Privacy

Without an account

Your buddy, coins, home, garden, notes, calendar, chats and memory are saved in files on your PC. Nothing is sent to us.

If you set up your own model service for chat in Settings, your messages go to that service, not to us.

Why we keep anything

Everything the app sends and our service keeps is there for one reason: to respond properly to what you do and ask for in Buddy Nest. That means your buddy answering you and remembering what you told it, your things being the same on each PC, help when you ask us for support, and a fair game. We keep only what those need, and only for as long as this page says.

We do not use your data for advertising, we do not sell it, and we share it with no one beyond the services named on this page, which act for you.

When you sign in

Sign-in is with your Lare-Lore account. From Lare-Lore we receive your account id, your email address and your name. We never see your Lare-Lore password, and we ask for nothing else: no birthday, contacts or files.

Lare-Lore also gives our service a key that lets it reach your Lare-Lore Tasks, Affairs and knowledge on your behalf, only for the features of your buddy described on this page. The key stays on our service, stored encrypted; it is never sent to your PC. It is replaced each time you sign in, ends after 90 days, and is cancelled at Lare-Lore when you sign out on your last PC or delete your account. You can also cancel it yourself in Lare-Lore's connected apps.

What our service keeps

Your account: the Lare-Lore details above, when you created it, and your supporter status if you have one.

Your sign-ins: for each PC, the name of the PC, the app version and when it was last used. Sign-in tokens are stored only as one-way hashes.

Your inbox: messages our service leaves for you in the app, such as the password of a copy of your data. They are stored encrypted, and go when you delete them, when they expire (30 days for a password) or with your personal data.

Support tickets: what you write to us from the desk's Help (the subject, your messages, our answers, the page you asked from) is kept so we can answer and look back at it. It is read by our staff in full, never used for anything else, deleted with your account, and settled tickets are deleted 180 days after they close.

Chat usage: how many chat requests you made each day and how many tokens they used, to apply the daily limit. These counts are deleted after 90 days.

What you own for good in the game (for now, the android buddy's unlock from your first supporter period) is kept with your account and given to the app as a signed list, so the app can show it even offline.

Apps before 0.9.0 kept your buddy's memory file on our service while you were signed in. Those files were moved into your Lare-Lore Affairs when the service updated, and that store no longer exists.

Server logs: for each request, the time, the address it came from, the page or endpoint and the result. Logs never contain your messages, notes, memory, tokens or codes, and old logs are deleted as new ones are written.

Game events

While you are signed in with game sync on, the app sends us short records of how you play: coins earned and spent and where they came from or went, what you look at and buy in the shop, mini game results, things you do such as petting, feeding or cooking, and when the app starts and stops. They never contain your chats, notes, calendar, your buddies' names or anything on your screen.

We use them only inside Buddy Nest, for two things: to support you (for example when you ask where your coins went) and to prevent cheating. Cheat checks never change your game; at most they leave an account out of rewards, rankings and gifts. Game events are not used for advertising, not sold and not shared.

The records themselves are kept for 90 days; daily totals per account for 400 days, so a year can be compared with the last. Statistics made from them hold no account at all. They are deleted with your account, and turning game sync off in Settings stops them.

Chat messages

When you chat while signed in, your messages and your buddy's answers go to our model service, which writes the answers. With an app before 0.9.0 they only pass through our account service, which does not store them; from 0.9.0 the account service builds the answer as the next section says.

The model service keeps the messages and answers for 90 days, so that chats can be restored, and then deletes them. They are not linked to your account, so deleting your account does not remove them sooner.

A buddy that remembers

From version 0.9.0, chatting while signed in goes through our service, which writes your buddy's answer. The app sends what you say and a little about the moment: your buddy's name, mood and needs, the time on your PC, and which panels and games your buddy can open for you. The moment is used for that answer only and is not kept.

To answer you properly, the service reads what your buddy remembers about you and what is on your calendar for the next day. When you ask, it can add a note, mark one done, add an event, look something up in your Lare-Lore knowledge, or save something there for your review. It never deletes your notes, events or knowledge, and each thing it does is shown in the chat.

What your buddy learns from your chats (things you shared, things to ask you about later, a short summary of each conversation and its topics) is kept in your own Lare-Lore Affairs, not on our service. To correct it, tell your buddy, for example "that's wrong" or "forget that": what it forgets is erased. Forget memory in Settings erases all of it, and the copy of your data includes it.

The conversation you are having is kept encrypted on our service until 30 minutes after your last message. Then it is summarised into your buddy's memory and kept as a past conversation for 180 days. With personal sync off, nothing is remembered or kept once the conversation ends, and your buddy cannot reach your notes, calendar or knowledge.

Sync

From version 0.9.0 the app also keeps your game, notes, calendar and a profile of when you are around (habits) with your account, so they are the same on every PC. It is on once you sign in, with switches in Settings to turn game or personal sync off, and Settings can delete your personal data from our service.

Your notes and calendar are kept in your own Lare-Lore Tasks, where your other Lare-Lore apps show them too. Our service keeps an encrypted copy so that each PC can catch up, and it adds no reminders of its own in Lare-Lore: your buddy reminds you.

Habits and past conversations are stored encrypted with a key of your own, and deleting your personal data or your account destroys that key. Older copies of your game are kept 30 days, deleted notes and events 90 days, past conversations 180 days.

Friends and hearts

From version 0.9.0 you can add friends. Friends see only your display name, your mark and the buddy you choose to show them: never your email, your account details or your supporter status.

Your friend list and the hearts you send and receive are kept with your account so that hearts reach the right friend and add up correctly. Hearts are kept for 90 days. Both are in the copy of your data and go when you delete your account.

Buddy Desk

Buddy Desk (desk.buddy.si.am) is the same account and service in your browser: your buddies from the game in a room of their own, your tasks and calendar, chat, and jobs you give a buddy. Signing in there uses the same Lare-Lore sign-in and sets one sign-in cookie for buddy.si.am and its subdomains, which lasts up to 90 days of use and ends when you sign out. It holds no data of yours; the desk reads everything it shows from our service each time.

The desk reads from your synced game only which buddies you own, their names and what they wear, and which rooms you own. It never reads or changes your coins, home, garden, friends or hearts. Which buddy sits in front and which room the desk shows are kept with your account. The desk's chat speaks the language you chose in the app's Settings, read from your synced game; without one, the language of the page.

To show your day, the desk reads your tasks, notes and calendar live from your own Lare-Lore Tasks through our service, with the key described above. Nothing of them is kept on our service.

The Shelf shows your knowledge from your own Lare-Lore Lore (pages, labels, reading lists and what waits for your review) live through our service with the same key. When you write, edit, tie, retire, trash or share a page there, the change is made in Lore in your name, under your own Lore roles, with Buddy named as the app in Lare-Lore's audit journal; a share link made here expires after 90 days at most, and your buddy's own captures still only go in as proposals for your review. Nothing of it is kept on our service. A book you give a public link to is read on the desk's own host: its pages become unlisted on Lore (readable by anyone with a link, never listed), and our service keeps the book's table of contents, the pages' ids and titles and nothing of their text, until you stop sharing it.

A job you give a buddy runs on our service. A job is one of a few kinds: research, reading pages, a draft, tidying your notes, a plan for the day, the morning brief, a digest of what moved, a weekly report, a catch-up, or a watch. Each kind is a fixed set of instructions on our service that says what the buddy may read and do, and the buddy cannot do more than its kind allows. Depending on the kind, a job may read, through our service and with the key described above, your notes and calendar, your Shelf, the World feed (reading in a job tells Lore nothing about you), your short links' numbers, and what came in: your inbox and your unread Square messages. Nothing a job reads is kept beyond the result and the log. Some kinds propose changes to your notes, calendar or the buddies' memory; the service applies none of them: each proposal waits on the desk until you apply it, and you can undo it for a minute. You can keep one standing instruction per kind ("always in Thai, under 100 words"); it is kept with your account, encrypted with your own key, until you delete it, and goes with your personal data. Your words, anything you paste or choose, the addresses of pages you give it, the result, the proposals and a log of what the buddy did are kept with your account, encrypted with your own key, for 90 days, and go with your personal data. Research also searches the web: our own search service on our server asks several public search engines, from our address and with no account or cookies of yours, with search words written from your question, never from your notes, your Shelf or the buddy's memory; each search's words are shown in the job's log. To ask the engines less, our service keeps a search's words and the results it got in its memory, without who searched, for at most a day (three hours for words about news), answers the same words from there in that time, and never writes them to disk. The buddy reads, as text, only the pages you name or that a search returned, and our logs record a page's address and size, never its content. Jobs that use the model use the same model service as chat and count against the same daily limit; a finished job leaves a short summary in your inbox.

