Privacy Policy

Managing panic attacks and anxiety is a journey. Our hope is for Nuvin to be your partner along the way – available to offer support any time, any where, for any reason.

Any successful partnership needs to start with trust. For this reason, and countless others, we take the privacy of your data seriously.

This Privacy Policy explains how Nuvin ("we", "us", or "our") collects, uses, and discloses information about you when you access or use our mobile application ("App"), and when you contact our customer service team or otherwise interact with us.

Before using the App or submitting any data to Nuvin, please review this Privacy Policy carefully and contact us if you have any questions. By using the App, you agree to the practices described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not access or use the App.

1. What Data We Collect

Nuvin is designed with privacy at its core. We collect minimal data, and sensitive information like your mood logs are stored locally on your device, not on our servers.

1.1 Data Stored Locally on Your Device

Mood Tracking Data: When you use our mood check-in feature, your mood ratings and associated session counts are stored securely in your device's encrypted Keychain. This data never leaves your device unless you explicitly choose to export it.

User Statistics: We track your usage statistics locally on your device, including total relief sessions completed, current and longest streaks, and your favorite exercises. This data is stored in your device's Keychain and is only accessible by the App on your device.

App Preferences: Your settings preferences (such as notification times, haptic feedback preferences, and theme choices) are stored locally on your device using standard iOS UserDefaults.

Journal Entries: IMPORTANT: Journal entries are NOT saved. When you use the Quick Journal feature, your text is displayed temporarily during the 60-second session and is immediately deleted when you complete or exit the session. We do not store, transmit, or have any access to your journal content.

1.2 Analytics Data We Collect

We use Mixpanel, a third-party analytics service, to understand how users interact with our App so we can improve the experience. Mixpanel collects:

• Usage Events: Actions you take in the App, such as completing a breathing exercise, starting the SOS flow, checking in on your mood, or completing onboarding steps.
• Session Information: How long you use the App, which features you access, and how frequently you use the App.
• Device Information: Device model (e.g., iPhone 14), operating system version (e.g., iOS 17.0), and App version.
• Anonymous Identifiers: A randomly generated device ID that does not identify you personally.

What we do NOT collect through analytics: We do not collect your name, email address, phone number, precise location, or any personally identifiable information through Mixpanel. Your mood values and journal entries are never sent to Mixpanel.

You can learn more about Mixpanel's data practices at https://mixpanel.com/legal/privacy-policy/

1.3 Subscription Data

We use RevenueCat, a third-party subscription management service, to process your in-app purchases. When you subscribe to Nuvin Premium, RevenueCat receives:

• An anonymous user identifier
• Your purchase receipt from Apple
• Your subscription status and type (monthly, annual, or lifetime)
• Device type and platform (iOS)

Payment Information: Nuvin does not collect, process, or store any credit card or payment information. All payment processing is handled securely by Apple through the App Store. We never see your payment card details.

You can learn more about RevenueCat's privacy practices at https://www.revenuecat.com/privacy/

1.4 TikTok Business SDK (Advertising Attribution)

IMPORTANT: We use the TikTok Business SDK to measure the effectiveness of our advertising campaigns and understand how users discover our app. The TikTok SDK automatically tracks:

• App installs: Tracked automatically on first launch
• App launches: Tracked automatically each time you open the app
• Registration events: When you complete onboarding
• Trial starts and subscription purchases: With subscription type, value, and currency
• Purchase events: With value and currency

The TikTok SDK receives: device identifiers, TikTok Access Token (if applicable), App Store ID, subscription types, and purchase amounts. The TikTok SDK does NOT receive your mood data, habits, journal content, or other health information.

TikTok may use this data to measure ad campaign performance and for their own business purposes as described in their privacy policy. Learn more: https://www.tiktok.com/legal/privacy-policy

1.5 App Tracking Transparency (ATT)

We request App Tracking Transparency (ATT) permission to enable advertising attribution through the TikTok SDK. The permission prompt states: "We use tracking to measure ad performance and deliver personalized content to improve your experience."

If you grant ATT permission, the TikTok SDK can link your app activity to advertising data across apps and websites owned by other companies for advertising measurement purposes.

If you deny permission, attribution will use privacy-preserving methods like SKAdNetwork (Apple's privacy-preserving ad attribution framework).

You can manage tracking permissions at any time by going to: iOS Settings → Privacy & Security → Tracking → Nuvin. You can disable tracking permission without affecting core app functionality.

