2.1 Personal Information You Provide

• Account Information: Email address, Firebase user identifier, authentication provider, and account status.

• Voice Input: Voice input is handled by the speech-recognition services available on your device. Nexorify generally receives the resulting transcript rather than retaining the audio recording.

• Reminder and Calendar Content: Text, schedules, recurrence rules, notes, clarification messages, and calendar-event details that you submit.

• Communications: Messages or emails you send to us for support, privacy requests, or feedback.

2.2 Information Collected Automatically

• Device Information: Device type, operating-system and app versions, locale, time zone, and installation identifiers used by our service providers.

• Usage and Diagnostics: Feature interactions, performance information, crash reports, and subscription status.

• Technical Information: IP address, Firebase App Check data, log records, error codes, operation identifiers, and push-notification tokens.

2.3 Third-Party Services

We use the following service providers to operate Nexorify:

• Firebase and Google Cloud: Authentication, Firestore database, Cloud Functions, App Check, Analytics, Performance Monitoring, Crashlytics, Hosting, and Cloud Messaging.

• DeepSeek API: Natural-language interpretation of reminder and calendar requests. The text you submit and the context necessary to interpret it may be sent to DeepSeek.

• Device Calendar Provider: With your permission, Nexorify reads available calendar names and creates, updates, or deletes events in the calendar you select. Your calendar provider may separately process and synchronize those events.

• RevenueCat: Subscription and entitlement management using your Nexorify user identifier, purchase history, product, expiration, and related transaction metadata. We do not receive your full payment-card details.

• Apple and Google Services: Authentication, speech recognition, push delivery, calendar synchronization, and in-app purchase processing where applicable. Payment details are handled by the applicable app store.

3.1 Primary Purposes

• Create, edit, schedule, synchronize, complete, archive, and delete reminders and linked calendar events

• Interpret typed text and speech transcripts and continue clarification conversations

• Synchronize reminder data across devices signed in to the same account

• Deliver reminder and result notifications and maintain their lifecycle

• Authenticate accounts, prevent abuse, enforce Free and PRO limits, and manage subscriptions

3.2 AI Processing

• Nexorify sends the text of a request and the context required to interpret it to DeepSeek. Depending on the request, that context may include locale, time zone, current time, conversation state, or selected-reminder details.

• DeepSeek is used to interpret reminders and calendar events. Nexorify does not provide a general web-search feature.

• Provider output is validated by our backend before an operation is executed. AI output may still be inaccurate, so you should review important reminder and calendar details.

3.3 Service Improvement

• Analyze aggregated usage patterns to improve app performance and reliability

• Identify and fix bugs or technical issues

• Develop new features and enhancements based on user needs and feedback

4.1 Encryption Standards

• Network communications use encrypted transport such as HTTPS/TLS, and Firebase services encrypt supported data at rest.

• Nexorify additionally encrypts selected reminder-content fields before storing them in Firestore. Backend services may decrypt those fields when required to provide the service.

• Text sent to an AI provider must be available to that provider during processing. No method of transmission or storage can be guaranteed to be completely secure.

4.2 Security Measures

• We use authentication, Firebase Security Rules, App Check, least-privilege access, and idempotent backend operations to reduce unauthorized access and accidental duplication.

• Data is stored using managed Firebase and Google Cloud services with access controls.

• We maintain and update the service and investigate security or reliability incidents when they are identified.

• Access to production data is restricted to people and service providers who need it to operate, secure, or support Nexorify.

5.1 Service Providers

We use service providers to operate Nexorify. They process information according to their agreements with us and their applicable terms and privacy documentation:

• Firebase and Google Cloud: Cloud infrastructure, authentication, database, functions, diagnostics, analytics, hosting, security, and push delivery.

• DeepSeek: Processes natural-language text and necessary request context to interpret reminder and calendar commands.

• RevenueCat: Processes user identifiers, purchase history, receipts, products, and entitlement status for subscription management.

5.2 Legal Compliance and Safety

We may disclose information about you if we have a good-faith belief that such disclosure is necessary to:

• Comply with a law, regulation, or legal process (such as a court order or subpoena)

• Enforce our Terms and Conditions or investigate potential violations

• Protect our rights, property, or safety, or that of our users or the public

• Detect, prevent, or address fraud, security, or technical issues

5.3 Business Transfers

If we are involved in a merger, acquisition, bankruptcy, or sale of assets, your data may be transferred to the successor or acquiring entity. We will ensure that the successor is bound to respect the protections of this Privacy Policy or will notify you and obtain consent if required by law.

7.1 Access and Control

You have the ability to access and control your personal information through the App:

• Profile Management: You can access and update supported account information through the App.

• Content Control: You can complete, archive, or delete reminders and linked calendar events through the App. Events already synchronized to an external calendar may also need to be managed through that calendar provider.

• Account Deletion: You can request account deletion in the App. This starts deletion of Nexorify-controlled profile, reminder, assistant, notification-token, and scheduling data. Deleting the account does not automatically cancel an App Store subscription and may not remove events already stored by an external calendar provider.

• Access and Portability: You may contact us to request access to or a copy of personal data we control, subject to verification and applicable law.

• Analytics and Diagnostics: You can disable Analytics, Performance Monitoring, and Crashlytics collection using the App’s analytics setting. You can also decline analytics cookies on the website.

7.2 CCPA Rights (California Users)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) (as amended by the CPRA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collecting it, and the third parties with whom we share it.

• Right to Delete: You can request that we delete personal information we have collected from you, subject to certain exceptions (such as if we need to keep it to comply with legal obligations).

• Right to Opt-Out of Sale/Sharing: You have the right to direct us not to sell your personal information. (Note: We do not sell personal information, nor do we share it for cross-context behavioral advertising.)

• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any CCPA rights. We will not deny services, charge different prices, or provide a different level of quality because you exercised your rights.

• Right to Correct: You can request that we correct any inaccurate personal information we hold about you.

• Right to Limit Use of Sensitive Information: If we collected any sensitive personal information (as defined by law), you can request that we limit its use and disclosure. (Note: The App does not collect sensitive personal information such as financial, health, or biometric identifiers beyond voice data for commands.)

To exercise any of your applicable privacy rights or to send us questions about your privacy, you can contact us at our email provided in the Contact Information section. We will respond to verifiable requests within the timeframe required by law (generally within 30 days for CCPA requests).

10.1 Analytics

The App uses Firebase Analytics and Performance Monitoring, and the website uses Google Analytics subject to your cookie choice. These services help us understand feature usage and reliability.

• Data Collected: Analytics and diagnostics may use pseudonymous application or installation identifiers, device and app information, feature events, performance data, and approximate location inferred from IP address. We do not describe this data as fully anonymous.

• Choice: You can disable Analytics, Performance Monitoring, and Crashlytics in the App’s analytics setting. On the website, Analytics storage remains denied unless you accept analytics cookies.

• More Information: See Google’s Firebase privacy and security documentation for current service-specific data and retention details.

10.2 Crash Reporting

We use Firebase Crashlytics to receive crash and serious-error reports so that we can diagnose stability problems.

• Data Collected: Reports may contain installation identifiers, app and OS versions, device model, timestamps, stack traces, and technical state. We configure our code not to intentionally include reminder text in crash reports.

• Identifiers: Crashlytics records are pseudonymous and can be associated with a particular app installation; they are not guaranteed to be anonymous.

• Choice: Crash reporting follows the App’s analytics setting. Provider-side records are removed according to Firebase retention rules.