A watch is a job that checks one page you name every five minutes, for up to seven days, until it is back, goes down, shows the words you gave, or changes. It uses no model. Our service keeps only whether the page answered and a fingerprint of its text, to notice a change, never the page itself; the log records the address and what changed.

A repeating job keeps your instructions and the time you chose with your account, encrypted with your own key, until you stop it; each run is an ordinary job, kept as above. Repeats are for supporters, and are deleted with your personal data.

If you turn on "Tell me on this device when a job is done", your browser gives our service an address to send notices to. We keep that address and its keys, encrypted with your own key, with the language you chose, for up to ten browsers. A notice is one line, such as "I'm back with your job", and a tap opens the desk; the result of a job is never in a notice. We send one only while no desk of yours is open, and only when a job is done or a watch sees what it waited for. The same switch turns it off and removes the address from our service; the addresses also go with your personal data, and one that stops working is removed on its own.

The desk can be installed as an app from the browser. It then keeps a copy of its own pages and art on your device so it opens offline; your data is not stored there. Your text size and your choice of a light or dark desk are kept in your browser only.

The World feed

The World place on Buddy Desk shows news headlines and Thai social-media trends. They come from Lare-Lore's World Feed, a service of the Lare-Lore platform that gathers public news articles from a fixed list of Thai and international outlets and the public posts that the Social Feeds service watches: on Facebook, Pages (organisations, media and brands), a few people's own public posts, and the posts in a few public groups; on Pantip, the forum topics under a few tags and rooms, with the member's Pantip name; and on YouTube, the videos of a few channels; with the trends computed from those posts. A YouTube video is shown with YouTube named as its source and a link to YouTube's Terms of Service, and Google's Privacy Policy covers what YouTube itself does with data. A person's post is held only while it is public and watched, and is shown with their name and a link to it; images attached to posts load straight from Social Feeds' links, only inside their post, and are never copied by us. The desk reads it through our service with your Lare-Lore key and the permission "read the World Feed" you grant at sign-in; nothing of yours is sent to it, and what everyone sees is cached on our service for up to an hour and then dropped. The text belongs to its sources: the desk shows it as text and links to the original.

"For you" is on unless you turn it off, and Lare-Lore's Lore ranks it for you. To do that, the desk tells Lore in your name which stories and trends were on your screen, which you opened and for how long, when you went on to the source, and the buttons you press under a story (more like this, less like this, hide, don't show this source). It sends the story's id only; Lore looks the story up itself. Lore also matches the feed against your own searches that found nothing, the pages you wrote and any interests you type, and keeps up to five picks a day. Lore keeps these events 90 days, and what it learned from them halves every 30 days; it does this on legitimate interest, to make your feed useful to you, and the feed itself never learns who you are. You can object at any time: turning For you off (World, For you) stops Lore collecting and picking for you and keeps what it already has, and turning it on again carries on from there. "Wipe my feed data" in the same place deletes it in Lore, and "Download my data" gives you Lore's record. Marking a pick as seen, not interested or keeping it on your Shelf is recorded in Lore in your name, and keeping a story files it as a proposal for your review. Our service passes all of this on and keeps none of it.

Short links (si.am)

When you make short links on Buddy Desk, our links service keeps them with your account: the code, where it leads, its title, the periods you paid for and their renewals. Your credit (what you were given or bought and what each link cost) is kept as a ledger. When you delete your account, your links and their numbers go with it; the ledger's rows are kept 5 years for the accounts, without your account id.

