Privacy Policy
Who we are
Nuri is a personal planning and wellbeing app operated by Nuri Pty Ltd, Level 1, 68 Northbourne Avenue, Canberra ACT 2600, Australia. For anything on this page, contact privacy@nuriapp.io.
The short version
We collect what the app needs to work and to show you your own patterns. We don't sell your data, and we don't use it for advertising.
What we collect
Account information. Your email address, and optionally your name, date of birth and profile image — to sign you in, keep your account secure, and contact you about the service.
What you record. Activity titles, descriptions, locations, step names, and the notes you write on check-ins and completed activities.
Your activity patterns. Categories, dates, times, durations, repeats, priorities, reminders, completions, rescheduling, and focus sessions.
Wellbeing information. Your mood, sleep, energy, stress, motivation and social ratings, and any notes with them. This concerns how you feel, and depending on where you live may be treated as health-related or special category data. We handle it accordingly.
Technical information. Standard app and device information needed to run and troubleshoot the service.
Calendar events, only if you connect a calendar. If you choose to connect Google Calendar, the events in the dates you're viewing — their titles, times and which calendar they came from. This is optional, separate from signing in, and covered in detail below.
We do not collect your contacts, photos, precise location, or your activity in other apps.
How we use it
- To run the app and keep your plan in sync across your devices
- To generate your insights, streaks and trends
- To send notifications you've asked for
- To keep accounts secure, prevent abuse and diagnose faults
- To understand in aggregate how the app is used, so we can improve it
How it's protected
Your information is stored on our hosted backend, encrypted in transit and at rest, and access is limited to those who need it to operate the service.
Who we share it with
We don't sell your information. We share it only with providers who help run the service:
| Provider | Purpose |
|---|---|
| Convex | Backend and database hosting |
| Resend | Sending account emails, such as password resets |
| Apple | App distribution and in-app purchases |
| Signing in, if you choose to sign in with Google; reading your calendar, if you choose to connect one | |
| Anthropic | Generating suggested steps for an activity, suggestions for planning your day, and drafting an activity from a description, when you ask for them |
What we send to Anthropic. Only when you ask for a suggestion, and only what that suggestion needs:
- Suggested steps for an activity — that activity's title and type, and nothing else.
- Help planning your day — the shape of that day only: which day of the week it is, start and end times, how long things last, how much of the day is committed in total, the types of activity and how many of each, the gaps between them, whether an activity has a location or travel time set, and the time of day where you are when you ask, so that suggestions fit the hours you have left. Not the names of your activities, and nothing you have written in them.
- Drafting an activity from a description — what you type into the assistant, and today's date so that "Thursday" means the right day. Not the names of your other activities, and nothing you have written in them. The draft comes back as a filled-in form that nothing saves until you do.
In none of these cases do we send wellbeing information, notes, completion history, or anything identifying you. Suggestions come straight back to your device for you to edit, keep or discard. They are not used to train anyone's models.
We may also disclose information where the law requires it, or to protect the rights and safety of our users.
Signing in with Google or Apple
If you choose to sign in with Google, Google gives us your email address, and
your name and profile image where you have them. Signing in requests only the
openid, email and profile scopes. We do
not request access to your Gmail, Drive, contacts or any other
Google service, and we cannot read them.
If you sign in with Apple, Apple gives us your email address — or a private relay address, if you chose to hide yours — and your name if you share it.
We use this only to create your account, sign you in, and contact you about the service. We do not use it for advertising, we do not sell it, and we do not share it with anyone else. Disconnecting is the same as closing your account: delete your account in Settings and this information goes with it.
Connecting your Google Calendar
Connecting a calendar is optional and separate from signing in. Nuri never asks for it during sign-up, and you can use the whole app without it. If you do connect one, Google asks you to approve these scopes:
| Scope | What it lets us do |
|---|---|
calendar.events.readonly |
Read the events in your calendars, so they can appear alongside your Nuri plan |
calendar.app.created |
Create and manage only a calendar that Nuri itself creates, so your Nuri activities can appear in Google. It gives no access to your existing calendars. |
What we do with your calendar events. We read the events in the date range you are looking at and show them next to your own activities, so your day reads as one list. That is all they are used for.
Where they're kept. Google events are held in a cache, separate from the activities you create in Nuri, and refreshed from Google rather than edited by us. We keep the event's title, times and calendar so it can be displayed. We do not use your calendar events for advertising, we do not sell them, we do not share them with anyone else, and we do not use them to train machine-learning models.
Disconnecting. You can disconnect Google Calendar at any time in Settings, or revoke Nuri's access from your Google account permissions page. Disconnecting deletes the cached events and the stored authorisation. It does not delete anything in Google Calendar, and it does not affect your Nuri account or the activities you created here.
Where it's stored
Your information is stored on infrastructure operated by Convex in the United States. Resend, which sends our account emails, also operates in the United States.
If you are in the EU, the UK, or elsewhere outside the United States, this means your information is transferred internationally. For those transfers we rely on the European Commission's standard contractual clauses, together with the UK International Data Transfer Addendum where it applies.
How long we keep it
We keep what you've written for as long as your account exists. Deleting your account deletes it — your entries, check-ins, history and sign-in records are removed straight away, not queued for later.
Cached Google Calendar events are kept only while a calendar is connected. Disconnecting it, or revoking Nuri's access from your Google account, deletes them — you don't have to delete your Nuri account to remove them.
Copies may persist for a limited period in our hosting provider's encrypted backups before those backups are rotated and overwritten. Backed-up copies are never returned to the live service and are not used for anything else.
Your rights
- Access and correct your information, in the app
- Delete your account from Settings, which removes your entries, check-ins and history
- Export your data — planned, but not built yet. Ask us and we'll send you a copy in the meantime.
- Object to or restrict some processing, and withdraw consent where we rely on it
Depending on where you live you may have further rights under the GDPR, UK GDPR, the CCPA or the Australian Privacy Act, including the right to complain to your data protection regulator.
Our legal bases, if you are in the EU or UK
- Performance of a contract — to give you the app, keep your plan in sync, and run your account
- Your explicit consent — for the wellbeing information you choose to record. This is special category data under Article 9, and you can withdraw consent at any time by deleting that information or your account
- Our legitimate interests — keeping accounts secure, preventing abuse, diagnosing faults, and understanding in aggregate how the app is used
- Legal obligation — where the law requires us to keep or disclose something
Children
Nuri is for adults. It isn't intended for anyone under 18, and we don't knowingly collect their information.
Changes
We'll post changes here and update the date above. Material changes will be notified in the app.
Contact
privacy@nuriapp.io · Nuri Pty Ltd · Level 1, 68 Northbourne Avenue, Canberra ACT 2600, Australia