Private by design, temporary by default

1. Data controller

Devanshu Jain, Individual (Unregistered), operates NokJhok at nokjhok.wtf. Contact support@nokjhok.wtf or use our support page.

2. Data collected

• Contact: the entered WhatsApp/contact number, its encrypted form, keyed lookup hash and last four digits; if you connect WhatsApp, the sender identifier and service-window timestamps.
• Order: two source photos, sibling names, occasion, message, tone, optional creative preference, photo-authority and policy confirmations.
• Generated media: working images, audio, video, transcripts, prompts, quality results and final video.
• Payment: order amount, currency, Cashfree references, status and mandatory payment-reversal records. NokJhok does not store complete card details, UPI PINs or banking credentials.
• Technical/support: request identifiers, security signals, order and delivery events, aggregate analytics and support messages.

3. Purposes

We use data to validate inputs, create and quality-check the video, collect and reconcile payment, provide secure delivery and optional WhatsApp delivery, support the order, prevent abuse, maintain required financial/audit records and comply with law.

4. Contact number and WhatsApp

The number entered in the form is not verified and does not itself subscribe you to a message. After payment you may voluntarily send a prefilled WhatsApp order message. The sender identifier then becomes the verified WhatsApp delivery destination and opens a 24-hour service window. NokJhok does not send paid authentication, utility or marketing templates in this flow. Reply STOP to opt out.

5. Browser and analytics

Your browser converts supported images when needed, creates a fresh JPEG to remove embedded metadata, resizes it and runs preliminary face-count, brightness and blur checks. Prepared JPEGs upload directly to private Google Cloud Storage.

Cloudflare Web Analytics and GA4 measure aggregate visits, regions, devices and form-stage events. NokJhok does not send names, phone numbers, messages, photo metadata or private access tokens to analytics. Turnstile and Cashfree may use necessary device signals for abuse prevention and checkout.

6. Processors

• Google Cloud and Firebase: storage, database, tasks, API/worker hosting, operations login and Gemini video generation.
• OpenAI: planning, image generation, moderation, transcription and quality review.
• Cashfree: checkout, payment verification, fraud controls and mandatory financial processing.
• Meta WhatsApp: inbound connection messages, service-window media and delivery status.
• Cloudflare and Google Analytics: security and aggregate traffic measurement.

We provide each processor only what its role needs. We do not sell personal data, photos or videos.

7. Retention

• Abandoned unpaid uploads: normally within 24 hours.
• Paid and resolved media: normally seven days after delivery or resolution.
• Operational backstop: no later than 14 days unless a documented legal, fraud or financial hold applies.

Minimal payment, consent, security, delivery and audit records may remain when required for accounting, disputes, fraud prevention or law. See Data deletion.

8. Security and automation

Phone identifiers are encrypted with Cloud KMS and a keyed one-way hash supports lookup. Media is stored privately with random paths and short-lived access links. Operator roles and audit trails restrict access. No internet service can guarantee absolute security.

Automated tools validate, moderate, generate and quality-check content. We do not retain facial embeddings or create a biometric identity database.

9. Photos and other people

You must have authority to use each submitted photo. The result is a fictional toddler-style artistic interpretation, not a claim that it is an authentic childhood recording.

10. Rights and contact

Subject to law, you may ask for access, correction, erasure, withdrawal of consent, a processing summary or grievance review. Send the order reference and last four contact-number digits; never email source photos or account credentials. We may verify control of the private status link before acting.