$ cat privacy.md

Privacy Policy

Last updated: March 25, 2026

Introduction

Nitrotech Inc. ("we," "our," or "us"), a Delaware corporation, respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our mobile applications, web platforms, and services, including but not limited to Naya, Cal33, QR33, Flow33, and other Nitrotech products (collectively, the "Services").

Please read this privacy policy carefully. By using our Services, you agree to the collection and use of information in accordance with this policy.

// Important: We do not sell, rent, or trade your personal information or health data to third parties for their marketing purposes.

Information We Collect

Account Information

  • Email address and display name (optional)
  • Encrypted password (we never store plain-text passwords)
  • In-app purchase and subscription data
  • Customer support communications
  • Feedback and survey responses

App-Specific Data

Depending on the Service you use, we may collect additional information specific to that app's functionality:

  • Health and wellness data (nutrition, fitness, cycle tracking, measurements)
  • User-generated content (text, images, videos, audio)
  • Scanned data (QR codes, barcodes, documents)
  • Communication data (messages, chat history)
  • Device control preferences and configurations
  • Goals, preferences, and personalization settings

Camera, Photos & Media

Some Services use your camera, photos, or media files:

  • Photos and videos may be processed by AI for content generation or recognition
  • For one-time processing (e.g., scanning), media is deleted after processing completes
  • For apps with storage features (e.g., food logs, photo editing), media you save is stored in your account until you delete it
  • QR/barcode scanning is processed locally and not stored on our servers
  • You control what media is uploaded, saved, or shared
  • You can delete your saved media anytime through app settings

Automatically Collected Information

  • Device information (device type, operating system, unique device identifiers)
  • Usage data (features used, time spent, crash logs)
  • IP address and approximate location (country/region level)
  • Advertising identifiers (IDFA, GAID)

Naya — Period Tracker Privacy

Naya is our privacy-first period tracking app. Because it handles sensitive health data, it has additional privacy protections beyond our general policy. For full details, see Naya's dedicated privacy policy.

Health & Wellness Data

Naya allows you to voluntarily enter menstrual cycle dates, mood, symptoms, water intake, sleep duration, weight, and personal notes:

  • All health data is stored locally on your device by default
  • Cloud sync is opt-in — encrypted in transit (HTTPS/TLS) and at rest via Firebase
  • No account is required to use the app
  • Account creation (via Apple or Google Sign-In) is optional and only used for sync and subscription status

On-Device Encryption

// Security Model

  • - iOS: Secure Enclave + Keychain
  • - Android: AES-256-GCM encryption
  • - Cloud: HTTPS/TLS transmission, encrypted Firebase storage

Health Platform Integration

Naya can sync with Apple Health (iOS) and Google Health Connect (Android) with your permission. Health platform data is never sent to our servers or any third party.

AI Health Assistant (Naya Plus)

The paid Naya Plus subscription includes an AI health assistant powered by Google Vertex AI:

  • Only current-day cycle information and today's symptoms are sent to the AI
  • Historical data is never transmitted
  • No personally identifiable information is included in AI requests

Naya Analytics & Third-Party Services

// Naya Third-Party Services

  • - Firebase Analytics (always active)
  • - GameAnalytics, AppsFlyer, Facebook SDK (consent-gated)
  • - RevenueCat (subscription management)
  • - Apple App Store / Google Play Store (payment processing)

How We Use Your Information

We use the collected information for the following purposes:

  • To provide and maintain our Services
  • To process subscriptions and in-app purchases
  • To personalize your experience and provide recommendations
  • To process and generate content using AI (where applicable)
  • To sync data with third-party platforms you authorize
  • To display relevant advertisements (free tier)
  • To analyze usage patterns and improve our Services
  • To send notifications and reminders (with your permission)
  • To communicate with you about updates and offers
  • To detect and prevent fraud and abuse
  • To comply with legal obligations

Third-Party Services

Our Apps integrate with various third-party services to provide functionality, analytics, and advertising. These services may collect information about you.

Advertising Partners

We work with advertising networks to display ads in our Apps. These partners may use cookies, device identifiers, and similar technologies to collect information for ad targeting and measurement:

// Ad Networks

Analytics & Attribution

We use analytics services to understand how users interact with our Apps:

// Analytics Services

AI Services

Some features in our Services use artificial intelligence for content generation, recognition, and analysis:

// AI Providers

Infrastructure & Payment Services

// Infrastructure & Services

  • - Supabase (Privacy Policy) - Database & Authentication
  • - Firebase (Privacy Policy) - Authentication, Cloud Messaging, Remote Config
  • - RevenueCat (Privacy Policy) - Subscription Management
  • - Stripe (Privacy Policy) - Payment Processing
  • - Apple App Store - iOS apps and subscriptions
  • - Google Play Store - Android apps and subscriptions

Subscriptions & In-App Purchases

Our Apps may offer subscription-based features and in-app purchases. When you make a purchase:

  • Payment processing is handled by Apple (App Store) or Google (Play Store)
  • We do not have access to your full payment card details
  • We receive transaction confirmations and subscription status information
  • Subscription management (cancellation, renewal) is handled through your device's app store

Data Retention & Deletion

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law. Analytics data is typically retained for up to 26 months.

Delete Your Data Anytime

You have full control over your data. All our apps include built-in options to manage your information:

// In-App Settings:

  • Clear Data: Remove all your stored data while keeping your account
  • Delete Account: Permanently delete your account and all associated data

When you delete your account, all your personal information and usage history are permanently removed from our servers. This action cannot be undone. You can also contact us at support@nitrotech.app to request data deletion.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Our Apps are not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

For All Users

  • Access and review your personal information through app settings
  • Request correction of inaccurate data
  • Request deletion of your data or entire account
  • Export your data in a portable format
  • Opt out of personalized advertising
  • Opt out of marketing notifications
  • Manage iOS App Tracking Transparency permissions

For EU/EEA Residents (GDPR)

  • Right to data portability
  • Right to restrict processing
  • Right to object to processing
  • Right to withdraw consent
  • Right to lodge a complaint with a supervisory authority

For California Residents (CCPA)

  • Right to know what personal information is collected
  • Right to know whether personal information is sold or disclosed
  • Right to opt out of the sale of personal information
  • Right to non-discrimination for exercising your rights

Opting Out of Personalized Ads

You can opt out of personalized advertising through your device settings:

// iOS:

Settings → Privacy → Tracking → Disable "Allow Apps to Request to Track"

// Android:

Settings → Privacy → Ads → Enable "Opt out of Ads Personalization"

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy.

Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. You are advised to review this privacy policy periodically for any changes.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us:

$ echo $CONTACT

support@nitrotech.app