Privacy Policy
Effective date: May 6, 2026 · Version 1.0
← Back to homepage
Effective date: May 6, 2026 · Version 1.0
← Back to homepageNixora is built to minimize how much of your data we collect, retain, and expose. Raw document images stay on your device during OCR, messages are designed to remain private between participants, and we do not sell your personal data or use your content to train AI models. This policy explains what data we handle, why we handle it, and where it is stored.
Nixora is a language accessibility platform developed and operated by Nixora.ai ("we," "us," or "our"). Nixora.ai is based in Denver, Colorado, United States.
For any privacy-related inquiries, you may reach us at: privacy@nixora.ai
This Privacy Policy applies to the Nixora mobile application ("the App") and all services provided through it, including:
This policy does not apply to third-party services that Nixora integrates with (such as Google services). Those services are governed by their own privacy policies, which are referenced in Section 9.
Nixora is designed around data minimization. We try to keep sensitive processing on-device where practical, limit what is transmitted to our backend, retain operational data only as long as necessary, and avoid using customer content for model training or advertising personalization.
When you photograph or upload a document, optical character recognition (OCR) is performed on your device. The raw image of your document is not uploaded to our backend for analysis. Instead, the extracted text is sent securely for the analysis you requested.
Nixora is designed so that message content is protected in transit and is not intended to be readable by Nixora personnel during normal operation. We retain only the limited operational data necessary to provide messaging, routing, delivery, safety, and account functionality.
Nixora does not keep the full text of analyzed documents as a long-term backend record. Document analysis results are currently stored locally on your device so you can reopen your history there. Other operational data is retained only for the periods described in this policy.
Raw document images stay on your device during OCR. We do not sell your data. We do not use your content to train AI models. We aim to keep collection and retention limited to what the service actually needs.
We collect the minimum data necessary to provide the service. The table below describes every category of data Nixora handles.
| Data Category | What It Is & Why |
|---|---|
| Account identity | Your Google account display name and email address, collected when you sign in. Used solely to identify your account and enforce usage limits. Never sold or shared with third parties for marketing. |
| Language preference | The language you select in the app. Stored on your device and in your account to deliver analysis and translation in your chosen language. |
| Usage counters | Counts of analyses and translated tokens used in the current period. Stored to enforce free-tier limits and detect abuse. No content is associated with these counters. |
| Document analysis results | The plain-language summary, key points, and red flag assessment generated from your document. These results are currently stored locally on your device so you can reopen your history there. The underlying document text is not stored as a long-term backend record. |
| Message metadata | Minimal routing data required to deliver messages between users: sender ID, recipient ID(s), timestamp, and delivery status. Message content is handled using encrypted service flows and is not used for advertising personalization. |
| Voice message audio | Audio recordings you send as voice messages are stored ephemerally in encrypted cloud storage. They are automatically and permanently deleted after 7 days. Audio is never analyzed, indexed, or used for any purpose other than delivery to the recipient. |
| Subscription status | Whether your account is on the Free or Pro tier, managed via Google Play Billing. We receive subscription state from Google — no payment card data is ever handled by Nixora.ai directly. |
| Device attestation | Firebase App Check with Play Integrity API is used to verify that requests originate from genuine Nixora installations on real Android devices. This prevents automated abuse. No personal device information is stored by Nixora. |
| Crash and error reports | If the app crashes, Firebase Crashlytics collects a crash report including device model, OS version, and the stack trace. No personal data or document content is included in crash reports. |
| Analytics events | Anonymized events (e.g., "document analysis completed," "subscription started") collected via Firebase Analytics. Used to understand how the app is used and improve it. Events do not contain document content or message content. |
We use the data described above for the following specific purposes, and no others:
We do not sell your personal data. We do not use your data to train or fine-tune any AI model. We do not share your data with third parties for their own marketing purposes.
Nixora uses encrypted transport and privacy-focused messaging design to protect data in transit between your device, our services, and other intended participants. We also limit backend access to operational data needed to run the service.
We design Nixora to reduce unnecessary exposure of your content, limit retention, and use strong transport and storage protections throughout the service.
When you analyze a document using Nixora:
AI training: The text content of your documents is never used to train, fine-tune, or evaluate our AI models. This applies to both Nixora's own systems and any third-party AI providers we use. Our agreements with AI providers prohibit training use of submitted data.
When messages are translated, the text content is transmitted to our translation service for translation. This transmission is encrypted. Translated content is not retained by the translation provider beyond the scope of the individual translation request. We do not log the content of translated messages.
We retain data only as long as necessary to provide the service or as required by law. The following table describes our retention schedule for each data type:
| Data Type | Retention Period & Deletion Trigger |
|---|---|
| Document text (extracted) | Retained only for short-lived processing needed to return the requested analysis, and not kept as a long-term backend document record. |
| Document analysis results | Currently stored locally on your device until you delete them, clear app data, or remove the app. |
| Voice message audio | Automatically deleted from encrypted cloud storage after 7 days. Not recoverable after deletion. |
| Chat message metadata | Retained for 180 days from message creation. Purged on a rolling basis. |
| Group conversation data | Retained while the group is active (at least one member). After all members leave, retained for 30 days, then permanently purged. |
| Document share previews | Publicly accessible share links and their associated preview data expire after 7 days and are automatically deleted. |
| Account data | Retained while your account is active. Upon account deletion (see below), all associated data is purged within 30 days. |
| Usage counters | Daily counters reset daily; weekly counters reset weekly; monthly counters reset monthly. Automatically managed by our systems. |
| Crash reports | Retained for 90 days by Firebase Crashlytics, then automatically deleted. |
| Analytics events | Retained for up to 14 months by Firebase Analytics in aggregated, anonymized form, consistent with Google's data retention policies. |
You may request deletion of your account and all associated data at any time by:
Upon account deletion, all data associated with your account — including analysis history, message metadata, and account credentials — will be permanently purged within 30 days. Data that has already been automatically purged (such as voice messages past their 7-day TTL) is of course already gone.