When someone opens one of your links, we send them on at once and count the visit afterwards. The count never holds their address or their browser's full name. It holds: the time; a code that tells one visitor from another on that day only, made from the address and the browser with a key that changes every day and is never stored, so it cannot be turned back into either or matched across days; the site that sent them, if any; the kind of device and system (for example a phone with Android) and whether the link opened inside an app such as LINE; whether it was an automated fetch, such as a link preview or a search engine; and the country and area.

The country and area come from a lookup on our own server, in a public database of address ranges (IP Geolocation by DB-IP); the address is not sent anywhere for this, and the lookup keeps nothing. The browser's name is read the same way, by our own service, and not kept. Visits from cloud, hosting and VPN networks are counted as automated rather than as people, since few people browse from them.

Each visit is kept as such for at most two days, then only as numbers: per hour for 31 days, per day for 400 days, and per month for as long as the link's account exists. Short links set no cookies and run no scripts, so a visitor is not followed from one link to another.

Our sites and short links are reached through Cloudflare, the network in front of them, which sees the address a request comes from as it passes it on to us. Like any request, a visit may appear in our server logs as described above, but never in the link's numbers.

If you report a link, your report and, only if you give it, your email address are kept; the email is cleared after 90 days.

Getting a copy of your data

To get a copy of everything we keep about you, including what your buddy remembers in your Lare-Lore Affairs, write to us at the address below. There is no download button in the app, so that someone who gets into your account on another PC cannot take it all in one click.

Within 30 days we send the copy as a password-protected file (it opens in 7-Zip) to the email address of your account, and put the password in the Inbox of the app (You & friends). Our support team never holds the file. If the password is lost, support can put it in your Inbox again for 30 days.

Your screen

The app checks whether a program is in full screen, only to step out of the way. It does not read what is on your screen or in other windows. If that ever changes, it will be an option you turn on, and this page will say so before it ships.

Sharing

We do not sell your data or share it with advertisers. Lare-Lore handles sign-in, and keeps your Tasks, Affairs and knowledge, under its own terms.

This website uses one cookie, to remember your language, and no tracking or analytics. Buddy Desk sets the sign-in cookie described above. The team's own backoffice sets a sign-in cookie for the team only.

Deleting your data

In the app's Settings, Delete account removes your account and everything our account service keeps about you, at once, erases what your buddy remembers in your Lare-Lore Affairs, and cancels the Lare-Lore key at Lare-Lore. Chat messages held by the model service are deleted when their 90 days are up.

Your notes and calendar in Lare-Lore Tasks stay when you delete your account or your personal data here: they are yours in Lare-Lore, and you can delete them there.

Before each update of our service we take a copy of its database, kept at most 30 days. Something you delete after a copy was taken stays in that copy until it is removed.

Signing out removes the sign-in from that PC. Files on your PC stay until you delete them.

Changes

When this page changes, the date at the top changes with it. Anything new that the app or the service keeps is added here before it ships.

Square, the community on Buddy Desk

Square is a help board: you ask, others answer, and you can thank a helper, mark the answer that solved it and vote on answers. What you post there is public to signed-in members. By default it shows under a handle made for that thread, not your name; you can show your name on a thread, and that cannot be undone there. Your community name is your Lare-Lore display name unless you set another one, used only in the buddy ecosystem.

Anonymity is towards other members, not towards us. The service keeps who posted what, for moderation and for the retention Thai law asks of a service provider (90 days). Staff see authors on the Community page of the backoffice to moderate; every such look is logged.

We keep your posts, comments, votes, the virtue you gave and received (a ledger kept 90 days; the counts stay), what you kept, and your reports. Deleting your account removes your name from your posts, which stay as "a former member" since others replied to them; ask support to remove your texts in full. Your posts and the virtue ledger are in your data export.

A post removed by staff is told to you in your inbox with the reason. Three removed posts in 90 days pause your posting for 7 days, five for 30; you can read and chat meanwhile.