Privacy

Who we are

Bioly is run by Bioly Labs, [address]. For anything about your data, write to [privacy email].

What we keep

Your account: your email address, or the account ID and email that Google shares when you log in with it, plus your display name and interface language.

Your pages: the words, links, photos and colors you add, your drafts and every version you publish. We save a new copy of each photo you upload, which drops hidden details such as where it was taken.

Messages that visitors send you through your page's contact form: their name, email and message.

AI usage: which AI action you used, which model ran it, how many tokens it took and how long. We don't keep the intro or the instructions you wrote.

Visits to published pages: daily counts of page views and of which links were opened. We don't record who visited, we don't set cookies on published pages, and we don't store IP addresses.

Keeping things working

To limit abuse of login codes, AI requests and contact forms, we keep a one-way hash of the network address a request came from. It can't be turned back into an address, and we clear it after one day.

Cookies and browser storage

Bioly sets one cookie, bioly_session, to keep you logged in. It's needed for the service and expires 30 days after you last use Bioly. We don't use advertising or tracking cookies, and Bioly doesn't set a cookie to remember your language.

Before you log in, the page you're making is saved in your browser so you don't lose it. Your cookie choice is saved there too.

The matches a visitor strikes on a page stay in that visitor's browser and are never sent to us. They're kept only until the browser is closed, unless the visitor allows Bioly to remember them, in the cookie banner on Bioly or with "Remember my marks" on a page. You can change this any time in Cookie settings at the bottom of Bioly's pages.

Videos on pages

A video on a page plays from YouTube, Vimeo, Bilibili or TikTok. Nothing loads from them until a visitor presses play. After that, that service's own privacy policy applies.

AI

AI needs an account. When you ask Bioly to build or change a page, the intro you wrote, or the part you selected, is sent to the AI provider for your plan: DeepSeek on the free plan, and Anthropic (Claude) or OpenAI (ChatGPT), whichever you choose, on paid plans. We ask OpenAI not to store the request. Your published pages never call the AI.

Who helps us

We use a small number of providers to run Bioly: [hosting provider] for servers, [database provider] for storage, [storage provider] for photos, [email provider] to send login codes, and DeepSeek, Anthropic and OpenAI for AI. They process data only on our instructions.

How long we keep it

Your account and pages stay until you delete them. Login sessions end 30 days after you last use them. Login codes are deleted after a day. Photos that aren't on any of your pages or saved versions are deleted after 30 days. When you delete your account, your pages go offline and your account, pages, published versions, photos, messages and login sessions are deleted right away. AI usage counts are kept without any link to you.

Your choices

In Settings you can export everything we hold about you as a JSON file, or delete your account. You can also write to [privacy email] to correct or delete your data, or to ask a question. If you're in the EU, UK or California, you have the rights given by the GDPR, UK GDPR or CCPA, and you can complain to your data protection authority.

Children

Bioly isn't meant for children under 16.

Changes

If we change this policy in a way that matters, we'll tell you by email or in Bioly before it takes effect.