Nixora uses the following third-party services. Each is governed by its own privacy policy, linked below. We have selected each service based on its privacy commitments and our contractual ability to restrict their use of data.
| Service | Purpose & Data Handled |
|---|---|
| Google Firebase Auth | User authentication via Google Sign-In. Handles your Google account credentials. Firebase Privacy Policy |
| Google Firestore | Storage of account and operational application data needed to provide Nixora services. Google Cloud Privacy |
| Firebase Realtime Database | Real-time message delivery signals (minimal metadata only — no message content). Firebase Privacy Policy |
| Google Cloud Storage | Encrypted ephemeral storage of voice message audio files (7-day TTL, then auto-deleted). Google Cloud Privacy |
| Google ML Kit | On-device OCR (text recognition from document images). Runs entirely on your device — no data leaves your phone during OCR. ML Kit Terms |
| AI processing providers | Used to analyze document text and support translation features. We configure these services for requested processing tasks and do not use your submitted content to train our own models. Where third-party provider terms apply, those providers govern their own handling of service-side processing data. |
| Google Play Billing | Subscription and in-app purchase processing. Nixora never receives or stores your payment card information. Google Payments Privacy |
| Google AdMob | Advertising displayed to some free-tier users in supported parts of the app. We do not use the contents of your documents or messages to personalize ads. Google Ads Privacy |
| Firebase App Check (Play Integrity API) | Device integrity verification to prevent bot abuse. Verifies that requests come from genuine Nixora installations. No personal data is retained by Nixora from this process. Firebase Privacy Policy |
| Firebase Crashlytics | Crash reporting. Collects device model, OS version, and stack trace data when the app crashes. No personal data or document content is included. Firebase Privacy Policy |
| Firebase Analytics | Anonymized, aggregated usage analytics. No document content or message content is included in any analytics event. Firebase Privacy Policy |
Depending on your location, you may have certain rights regarding your personal data. Nixora honors the following rights for all users regardless of jurisdiction:
You may request a summary of the personal data Nixora holds about your account. Email privacy@nixora.ai and we will respond within 30 days.
You may request deletion of your account and associated server-side data at any time by emailing privacy@nixora.ai. Deletion of locally stored analysis results on your device may also require removing them in-app, clearing app data, or uninstalling the app. Deletion is permanent and irreversible.
You may update your language preference and display name at any time from within the app. To correct other account information, contact privacy@nixora.ai.
You can manage advertising preferences through your device's Android advertising settings and any privacy controls made available by Google or your device manufacturer. Where Nixora offers additional in-app advertising controls, those controls will apply as described in the app.
You may opt out of Firebase Analytics data collection through your device's Google account settings or by contacting privacy@nixora.ai.
California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information. Nixora does not sell personal information. To exercise your CCPA rights, contact privacy@nixora.ai.
If you are located in the European Economic Area or United Kingdom, you have rights under GDPR including access, rectification, erasure, restriction, portability, and the right to object. Our legal basis for processing your data is performance of the contract (providing the service you requested) and legitimate interests (security and abuse prevention). To exercise your GDPR rights, contact privacy@nixora.ai.
Nixora is not directed at children under the age of 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children under these ages.
If you believe a child under 13 has created an account with Nixora, please contact us immediately at privacy@nixora.ai and we will promptly delete the account and all associated data.
Users between the ages of 13 and 17 may use Nixora only with verified parental consent, consistent with applicable law in their jurisdiction.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
We encourage you to review this policy periodically. Your continued use of Nixora after a policy update constitutes acceptance of the updated terms, except where law requires explicit consent.
Previous versions of this policy are available upon request by emailing privacy@nixora.ai.
For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:
For urgent security-related matters, please use the subject line "URGENT: Security" and we will prioritize your message.
The following summarizes the information required for the Google Play Data Safety form. This section is provided as a reference for completeness and transparency.
| Data Type | Collected · Shared · Required · Purpose |
|---|---|
| Name & Email (Account) | Collected via Google Sign-In · Not shared with third parties · Required · Account management |
| App interactions | Collected (anonymized) · Not shared · Optional · App improvement |
| App diagnostics (crash logs) | Collected · Shared with Firebase (Crashlytics) · Optional · Bug fixing |
| Device or other IDs | Collected (device attestation only) · Not retained · Required · Fraud prevention |
| Messages | Transmitted using encrypted service flows · Not used for advertising personalization · Required · Core feature |
| Photos/Documents | Raw document images are processed on-device for OCR; extracted text is transmitted securely for requested analysis · Required · Core feature |
| Financial info | Not collected by Nixora · Handled entirely by Google Play Billing |