1.6 Onboarding Survey Data

During onboarding, we collect personalization information to customize your experience, including:

• Age range and gender
• Sleep hours and daily routines
• Mental health challenges (Anxiety, ADHD, OCD, Bipolar, Depression, PTSD - all optional)
• Exercise and wellness habits
• Overwhelm frequency and support network information
• Attribution source (where you heard about the app - e.g., TikTok, Instagram, therapist recommendation, etc.)

This data is stored locally on your device and used solely for personalizing your experience within the app. Attribution source information may be shared with advertising partners (TikTok) for measuring ad campaign effectiveness.

All other onboarding data (mental health information, habits, routines) stays on your device and is never sent to advertising services or third parties.

1.7 Crash & Diagnostic Data

If the App crashes or encounters an error, we save a crash log locally on your device. These logs include:

• Date and time of the crash
• App version and build number
• iOS version and device model
• Technical error information (call stack)

These crash logs are stored locally on your device and are NOT automatically sent to us. They are only used for debugging if you contact our support team and choose to share them.

1.5 Information You Provide to Us

Personalization Data: During onboarding, you may provide your first name (for in-app personalization), age range, primary reasons for using the App, symptoms you experience, and your wellness goals. This information is stored locally on your device in encrypted Keychain storage and is used solely to personalize your experience within the App.

Support Communications: If you contact us for support via email at nathan.douziech@gmail.com, we will receive your email address and any information you choose to include in your message.

2. How We Use Your Data

We use the information we collect for the following purposes:

• To Provide the App: To deliver relief techniques, track your progress, and personalize your experience based on your stated goals and preferences.
• To Process Subscriptions: To verify your subscription status and provide access to premium features.
• To Improve the App: To analyze usage patterns (via anonymized analytics) and understand which features are most helpful so we can make improvements.
• To Send Notifications: To deliver local notifications for mood check-in reminders and daily quotes, if you enable these features.
• To Provide Support: To respond to your inquiries and provide customer support.
• To Ensure Security: To detect and prevent technical issues, crashes, and potential security vulnerabilities.

We do NOT use your data for:

• Advertising or marketing to you based on your behavior
• Tracking you across other apps or websites
• Selling your information to third parties
• Training AI models

3. How We Share Your Data

We do NOT sell your personal data.

We may share limited data with the following third-party service providers, solely to operate the App:

3.1 Service Providers

Mixpanel (Analytics): We share anonymized usage data with Mixpanel to analyze App performance and feature usage. Mixpanel does not receive any personally identifiable information or your mood/journal data.

RevenueCat (Subscription Management): We share an anonymous user identifier and subscription status with RevenueCat to manage your premium subscription. RevenueCat does not receive your mood data or journal entries.

Apple (Payment Processing): When you make an in-app purchase, Apple processes your payment information according to their privacy policy. We do not have access to your payment details.

3.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or subpoena), or to:

• Comply with a legal obligation
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the personal safety of users or the public

3.3 Business Transfers

If Nuvin is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4. Data Storage & Security

4.1 Where Your Data is Stored

On Your Device: Your mood logs, statistics, preferences, and personalization data are stored locally on your device using iOS Keychain (encrypted) and UserDefaults.

Third-Party Services: Anonymous analytics data is stored by Mixpanel in the United States. Subscription data is stored by RevenueCat in the United States.

No Cloud Sync: Nuvin does not use iCloud or any other cloud service to sync your data. Your data stays on your device unless you explicitly export it.

4.2 How We Protect Your Data

We implement commercially reasonable security measures to protect your information:

• Sensitive data (mood logs, user stats) is stored in iOS Keychain with encryption
• All network communications use HTTPS encryption
• We use anonymous identifiers instead of personal identifiers wherever possible
• Journal entries are never stored (immediately deleted)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

4.3 Data Retention

Local Data: Data stored on your device (mood logs, stats, preferences) remains on your device until you delete it manually or uninstall the App.

Analytics Data: Mixpanel retains analytics data according to their retention policy (typically 5 years, but anonymized).

Subscription Data: RevenueCat retains subscription data as long as necessary to provide the service and comply with legal obligations.

5. Your Privacy Rights & Controls

5.1 Access & Export Your Data

You can export all of your locally stored data at any time:

1. Open the App and go to Settings
2. Tap "Data & Privacy"
3. Tap "Manage Your Data"
4. Tap "Export All Data"

This will generate a JSON file containing your mood entries, session stats, and preferences, which you can save or email to yourself.

5.2 Delete Your Data

You can delete all of your locally stored data at any time:

1. Open the App and go to Settings
2. Tap "Data & Privacy"
3. Tap "Manage Your Data"
4. Tap "Delete All Data"
5. Confirm deletion

This action is permanent and cannot be undone. After deletion, your mood logs, streaks, and preferences will be erased from your device.

