Privacy Policy

1. Data Controller

The controller responsible for processing your personal data under GDPR is:

2. Data we collect

Account and authentication data

• Email address (email sign-in and support contact).
• Apple Sign In / Google Sign In identifiers used to authenticate you.
• Optional profile details you provide (e.g., name).

Data you create in the App

• Tasks, goals, schedules, notes, and other productivity content you enter.
• Focus session settings and preferences.

Subscription and purchase data

• Subscription status and entitlement information (active/inactive, product identifiers).
• Purchase references used to validate premium access.
• Payments are processed by Apple (App Store) or Google (Play Store). We do not receive full payment card details.

3. Purposes and legal bases (GDPR)

We process personal data to:

• Provide and maintain the App’s core features (account, syncing, settings).
• Authenticate users and secure accounts.
• Validate subscriptions and provide premium access.
• Provide customer support and respond to requests.
• Improve stability, performance, and fix bugs.
• Prevent fraud and misuse and maintain security.

Legal bases

• Art. 6(1)(b) GDPR — performance of a contract (providing the App).
• Art. 6(1)(f) GDPR — legitimate interests (security, fraud prevention, improvement).
• Art. 6(1)(c) GDPR — legal obligations where applicable.
• Art. 6(1)(a) GDPR — consent, only if required for future features.

4. Sharing and third-party providers

We share data only when needed to operate the App or comply with law. We use these providers:

• Supabase — authentication and database hosting for app data.
• RevenueCat — subscription and entitlement verification.
• Apple / Google — sign-in (if chosen) and purchase processing via the App Store / Play Store.

5. International transfers

We aim to store and process data within the EU/EEA where possible. Some providers may process data outside the EU/EEA depending on infrastructure and configuration. Where required, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses (SCCs).

6. Security

We use appropriate technical and organizational measures to protect your data, including:

• Encrypted transport (HTTPS/TLS).
• Authentication and access controls.
• Data minimization (collecting only what is necessary).

7. Data retention

We retain personal data only as long as necessary to provide the App and for legitimate legal or business purposes.

• Account data and app content are kept while your account is active.
• Support messages are retained for a reasonable period to resolve issues.
• Some records may be retained if required by law.

8. Your rights (GDPR)

If you are located in the EU/EEA, you have the right to:

• Access your personal data.
• Correct inaccurate data.
• Request deletion (where applicable).
• Restrict processing.
• Data portability.
• Object to processing based on legitimate interests.
• Withdraw consent at any time (if processing is based on consent).

To exercise your rights, contact us at support@nura-ai.app.

9. Account deletion

You can delete your account directly in the App via Settings → Delete Account. If you cannot access the App, you can request deletion via email at support@nura-ai.app.

10. Children

The App is not intended for children under the age required to consent to data processing under applicable law. If you believe a child has provided us personal data, please contact us and we will take appropriate steps.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date above.

12. Contact

If you have questions about this Privacy Policy or your data, contact: