Create yours

Privacy policy

1. Data controller

Devanshu Jain, Individual (Unregistered), operates NokJhok at nokjhok.wtf. Contact support@nokjhok.wtf or use our support page.

2. Data collected

  • Contact: the entered WhatsApp/contact number, its encrypted form, keyed lookup hash, last four digits and manual delivery status.
  • Order: one required and up to two optional photos per sibling, sibling names, occasion, message, tone, optional creative preference, photo-authority and policy confirmations.
  • Generated media: working images, audio, video, transcripts, prompts, quality results and final video.
  • Payment: order amount, currency, Cashfree references, status and mandatory payment-reversal records. NokJhok does not store complete card details, UPI PINs or banking credentials.
  • Technical/support: request identifiers, security signals, order and delivery events, aggregate analytics and support messages.

3. Purposes

We use data to validate inputs, create and mechanically finalize the video, collect and reconcile payment, provide secure delivery and optional WhatsApp delivery, support the order, prevent abuse, maintain required financial/audit records and comply with law.

4. Contact number and WhatsApp

The number entered in the form is not verified. After payment you may voluntarily send a prefilled WhatsApp order message so an operator can match the unique reference. An operator may manually send the finalized MP4 from NokJhok’s WhatsApp Business account. If the number is wrong, unavailable or skipped, the private web download remains available.

5. Browser and analytics

Your browser converts supported images when needed, suggests a face-centred 3:4 crop, lets you adjust it, creates a fresh JPEG to remove embedded metadata, and runs preliminary face-count, brightness and blur checks. Only prepared crops upload directly to private Google Cloud Storage.

Cloudflare Web Analytics and GA4 measure aggregate visits, regions, devices and form-stage events. NokJhok does not send names, phone numbers, messages, photo metadata or private access tokens to analytics. Turnstile and Cashfree may use necessary device signals for abuse prevention and checkout.

6. Processors

  • Google Cloud and Firebase: storage, database, tasks, API/worker hosting, operations login and Gemini video generation.
  • fal.ai: temporary prompt-controlled processing of up to three photos per sibling to create one fictional toddler-style character reference. No OpenAI account key is passed through fal.
  • OpenAI: planning, image generation, moderation, transcription and quality review.
  • Cashfree: checkout, payment verification, fraud controls and mandatory financial processing.
  • WhatsApp: manual delivery from NokJhok’s WhatsApp Business account when you choose that channel.
  • Cloudflare and Google Analytics: security and aggregate traffic measurement.

We provide each processor only what its role needs. We do not sell personal data, photos or videos.

7. Retention

  • Abandoned unpaid uploads: normally within 24 hours.
  • Paid and resolved media: normally seven days after delivery or resolution.
  • Operational backstop: no later than 14 days unless a documented legal, fraud or financial hold applies.

Minimal payment, consent, security, delivery and audit records may remain when required for accounting, disputes, fraud prevention or law. See Data deletion.

8. Security and automation

Phone identifiers are encrypted with Cloud KMS and a keyed one-way hash supports lookup. Media is stored privately with random paths and short-lived access links. Operator roles and audit trails restrict access. No internet service can guarantee absolute security.

Automated tools validate inputs and master images, moderate prompts, generate video and mechanically finalize its files. Generated video content is not reviewed after generation, so inaccurate dialogue, visuals, identity, continuity or other model errors may be delivered. We do not create or retain facial embeddings or a biometric identity database.

9. Photos and other people

You must have authority to use each submitted photo. The result is a fictional toddler-style artistic interpretation, not an authentic recovered childhood photograph or recording.

10. Rights and contact

Subject to law, you may ask for access, correction, erasure, withdrawal of consent, a processing summary or grievance review. Send the order reference and last four contact-number digits; never email source photos or account credentials. We may verify control of the private status link before acting.