PRIVACY POLICY
Effective Date: 02.08.2025
Last Updated: 02.08.2025
1. INTRODUCTION
This Privacy Policy describes how Nexorify (“we,” “us,” “our,” or “Company”) collects, uses, stores, and protects your personal information when you use our mobile application Nexorify (the “App”) and related services.
By using our App, you consent to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use our App.
2. INFORMATION WE COLLECT
2.1 Personal Information You Provide
• Account Information: Email address for authentication (including if you choose to sign in via Apple or Google)
• Voice Data: Audio recordings of your voice commands (processed locally on your device when possible)
• Task and Reminder Content:Text of tasks, reminders, and related information you create
• Communication Data: Messages or emails you send to us for support or feedback
2.2 Information Collected Automatically
• Device Information: Device type, operating system version, unique device identifiers
• Usage Data: App usage statistics, feature interactions, and crash reports
• Technical Data: IP address, log files, and error reports
2.3 Third-Party Services
We integrate with the following third-party services, which may collect additional data as needed to provide their functionality:
• Firebase (Google Cloud): Authentication, database storage, analytics, and push notifications
• DeepSeek API: AI-powered task processing
• Perplexity API: Internet-based task processing (for PRO users)
• RevenueCat: Subscription management (uses anonymized identifiers; no financial information is collected by us)
• Apple and Google Services: Authentication via Sign in with Apple/Google, push notification delivery, and in-app purchase processing (payment information is handled by Apple or Google and not shared with us)
3. HOW WE USE YOUR INFORMATION
3.1 Primary Purposes
• Provide core app functionality (task and reminder creation and management)
• Process voice commands and natural language inputs to assist you
• Sync your data across devices that you use
• Send push notifications for reminders and task updates
• Authenticate your account and maintain security measures
3.2 AI Processing
• Voice commands may be processed using AI services to understand and execute your requests
• Task content may be analyzed by AI to determine appropriate actions or timing for reminders
• All AI processing is performed using encrypted data whenever technically feasible
3.3 Service Improvement
• Analyze aggregated usage patterns to improve app performance and reliability
• Identify and fix bugs or technical issues
• Develop new features and enhancements based on user needs and feedback
4. SDATA ENCRYPTION AND SECURITY
4.1 Encryption Standards
• All sensitive data (such as tasks, prompts, and AI results) is encrypted using AES-256-CBC encryption
• Encryption keys are derived from your unique user ID or credentials
• Data is encrypted both in transit (during network communication) and at rest (when stored on our servers or your device)
4.2 Security Measures
• We follow industry-standard security protocols for data transmission and storage
• Data is stored in secure cloud databases with strict Firebase security rules
• Regular security audits and software updates are conducted to protect your information
• Access to personal data is limited to authorized personnel who require it for operation or support
5. DATA SHARING AND DISCLOSURE
5.1 Service Providers
We use trusted third-party service providers to operate and improve the App. These providers may process your data (in encrypted or anonymized form) on our behalf:
• Firebase/Google Cloud: Provides secure cloud storage, database, and server infrastructure
• AI Service Providers: Processes task and voice data to provide AI functionalities (e.g., DeepSeek, Perplexity APIs) – data is encrypted where feasible during processing
• RevenueCat: Manages subscription status and purchases (using anonymized identifiers to track subscriptions; no personal payment details are received by us)
5.2 Legal Compliance and Safety
We may disclose information about you if we have a good-faith belief that such disclosure is necessary to:
• Comply with a law, regulation, or legal process (such as a court order or subpoena)
• Enforce our Terms and Conditions or investigate potential violations
• Protect our rights, property, or safety, or that of our users or the public
• Detect, prevent, or address fraud, security, or technical issues
5.3 Business Transfers
If we are involved in a merger, acquisition, bankruptcy, or sale of assets, your data may be transferred to the successor or acquiring entity. We will ensure that the successor is bound to respect the protections of this Privacy Policy or will notify you and obtain consent if required by law.
6. DATA RETENTION
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law:
• Account Data: Retained as long as your account remains active. If you delete your account, all personal data linked to your account is deleted immediately from our Firebase servers upon account deletion. We keep no backups or archives that can identify you after this point. Any remaining analytics records are fully anonymized and cannot be connected to your identity.
• Task and Reminder Data: Active tasks and reminders are stored until you delete them or delete your account. Once a task is marked as completed, it is automatically archived after 3 days. Archived tasks are then automatically and permanently deleted from our servers after an additional 7 days (for a total retention period of 10 days from completion) as part of our data minimization policy. These grace periods allow you to review or export completed and archived tasks if needed. After these periods expire, the data is permanently deleted and cannot be recovered. If you wish to retain records of completed tasks, you must export them before deletion occurs.
• Voice Recordings: Voice data is processed locally when possible. Any voice commands sent to our servers or third-party AI are deleted from those servers after processing is complete.
• Usage Analytics: Retained in an anonymized or aggregated form for internal analysis to improve our services.
• Support Communications: Retained for as long as necessary to address your support request and improve our support processes.
• Backup Copies: We may retain encrypted backup copies of your data for a short period as part of routine backup operations, which are also deleted on a rolling schedule.
