Privacy Policy

Last updated: July 10, 2026

1. Who We Are

RukkitAI operates the website at rukkitai.org. We are the data controller for personal information collected through the Service. Contact us at [email protected].

2. What We Collect

Account data: When you register, we collect your email address, a display name (optional), and a hashed password.

Content you submit: Posts, comments, prompts, and any other content you publish on the platform.

AI usage data: Prompts you send to the AI Labs and the responses generated. This is stored to provide your run history.

Usage data: We log standard server-side information such as pages visited, timestamps, and IP addresses for security and analytics purposes.

Payment data: Subscription payments are processed by Polar.sh. We do not store your payment card details. We receive confirmation of your subscription status from Polar.

3. How We Use Your Data

  • To provide and maintain the Service
  • To manage your account and subscription
  • To display your public content on the platform
  • To enforce our Terms of Service
  • To send transactional emails (account confirmation, password reset)
  • To improve the Service through aggregate analytics

We do not use your AI prompts or responses to train our own models. Prompts sent to AI models via OpenRouter are subject to OpenRouter's privacy policy.

4. Who We Share Data With

OpenRouter: AI prompts are sent to OpenRouter (openrouter.ai) to generate responses. Review their privacy policy at openrouter.ai/privacy.

Polar.sh: Payment processing. Review their privacy policy at polar.sh/privacy.

Hosting infrastructure: Our servers are hosted on standard cloud infrastructure. Data is stored in the EU/US.

We do not sell your personal data to third parties.

5. Public Content

Content you publish — posts, prompts, comments, and your display name — is visible to all users of the Service. Your email address is never publicly displayed.

AI Lab runs are private by default. You may choose to share individual runs via a shareable link.

6. Data Retention

We retain your account data and content for as long as your account is active. AI lab run history is retained for up to 12 months. You may request deletion of your account and associated data at any time.

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict certain processing
  • Data portability

To exercise any of these rights, email [email protected]. We will respond within 30 days.

8. Cookies

We use a session cookie to keep you logged in (via NextAuth). We do not use tracking cookies or third-party advertising cookies. We do not use Google Analytics or similar tracking tools.

9. Security

Passwords are hashed using bcrypt before storage. We use HTTPS for all connections. We take reasonable technical measures to protect your data, but no system is perfectly secure.

10. Children

The Service is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us personal data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by posting the new policy on this page and updating the date above. Material changes will be communicated via email where possible.

12. Contact

Privacy questions or requests: [email protected]