In short
- You can use NURA without giving your email or your real name: the account is created on its own and it is anonymous.
- Your data is stored in the European Union. The only thing that leaves is what the AI needs to read in order to write your plan.
- No ads, no tracking, no selling data. NURA does not make money from your information.
- You can delete everything from inside the app, under Profile, without asking anyone.
1. Who is responsible for your data
The data controller is Alberto Vazquez, tax ID 54213801H, registered at Avenida de Europa 28, 28224 Madrid.
For anything concerning your data, including exercising your rights, write to nuraproject.app@gmail.com.
2. What data NURA collects
Your account
The first time you open NURA an anonymous account is created: a random identifier, with no email, no name and no phone number. If you later decide to link an account so you don't lose your progress, we store your email address or the identifier Google or Apple gives us, depending on the method you choose.
What you tell us about yourself
- The name you want NURA to call you, your age range, and how much time you have each week.
- How you prefer NURA to address you.
- Your goal, the plan you choose, and the actions and habits that make it up.
- Your written answers from the Reset Day and from reviews.
- Voice recordings, if you choose to answer by speaking instead of typing.
- What you write in the conversation with NURA.
What gets generated as you use the app
- Which actions you mark as done and when: that is where your streaks, your complete days and your progress come from.
- The plans and the Character readings NURA writes for you.
- Product usage events — that you started sign-up, or picked a plan, for example — to understand where the app gets stuck.
- A count of AI requests, needed to apply usage limits and stop abuse.
What NURA does not do
- It does not use advertising identifiers and does not track you across apps or websites.
- It does not sell or hand your data to advertisers or to third parties for commercial purposes.
- It does not access your location, your calendar, your contacts or your photos.
- The microphone turns on only when you press record, never in the background.
3. When you write about how you are doing
NURA asks about your goals and your habits, not about your health. But in a Reset Day answer or in the conversation you may end up describing how you sleep, how you feel, or why something is hard for you. We do not ask for that information and we do not need it, and if you choose to write it we treat it with the same protection as the rest of your content and only with your consent, which you can withdraw by deleting that answer or your whole account.
4. What we use each thing for, and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Creating your plan and keeping your progress | Goal, profile, plan, actions and activity | Performance of a contract (art. 6(1)(b)) |
| Writing the Reset Day readings and replying to you in the chat | Reset Day answers, conversation, recent activity | Performance of a contract (art. 6(1)(b)) |
| Transcribing your spoken answers | Voice recordings | Consent (art. 6(1)(a)) |
| Reminding you of what you decided to do | Plan, actions and reminder times | Consent given through the notifications permission |
| Preventing abuse and controlling the cost of the AI | Request count per account | Legitimate interest (art. 6(1)(f)) |
| Understanding where the app fails, and improving it | Product usage events | Legitimate interest (art. 6(1)(f)) |
5. What the artificial intelligence sees
NURA uses OpenAI models for three things: writing and adjusting your plan, talking with you about it, and transcribing your spoken answers.
Depending on what you ask for, the following is sent to OpenAI:
- Your goal and the answers you gave when creating it.
- Your plan and your recent activity, so the reading talks about what you actually did.
- Your Reset Day answers, when you ask for them to be interpreted.
- The audio file, when you ask for it to be transcribed.
What is not sent: your email address, your identity or your account identifier. The model reads your content; it does not know who you are. OpenAI acts as a data processor and, under its API terms, does not use this content to train its models.
The texts NURA writes about you are generated by a model, and a model gets things wrong. They are a proposal for you to look at, not a diagnosis and not professional advice. On this, read section 3 of the terms of use as well.
6. Where it is stored
The database and the recordings are hosted on Supabase, on servers located in Fráncfort (Alemania), en la Unión Europea. Recordings live in a private store where each account can only read its own folder.
This website is served by Cloudflare. It uses no analytics or advertising cookies, and loads no third-party scripts.
The only transfer outside the European Economic Area is the one to OpenAI, in the United States, and it is covered by the standard contractual clauses approved by the European Commission.
7. How long we keep it
- For as long as you have an account. Your plan and your progress mean something precisely because they accumulate.
- Until you delete it. You can remove one specific answer, its recording, or your entire account.
- Backups are overwritten on the provider's usual cycle, so deleted data may survive in them for a few days before disappearing completely.
- AI usage counts are kept aggregated and without content, because they are what stops anyone abusing the service.
8. Who else processes it
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, accounts and storage of recordings | European Union |
| OpenAI | Generating plans, conversation and audio transcription | United States |
| Apple | App distribution and subscription billing | Under its own terms |
| Cloudflare | Serving this website | Global network |
None of them may use your data for their own purposes: they process it following our instructions and under a processing agreement. Apple is the partial exception, because as a store it also acts on its own behalf and applies its own privacy policy to the payment.
9. Your rights
You can access your data, correct it, delete it, take it to another service, restrict its processing, object to it, and withdraw your consent whenever you want.
You do not need to ask for deletion: it is inside the app, under Profile, and it removes your content and your recordings. For everything else write to nuraproject.app@gmail.com and we will reply within one month at the latest.
If you think we have not done things properly, you can complain to the Spanish Data Protection Agency (aepd.es). We would rather you wrote to us first, but it is your right and you do not have to.
10. Minimum age
NURA is for people over 16. It is not designed for minors and we do not knowingly collect their data. If we become aware that an account belongs to someone under that age, we delete it.
11. Changes to this policy
If something important changes — a new provider, new data, a different use — we update this page and change the date above. If the change really affects you, we tell you inside the app before applying it.
12. Contact
nuraproject.app@gmail.com. A person writes, and a person replies.