Privacy Policy

What Nuro collects

• Account data: email address, authentication identifiers, profile fields, consent status, and account timestamps.
• Journal content: recordings, transcripts, written entries, attachments, titles, summaries, actions, categories, embeddings, and other generated results.
• Product events: coarse events such as screens opened, recording duration, processing status, feature use, subscription events, and non-content error codes.
• Device and service data: app version, operating system, language, connection class, provider request metadata, and subscription status.

How Nuro uses data

• Record, transcribe, store, organize, search, and display your entries.
• Generate optional summaries, actions, connections, recaps, and answers.
• Authenticate accounts, manage subscriptions, prevent abuse, diagnose failures, and support users.
• Measure coarse product use and conversion so we can improve reliability and onboarding.

Nuro does not sell your recordings or transcripts. Nuro does not use your recordings or transcripts to train its own AI models. Service providers process data as described below.

Service providers and data flows

AI training and retention

“Training” and “retention” are different. Nuro opts Deepgram transcription requests out of its model-improvement program, and OpenAI says API data is not used for training by default. That does not mean every provider copy is deleted in 30 days. In particular, OpenAI Assistant application state can remain until Nuro explicitly deletes it.

Nuro keeps account and journal data while an account is active unless you delete an entry or request deletion. Provider logs, application state, and backups follow different retention schedules. Contact privacy@nuro.so for a deletion request or confirmation covering those systems.

Deletion and export controls

• Individual entry deletion: deleting an entry removes its database record, everything Nuro derived from it, and its stored recording and attachments.
• Account deletion, in the app: “Delete everything” schedules your account for deletion and signs you out. You have 30 days to change your mind, and signing back in cancels it. After that a scheduled job deletes every database row belonging to you, your stored recordings, and your sign-in identity itself. No email is required and nothing is kept behind a flag.
• Backups: deletion removes your data from the live systems. Encrypted database backups held by our hosting provider expire on that provider’s own retention schedule and are not individually edited.
• Export: in the app, under your data. One text file containing every entry you have recorded, readable without Nuro, and it does not require a subscription. Exporting changes nothing.
• Questions: deletion and export both work without contacting us, but privacy@nuro.so is there if something has not worked.

Security

Nuro uses encrypted network connections, private storage buckets, and database access policies intended to limit records to the owning account. Entries are not end-to-end encrypted: Nuro's service providers must be able to process audio and text to provide transcription and AI features. No system is perfectly secure, and implementation defects can occur.

Children

Nuro is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact privacy@nuro.so if you believe a child has submitted information.

International processing

Nuro is operated from the United States. Data may be processed in the United States and other regions where our providers operate, subject to their agreements and applicable law.

Changes and contact

We may update this policy as the product and its providers change. Material changes may be communicated in the app or by email. Questions and privacy requests can be sent to privacy@nuro.so.