Note: Deleting data from the App does not delete anonymized analytics data already sent to Mixpanel or subscription records stored by RevenueCat.

5.3 Manage Notifications

You can control notifications at any time in Settings. All notifications are local (generated by your device), not push notifications from our servers.

5.4 Cancel Your Subscription

You can cancel your subscription at any time through the App Store:

1. Open the Settings app on your iPhone
2. Tap your name at the top
3. Tap "Subscriptions"
4. Select Nuvin and tap "Cancel Subscription"

5.5 Additional Rights for European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Access: You can request confirmation of what personal data we process about you and receive a copy (use the Export feature above).
• Right to Rectification: You can correct inaccurate data by updating it in the App settings.
• Right to Erasure: You can request deletion of your data (use the Delete feature above).
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can export your data in a machine-readable format (JSON).
• Right to Object: You can object to our processing of your data for certain purposes.
• Right to Withdraw Consent: If we process your data based on consent, you can withdraw that consent at any time.

To exercise any of these rights, contact us at nathan.douziech@gmail.com.

5.6 Additional Rights for California Users (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to Know: You can request details about the personal information we collect, use, disclose, and sell.
• Right to Delete: You can request deletion of your personal information (use the Delete feature in Settings).
• Right to Opt-Out of Sales: We do NOT sell your personal information, so there is nothing to opt out of.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at nathan.douziech@gmail.com.

6. Children's Privacy (COPPA Compliance)

Our app is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13 years of age. If you are under 13, do not use this app or provide any information.

For Users Aged 13-17

If you are between 13 and 17 years old, you must have your parent or legal guardian's permission before using the app or providing any personal information to us. We collect limited data from users aged 13-17, including:

• Onboarding survey responses (age range, gender, mental health information)
• Mood tracking data (stored locally on device)
• App usage analytics (sent to Mixpanel)
• Subscription information (processed by RevenueCat)
• Advertising attribution data (processed by TikTok SDK)

Parents or legal guardians may request to review, delete, or stop the collection of their child's personal information by contacting us at nathan.douziech@gmail.com. We will verify the requester's identity as a parent or guardian before fulfilling such requests.

If you have reason to believe that a child under the age of 13 has provided Personal Data to Nuvin through the App, please contact us immediately at nathan.douziech@gmail.com and we will delete that information from our systems.

Note to Parents: The TikTok Business SDK collects advertising attribution data from all users, including minors aged 13-17 who use the app with parental consent. This data is used solely for measuring advertising campaign effectiveness and is subject to TikTok's privacy practices.

7. International Data Transfers

Your information may be transferred to and processed in the United States, where our third-party service providers (Mixpanel and RevenueCat) are located. The United States may have data protection laws that are different from the laws of your country.

By using the App, you consent to the transfer of your information to the United States. We take steps to ensure that your data receives adequate protection in accordance with applicable data protection laws.

8. Do Not Track Signals & Tracking

Important Update: We use the TikTok Business SDK for advertising attribution, which tracks app installs, launches, and purchase events to measure ad campaign effectiveness. This constitutes "tracking" as defined by Apple's App Tracking Transparency (ATT) framework.

We request ATT permission to enable this tracking. If you deny ATT permission, we use privacy-preserving attribution methods (SKAdNetwork) instead, which do not track you across apps.

You can manage tracking at any time: iOS Settings → Privacy & Security → Tracking → Nuvin.

We do not respond to web browser "Do Not Track" signals because the App does not use web-based tracking technologies.

9. Third-Party Links

The App may contain links to external websites and resources, such as:

• Crisis support hotlines (988 Suicide & Crisis Lifeline, Crisis Text Line)
• Mental health organizations (NAMI, ADAA, Mental Health America)
• Our Terms of Service and Privacy Policy (hosted on GitHub Pages)

These third-party sites have their own privacy policies. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you through the App or via the email you provided (if applicable)
• For material changes, we may provide more prominent notice

We encourage you to review this Privacy Policy periodically. Your continued use of the App after changes are posted constitutes your acceptance of the updated Privacy Policy.

11. Medical Disclaimer

While this is a privacy policy, it's important to note: Nuvin is not a medical device and does not provide medical advice, diagnosis, or treatment. The App is designed to provide general wellness support for anxiety and stress management.

We do not collect or process health data in a way that would classify the App as a medical device under applicable regulations. Your mood tracking data is for your personal use and self-reflection only.

If you are experiencing a mental health crisis, please contact emergency services (911 in the US) or a crisis helpline immediately.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: nathan.douziech@gmail.com

We will respond to your inquiry within 30 days.