7. YOUR PRIVACY RIGHTS
7.1 Access and Control
You have the ability to access and control your personal information through the App:
• Profile Management: You can view and update your account email or other profile information in the app settings.
• Content Deletion: You can delete tasks, reminders, notes, or other content you have created at any time.
• Account Deletion: You may delete your account via the app settings. Upon account deletion, all personal data associated with your account is deleted immediately from our active systems and databases. We do not retain your personal data unless required by applicable law (such as financial or legal obligations, if applicable). Anonymized or aggregated usage analytics data may remain, which cannot be used to identify you.
• Data Portability: You may request a copy of any personal data we have stored about you (such as your email address). Task content stored securely and encrypted within the app cannot be exported by us, as it is inaccessible to us in readable form.
• Analytics Opt-Out: You can opt out of analytics and crash reporting collection in the app settings if you prefer not to share usage data.
7.2 CCPA Rights (California Users)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) (as amended by the CPRA):
• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collecting it, and the third parties with whom we share it.
• Right to Delete: You can request that we delete personal information we have collected from you, subject to certain exceptions (such as if we need to keep it to comply with legal obligations).
• Right to Opt-Out of Sale/Sharing: You have the right to direct us not to sell your personal information. (Note: We do not sell personal information, nor do we share it for cross-context behavioral advertising.)
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any CCPA rights. We will not deny services, charge different prices, or provide a different level of quality because you exercised your rights.
• Right to Correct: You can request that we correct any inaccurate personal information we hold about you.
• Right to Limit Use of Sensitive Information: If we collected any sensitive personal information (as defined by law), you can request that we limit its use and disclosure. (Note: The App does not collect sensitive personal information such as financial, health, or biometric identifiers beyond voice data for commands.)
To exercise any of your applicable privacy rights or to send us questions about your privacy, you can contact us at our email provided in the Contact Information section. We will respond to verifiable requests within the timeframe required by law (generally within 30 days for CCPA requests).
8. CHILDREN’S PRIVACY
We do not knowingly collect or solicit personal information from children under 13 years of age. The App is not intended for use by children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will promptly delete that information. If you believe that a child under 13 may have provided us personal data, please contact us so that we can take appropriate action.
9. INTERNATIONAL DATA TRANSFERS
We are based in Cyprus, and our service providers may be located in other countries (including the United States). When you use the App, your information may be transferred to and processed in countries other than your own. In all such transfers, we take steps to ensure your information receives an adequate level of protection:
• We rely on legally-provided mechanisms to lawfully transfer data across borders, such as standard contractual clauses or other safeguards approved by regulators.
• We ensure that recipients of the data in other countries are obligated to protect your information to standards commensurate with those in your home jurisdiction.
• Specifically, AI processing services (including DeepSeek) may process your data in jurisdictions including China. While DeepSeek implements encryption and contractual safeguards, we cannot guarantee the same level of protection as in your home jurisdiction.
Important Note on Data Localization: Certain countries have data localization laws that require personal data of their citizens to be stored on servers within their borders. Our App does not currently comply with these data localization requirements. Users with data localization requirements acknowledge that their data will be processed and stored outside their country in accordance with this Privacy Policy. If you are located in a jurisdiction with strict data localization requirements and are not comfortable with international data transfers, please do not use the App.
10. ANALYTICS AND TRACKING
10.1 Analytics
We use Firebase Analytics (a service provided by Google) to collect anonymous aggregated statistics about how users interact with the App. This helps us understand which features are used most and improve the user experience. Firebase Analytics may collect data such as the frequency of use of the App, screens viewed, and other usage information.
• Data Collected: Firebase Analytics does not collect personally identifiable information like your name or email. It focuses on usage patterns and device information.
• Opt-Out: You can disable Firebase Analytics data collection in the App’s settings if you do not want to contribute usage data.
• More Info: For details on Firebase’s privacy practices, you can visit Google’s Firebase Privacy Policy.
10.2 Crash Reporting
We utilize crash reporting services (through Firebase Crashlytics or similar tools) to automatically receive reports if the App crashes or encounters a serious error. Crash reports help us diagnose and fix issues to improve stability.
• Data Collected: Crash reports include information about the device model, OS version, and technical details of the crash (such as stack traces). They do not intentionally collect your personal tasks or account content.
• Anonymization: Crash reports are tagged with a random identifier and are not linked to your account profile.
• Opt-Out: If you do not wish to send crash reports, you can disable this in your device settings (for example, on iOS, you can opt out of sharing crash diagnostics with app developers).
11. PUSH NOTIFICATIONS
With your consent, we send push notifications to your device to support the App’s functionality. These notifications may remind you of scheduled tasks or deadlines, inform you of task completions, or alert you to important updates or messages within the App.
• Opt-Out: You can control or disable push notifications at any time by adjusting the App’s notification settings on your device (in the iOS or Android settings menu).
• Usage: We do not use push notifications for promotional marketing messages unless you explicitly opt in to such communications.
12. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by:
• Posting the updated policy within the App (accessible in the settings or menu)
• Sending an in-app notification or email (if we have your email on file) highlighting the changes
• Updating the “Last Updated” date at the top of this policy
Your continued use of the App after any changes to this Privacy Policy indicates your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically for the latest information on our privacy practices.
13. CONTACT INFORMATION
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
• Email: privacy.nexorify@gmail.com