Effective: 27th October 2025

nilGPT is a dApp that allows you to interact with various large language models (LLMs) stored in a trusted execution environment (“TEE”) through a unified interface. This Privacy Policy explains how we collect, use, and when we may disclose your personal data when you use our website, applications, and other places where Nillion Labs Limited acts as a data controller. If you have any questions, you can contact us at [email protected].

1. Collection of Personal Data

We may collect the following categories of personal data depending on how you use our Services:

1.1. Personal data you provide to us directly

• Account Information: When you use our Services, nilGPT collects identifiers, including your name, wallet address and email address, and may also collect or generate identifiers (e.g., User123).
• Payment Information: We (via our third-party partners, such as Stripe) collect your payment information if you purchase our Services.
• Communication Information: If you communicate with us or interact with our social media pages, we collect information, including your contact information and the contents of your messages or posts. We also collect your feedback on our Services.

1.2. Personal data we receive from your use of our Services

When you use our Services, we also receive certain technical information, including:

• Device Information. Depending on your device or browser permissions, your device or browser automatically sends us information about when and how you access or use our Services, such as your device type, operating system information, browser information, internet service provider (ISP), and IP address.
• Usage Information. We collect information about your use of our Services, such as the dates and times of access, pages you view, and about how you use our Services.
• Log Information. We collect information about how our Services are performing when you use them, including log files and information about any error.
• Cookies.  We use strictly necessary authentication cookies to enable secure access to our application through Privy, our wallet authentication provider. These cookies are essential for ensuring the proper functioning of the login and security features of the service and expire automatically once your session ends. Because these cookies are technically necessary to provide the service (i.e., secure login), they cannot be disabled. Its use is based on our legitimate interest in ensuring the security and functionality of the application, in line with Article 6(1)(f) GDPR. For more information on how Privy handles these cookies see their privacy policy here.

1.3. Personal data we may receive through the iOS app

You may choose to access or create an account on our Platform using your Apple ID through the “Sign in with Apple” feature provided by Apple Inc. (“Apple”). By selecting this option, you authorize us to receive from Apple certain account information, including your name and email address (or an anonymized relay email address if you select the “Hide My Email” option). We offer “Sign in with Apple” as a convenient way to register or log in. When you choose this option, we receive from Apple:

• A secure authentication token;
• Your name (if provided); and
• Your email address or a unique, anonymous relay email address if you select “Hide My Email.”

We use this information exclusively to authenticate your identity, create your account, and communicate with you when necessary (e.g., password recovery or account notices).