Last updated: September 20, 2026
Black UI ("Black UI", "we", "us") is operated by Thoiba Trader, Guwahati, Assam, India. This Privacy Policy explains what information we collect when you use the Black UI website (blackui.thoibatrader.com) and the Black UI app (web and Android), how we use it, who we share it with, and the choices you have. By signing in to or using Black UI you agree to this policy.
Black UI uses Sign in with Google so we can identify you and keep your account separate from everyone else's. When you sign in, Google shares with us only your:
We request only the basic sign-in scopes (openid, email, profile). We do not ask for, and cannot access, your Gmail, Google Drive, contacts, calendar or any other Google data, and we never see your Google password.
After you sign in we create a unique Black UI user ID for you (a random-looking code such as u_…) and keep a small account record on our servers containing: your user ID, email address, name, the time of your first and most recent sign-in, how many times you have signed in, and your account status and usage-limit information. We do not store your raw Google account identifier — the user ID is derived from it with a secret key.
When you chat, your messages and any files you attach are sent through our backend (hosted on Cloudflare) to the AI provider that produces the reply. Our backend passes the content along and returns the response; it does not save the content of your messages or files, and we do not use your content to train AI models.
To deliver the service and protect it from abuse, our infrastructure processes technical request data such as your IP address, browser type and request timing. We use this transiently (for example, for rate limiting) and we do not write IP addresses to our database or application logs. Cloudflare, our hosting provider, may keep its own standard operational and security logs under its own privacy policy.
The following are stored only in your browser or app storage (IndexedDB and localStorage) on your own device, and are kept separately for each signed-in account:
Keys you add are sent directly from your device to the provider they belong to (Anthropic or GitHub) and do not pass through our servers. We cannot see or recover data that lives only on your device; clearing your browser or app data deletes it permanently.
When you start an Android build we issue a short-lived, signed build permit tied to your user ID so the build can be authorised. The build itself runs in your own GitHub repository and GitHub Actions, not on our infrastructure.
We do not sell your personal information, we do not show advertising, and we do not use your information for advertising or marketing profiles.
Black UI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use your Google name, email address and profile picture only to sign you in, identify your account and show it back to you inside the app. We do not sell this data, do not use it for advertising, do not transfer it to others except as described in this policy, and do not allow humans to read it except with your consent, for security or abuse investigations, to comply with the law, or for internal operations of the service.
We share information only with the service providers needed to run Black UI. Each handles data under its own privacy policy:
Content you send to an AI provider is processed by that provider under its own terms, so please avoid sending information you would not want processed that way. We may also disclose information if required by law or to protect the rights, safety or security of our users or the service, and it may be transferred as part of a business restructuring, in which case this policy will continue to apply to it.
We do not use advertising or analytics cookies, trackers or session-recording tools. Black UI uses browser storage (see above) to keep you signed in and to save your chats. Our pages and app load some resources from third parties — Google Sign-In, Google Fonts, Font Awesome from cdnjs and the Tailwind CSS library — and those providers receive standard connection data such as your IP address and may set their own cookies under their own policies.
All traffic between your device and Black UI is encrypted with HTTPS. Login sessions are cryptographically signed and expire, your Google token is verified on our server before an account is created, and user IDs do not reveal your Google identity. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Our providers operate globally, so your information may be processed in countries other than India. By using Black UI you understand your information may be transferred and processed there.
You may ask us to tell you what personal information we hold about you, correct it, delete it, or withdraw your consent to our processing of it, including the rights available to you under India's Digital Personal Data Protection Act, 2023 and any other law that applies to you. Email thoibatrader@gmail.com and we will respond within a reasonable time, normally within 30 days. If you are not satisfied with our response you may also approach the relevant data-protection authority.
Black UI is not directed at children under 18, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.
We may update this policy as Black UI changes. When we do, we will change the "Last updated" date above and, for material changes, tell you in the app or on this website. Continued use after an update means you accept the revised policy.
Thoiba Trader, Guwahati, Assam, India. Questions, requests or complaints about this policy or your data: thoibatrader@gmail.com or the Contact page.