NuvaNuva Help

Privacy Policy

Last Updated: August 9, 2026

Welcome to Nuva. Your privacy is important to us. This Privacy Policy explains what information we collect, how we use it, how we protect it, and how it may be processed when you use Nuva's AI-powered features.

By using Nuva, you agree to the practices described in this Privacy Policy.

Information We Collect

Depending on how you use Nuva, we may collect:

Account Information

  • Name (from your sign-in provider)
  • Email address
  • Profile picture (if provided by your OAuth provider)
  • Authentication tokens (managed securely by our authentication provider)

Usage & Technical Data

  • IP address (used for rate limiting and abuse prevention)
  • Token usage statistics (number of AI tokens consumed per model tier)
  • Language and theme preferences
  • Profession (optionally provided during profile setup)

AI Content

When you use Nuva's AI features, you may voluntarily submit:

  • Messages
  • Medical questions
  • Optional uploaded images
  • Optional uploaded audio
  • Optional uploaded files

This content is processed only to provide the AI features you request.

How We Use Your Information

Your information is used to:

  • Create and manage your account.
  • Authenticate your identity.
  • Provide AI-powered responses.
  • Provide language translation features.
  • Improve application reliability and security.
  • Prevent abuse and unauthorized access.
  • Maintain and operate Nuva's services.

We do not sell your personal information.

AI Data Processing

To provide AI-powered responses and translations, Nuva securely processes the content you choose to submit.

Your submitted content is securely transmitted to Nuva's backend for processing. To generate AI-powered responses and translations, Nuva uses third-party AI processing services, acting solely on Nuva's behalf to provide the requested AI functionality.

AI processing services are used only for processing requests necessary to deliver the AI features you choose to use.

Nuva determines how AI is used within the application and remains responsible for the services provided through the app.

We do not use your personal information for advertising or profiling.

Data Sharing & Third-Party Processors

Nuva does not sell, rent, or trade your personal information.

Your information is shared only with the following categories of third-party service providers, each acting as a processor on Nuva's behalf:

  • Cloud Database & Authentication Provider — hosts our database and manages user authentication via OAuth. Your auth tokens, profile data, and chat history are stored on secure cloud servers.
  • AI Processing Provider — processes the messages, images, and audio you submit to generate AI-powered responses. Content is sent solely for the purpose of generating your requested response.
  • Email Delivery Provider — sends transactional emails (e.g., welcome email) on Nuva's behalf. Only your email address and display name are passed for this purpose.

We do not share your personal information with third parties for advertising purposes.

Shared Chats

Nuva allows you to share your chat conversations via publicly accessible links. When you share a chat:

  • The shared chat content (messages and title) becomes accessible to anyone who has the link.
  • No personal information (name, email, user ID) is included in the shared content.
  • You can delete a shared chat at any time, which immediately removes public access.
  • Share links use cryptographically random IDs that cannot be guessed.

Data Retention

  • Chat history is automatically deleted after 1 month from the date of creation.
  • A maximum of 15 chats are stored per user. When a new chat is created beyond this limit, the oldest chat is automatically deleted.
  • Uploaded images and audio are processed in memory and are not permanently stored in our database after processing.
  • Token usage statistics are retained for the lifetime of your account to enforce fair usage limits.
  • Shared chats remain publicly accessible until you delete them.
  • Upon account deletion, all associated data (chats, shared chats, profile, token usage) is permanently removed.

Security

We use industry-standard security measures designed to protect your information during transmission and storage, including:

  • HTTPS encryption for all data in transit (TLS 1.2+).
  • Row Level Security (RLS) in our database — users can only access their own data.
  • OAuth-only authentication via Google and Apple — no passwords stored.
  • Rate limiting to prevent abuse and automated attacks.
  • Input validation on all API endpoints to prevent injection attacks.
  • Server-side secret management — sensitive keys are never exposed to client-side code.
  • HTTP security headers including HSTS, X-Content-Type-Options, and X-Frame-Options.

While no system can guarantee absolute security, Nuva continuously works to protect user information against unauthorized access, disclosure, alteration, or destruction.

Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal information.
  • Request correction of inaccurate information.
  • Request deletion of your account and associated data.
  • Withdraw consent where applicable.
  • Contact us regarding privacy-related concerns.

Children's Privacy

Nuva is not intended for children under the minimum age required by applicable law without appropriate parental or guardian consent.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When significant changes are made, the updated version will be made available within the application or on our website with a revised “Last Updated” date.

Contact Us

If you have questions about this Privacy Policy or how your information is processed, please contact us using the support information provided within the Nuva application or on our official website.