Scope and Applicability
This Policy applies to any visitor or user of the Services. It does not apply where we process Personal Information in the role of a processor or service provider on behalf of our Customers. In those cases, the Customer's privacy policy will govern.
Our Services may also connect to third-party applications and services (such as Oura, WHOOP, Apple Health, Google Fit, or authentication providers). These integrations are governed by their own privacy policies, not ours. We are not responsible for the privacy or security practices of third parties.
Information We Collect
Information you provide to us
Account Information: When you create an account, we collect your name, email address, password or single-sign-on credentials, profile photo, and preferences.
Voice and Session Data: If you choose to use NurAI's communication tools, we may collect and process audio recordings, transcripts, and session reflections. These recordings may be analyzed to generate speech and communication insights such as tone, pacing, filler words, or emotional trends.
Wearable and Biometric Data: If you connect third-party health or fitness platforms, we may receive data such as heart rate, HRV, activity, and sleep patterns. We only access the data you authorize us to access.
Payment Information: For paid subscriptions, we use third-party payment processors (currently Stripe). They collect and process your credit card details, billing address, and related information under their own privacy policies. We may store limited metadata such as card type, expiration date, and the last four digits.
Customer Support and Feedback: If you contact us, participate in surveys, or provide feedback, we collect the information you submit.
Research and Beta Participation: If you opt into research studies, pilots, or beta programs, we may collect your responses, performance data, and related information.
Information collected automatically
Log Data: Your IP address, browser type, operating system, referral pages, date/time stamps, and interactions with the Services.
Usage Data: Features used, session length, crash reports, and diagnostic information.
Device Information: Device identifiers, operating system version, app version, network details.
Cookies and Tracking: We use cookies, pixels, SDKs, and similar technologies to operate, secure, and personalize the Services.
Information we receive from third parties
Sign-in providers (e.g., Google, Apple, GitHub) provide authentication details.
Wearable integrations may provide health-adjacent metrics you authorize.
Partners and service providers may share analytics, attribution, or demographic data.
Publicly available sources may provide professional or industry information.
How We Use Information
Deliver, maintain, and improve the Services and personalize your experience.
Generate and provide insights, analytics, and reports about your communication patterns.
Support integrations with wearables and other applications you connect.
Respond to your requests, provide support, and communicate with you.
Conduct research, testing, and development using de-identified or aggregated data.
Detect and prevent fraud, unauthorized access, and harmful activity.
Enforce our Terms of Service and comply with legal obligations.
Send you service-related notices, updates, and limited marketing communications (with opt-out options).
Carry out corporate transactions such as mergers, acquisitions, or reorganizations.
Protect rights, safety, and property of users, NurAI, and others.
NurAI is designed for personal growth and communication insights. It is not a medical device and does not provide diagnosis, treatment, or medical advice.
How We Share Information
We do not sell your Personal Information. We may share information in the following situations:
With service providers and sub-processors such as cloud hosting, analytics, payment processors, email/SMS vendors, authentication providers, and customer support platforms.
With Customers, if you access the Services through an enterprise account.
With affiliates and subsidiaries for operational purposes.
With law enforcement, regulators, or other parties as required by law or legal process.
With third parties in the event of a merger, acquisition, financing, or sale of assets.
With your consent or at your direction.
See our list of sub-processors at mynur.ai/subprocessors.
Cookies and Tracking Technologies
We use cookies and similar technologies to recognize you, secure your sessions, understand how the Services are used, and improve performance.
Types of cookies we use include:
Required cookies: Essential for authentication, security, core functionality.
Performance cookies: Collect information about usage patterns, crashes, and errors.
Functional cookies: Remember preferences and settings.
Marketing cookies: Provide personalized advertising and measure campaign measurement (with consent).
You can manage cookies via browser or consent banner. Disabling may affect functionality. We do not currently respond to "Do Not Track" signals.
Security of Information
We take security seriously and implement safeguards such as encryption (in transit and at rest), access controls, network monitoring, and SOC 2–aligned practices. However, no system is 100% secure. You are responsible for safeguarding your account credentials.
Data Retention
We retain Personal Information only as long as necessary to provide the Services and comply with legal obligations. For example:
Voice recordings and transcripts can be deleted by you; associated data will be removed from active systems within a reasonable timeframe.
Wearable integration data is retained only while the connection is active.
Account information is retained while your account is active, and may be archived as legally required.
Backups and logs are retained for a limited period for security and continuity.
De-identified or aggregated data may be retained for research and development.
Your Rights and Choices
Depending on where you live, you may:
Access, update, or delete Personal Information.
Export data in portable format.
Opt out of marketing communications.
Withdraw consent for integrations or specific processing.
Restrict or object to processing.
To exercise your rights, contact us at privacy@mynur.ai We may need to verify your identity before processing requests.
Children
Our Services are not directed to children under 16. We do not knowingly collect Personal Information from children. If you believe we have collected data from a child, contact us immediately and we will delete it.
International Data Transfers
We operate from the United States and may transfer data internationally. Where required, we use safeguards such as the EU Standard Contractual Clauses and UK Addendum.
Region-Specific Notices
California (CCPA/CPRA):
You have the right to know, access, delete, and correct Personal Information, and to opt out of "sharing" for cross-context behavioral advertising. NurAI does not sell Personal Information.
Nevada:
We do not sell Personal Information as defined under Nevada law.
EEA/UK/Switzerland:
You may have rights to access, rectification, erasure, restriction, portability, and objection. You may also lodge a complaint with a supervisory authority, but we encourage you to contact us first at privacy@mynur.ai.
Changes to this Policy
We may revise this Policy at any time. Updates will be posted on this page with a new "Last Updated" date. For material changes, we may also send notice by email or in-app message. Continued use of the Services after changes constitutes acceptance.