database plaintext protected by per-account access controls and row-level security. We do not claim that every record is end-to-end encrypted.

Backups and their retention follow the deployed Supabase configuration. Neral does not promise a fixed backup-retention period in this policy.

Service providers

We use Supabase for authentication and database hosting, configured AI providers for AI processing, Cloudflare for website and application delivery, bot protection, and marketing-site performance analytics, AWS KMS for encryption-key operations, Sentry for sanitized error monitoring, and PostHog for allowlisted product-usage events.

Product analytics is designed not to send decision text, prompts, responses, email addresses, or raw user identifiers. Neral does not use analytics for cross-site advertising.

Retention, export, and deletion

You can export user-owned product content and request account deletion from the product.

When deletion completes, covered product content is erased and its encryption keys are destroyed. Limited records may be retained where required for legal, security, fraud-prevention, or dispute purposes. Residual backup copies expire according to the deployed backup lifecycle.

Your choices and rights

You can view, correct, and export product content and can request deletion. Additional privacy rights depend on applicable law. Contact [email protected] to make a request that is not available in the product.

International processing and changes

Our providers may process information in countries other than yours, subject to their deployed regions, terms, and safeguards.

We may update this policy as the service changes. We will publish a new effective date and provide notice through the product or public website when a change materially affects how personal information is handled.