Legal

Privacy Policy

Ninuli is built with a local-first philosophy. This page explains what information is used for authentication, subscriptions, what stays on your device, and how we handle permissions, audio, and your privacy rights.

Last updated: August 2026
Local-first by design

Ninuli ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, Ninuli (the "Application").

This policy reflects our local-first architecture. Your study content and app data are designed to stay on your device, except where limited account information is processed for authentication, subscription verification, or where you choose to export or share data.

1. Information We Collect

A. Personal Data for Authentication

We collect minimal information strictly to verify your identity and secure your access to the Application.

  • Contact information, such as your name and email address, when you register an account or sign in using secure third-party services like Google Sign-In.

B. Device Information and Automatically Collected Data

We may collect standard mobile device parameters needed to support baseline application functionality and account access.

  • Device configuration data, operating system details, app version information, and related technical information required for authentication or app compatibility.

C. Device Permissions and Local Media Access

The Application requests explicit access to certain device features so you can use study tools that rely on local files and media. Data accessed through these permissions is processed for app functionality and remains on your device unless you intentionally export or share it.

  • Storage and media access, so you can select, import, export, and display local study files and media elements.
  • Microphone access, so you can record audio for your own study purposes.
  • Audio file access, so you can use your own locally stored audio files inside the app for studying.

D. Subscription and Purchase Data

If you choose to upgrade to a premium subscription (e.g., Ninuli Pro), your purchase is processed securely by your device's respective app store.

  • We do not collect, process, or store your credit card or direct payment details.
  • We securely receive anonymous entitlement and subscription status data to unlock premium features associated with your account.

2. Data Architecture: Local-First by Design

Ninuli is built to maximize privacy by keeping your study content in your hands.

  • Authentication backend: We use secure, enterprise-grade authentication services to manage login and identity verification. We do not use it as a content database for your study material.
  • On-device AI processing: AI-assisted card generation and related processing run locally on your device. Your prompts and generated study content are kept on your device.
  • Local storage: Your cards, decks, notes, study progress, app state, and media used for study remain stored safely in a private on-device vault.
  • User-controlled export: If you export files, those files go wherever you choose to save or share them.

3. Third-Party Service Providers

We do not sell your personal data. We use limited third-party services only where needed for account access, identity management, and subscription verification.

  • Secure identity providers (e.g., Google Sign-In) used solely for authentication and identity verification.
  • Subscription management services (e.g., RevenueCat) used to verify your premium entitlements and active subscription status.
  • App store providers (Apple App Store, Google Play) used for processing secure subscription payments.

4. International Data Transfers

Ninuli is available globally. Authentication information processed through secure sign-in providers may be transferred to and stored on servers outside your state, province, or country. By using the Application, you acknowledge this limited transfer for authentication and account access purposes.

5. Your Global Privacy Rights

Depending on where you live, including the European Union, the United Kingdom, California, India, or other jurisdictions, you may have legal rights regarding personal data associated with your account.

To exercise these rights, contact us at: ninulisupport@gmail.com

  • Right to access the authentication-related personal data we maintain.
  • Right to request deletion of your authentication account and associated account-level data we control.
  • Right to restrict or object where applicable under local law.
  • Right to revoke device permissions, such as microphone or storage access, at any time through your operating system settings.

6. Children's Privacy

The Application is not intended to knowingly collect authentication data from children under the age of 13, or under 16 where a higher age threshold applies by law. If we learn that such data was collected without required consent, we will take reasonable steps to delete it.

7. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you by updating the “Last Updated” date at the top of this page or through an in-app notice.

8. Contact Us

If you have questions, comments, or complaints about this Privacy Policy, contact us at: