Privacy Policy

1. Information we collect

When you create an account or sign in, we collect:

• Your name and email address (entered at registration, or provided by Google or Microsoft when you use social sign-in).
• Your password, stored only as a secure one-way hash that we cannot read.
• Technical data needed for security: your IP address, browser and device information (user agent), and sign-in timestamps.

2. How we use your information

• To create and manage your account and keep you signed in.
• To send account-related emails (confirmation, password reset, welcome, deletion).
• To protect your account and the service: detecting abuse, rate limiting, account lockout after failed logins, and enforcing our 2-device sign-in limit.
• To measure basic, aggregate website usage such as a unique visitor count (stored as a one-way hash of your IP, never the raw address).

3. Service providers we use

We share the minimum data necessary with trusted providers that operate the service:

• Supabase — authentication and database (stores your account securely).
• Google and Microsoft — only if you choose social sign-in; they confirm your identity and share your name and email.
• Email provider — to deliver account emails.
• AI help assistant — the chatbot receives only the messages you type; personal details such as emails and phone numbers are automatically removed before any message is processed, and your account data is never sent to it.
• Vercel — website hosting.

We do not sell your personal information, and we do not use it for advertising.

4. Cookies

We use essential cookies only, to keep you signed in securely (session cookies). We do not use advertising or tracking cookies.

5. Data retention and deletion

We keep your account data for as long as your account exists. You can permanently delete your account at any time from your Dashboard (Danger Zone), which removes your profile and associated data and sends you a confirmation email. Security logs may be retained for a limited period for fraud prevention and legal compliance.

6. Security

Passwords are hashed and cannot be read by our staff. Connections use HTTPS, sessions use secure cookies, and access to accounts is protected by rate limiting and lockout controls. No system is perfectly secure, but we take reasonable measures to protect your data.

7. Your rights

You may access, correct, or delete your account information. To request changes you cannot make yourself, contact us at the email below.

8. Children

NVM APPS is not directed to children under 13, and we do not knowingly collect their personal information.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date at the top of this page.

10. Contact

Questions about this policy? Email us at contact@nvmapps.com.