Privacy Policy

Managing panic attacks and anxiety is a journey. Our hope is for Nuvin to be your partner along the way – available to offer support any time, any where, for any reason.

Any successful partnership needs to start with trust. For this reason, and countless others, we take the privacy of your data seriously.

This Privacy Policy explains how Nuvin ("we", "us", or "our") collects, uses, and discloses information about you when you access or use our mobile application ("App"), and when you contact our customer service team or otherwise interact with us.

Before using the App or submitting any data to Nuvin, please review this Privacy Policy carefully and contact us if you have any questions. By using the App, you agree to the practices described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not access or use the App.

1. What Data We Collect

Nuvin is designed with privacy at its core. We collect minimal data, and sensitive information like your mood logs are stored locally on your device, not on our servers.

1.1 Data Stored Locally on Your Device

Mood Tracking Data: When you use our mood check-in feature, your mood ratings and associated session counts are stored securely in your device's encrypted Keychain. This data never leaves your device unless you explicitly choose to export it.

User Statistics: We track your usage statistics locally on your device, including total relief sessions completed, current and longest streaks, and your favorite exercises. This data is stored in your device's Keychain and is only accessible by the App on your device.

App Preferences: Your settings preferences (such as notification times, haptic feedback preferences, and theme choices) are stored locally on your device using standard iOS UserDefaults.

Journal Entries: IMPORTANT: Journal entries are NOT saved. When you use the Quick Journal feature, your text is displayed temporarily during the 60-second session and is immediately deleted when you complete or exit the session. We do not store, transmit, or have any access to your journal content.

1.2 Analytics Data We Collect

We use Mixpanel, a third-party analytics service, to understand how users interact with our App so we can improve the experience. Mixpanel collects:

• Usage Events: Actions you take in the App, such as completing a breathing exercise, starting the SOS flow, checking in on your mood, or completing onboarding steps.
• Session Information: How long you use the App, which features you access, and how frequently you use the App.
• Device Information: Device model (e.g., iPhone 14), operating system version (e.g., iOS 17.0), and App version.
• Anonymous Identifiers: A randomly generated device ID that does not identify you personally.

What we do NOT collect through analytics: We do not collect your name, email address, phone number, precise location, or any personally identifiable information through Mixpanel. Your mood values and journal entries are never sent to Mixpanel.

You can learn more about Mixpanel's data practices at https://mixpanel.com/legal/privacy-policy/

1.3 Subscription Data

We use RevenueCat, a third-party subscription management service, to process your in-app purchases. When you subscribe to Nuvin Premium, RevenueCat receives:

• An anonymous user identifier
• Your purchase receipt from Apple
• Your subscription status and type (monthly, annual, or lifetime)
• Device type and platform (iOS)

Payment Information: Nuvin does not collect, process, or store any credit card or payment information. All payment processing is handled securely by Apple through the App Store. We never see your payment card details.

You can learn more about RevenueCat's privacy practices at https://www.revenuecat.com/privacy/

1.4 Crash & Diagnostic Data

If the App crashes or encounters an error, we save a crash log locally on your device. These logs include:

• Date and time of the crash
• App version and build number
• iOS version and device model
• Technical error information (call stack)

These crash logs are stored locally on your device and are NOT automatically sent to us. They are only used for debugging if you contact our support team and choose to share them.

1.5 Information You Provide to Us

Personalization Data: During onboarding, you may provide your first name (for in-app personalization), age range, primary reasons for using the App, symptoms you experience, and your wellness goals. This information is stored locally on your device in encrypted Keychain storage and is used solely to personalize your experience within the App.

Support Communications: If you contact us for support via email at nathan.douziech@gmail.com, we will receive your email address and any information you choose to include in your message.

2. How We Use Your Data

We use the information we collect for the following purposes:

• To Provide the App: To deliver relief techniques, track your progress, and personalize your experience based on your stated goals and preferences.
• To Process Subscriptions: To verify your subscription status and provide access to premium features.
• To Improve the App: To analyze usage patterns (via anonymized analytics) and understand which features are most helpful so we can make improvements.
• To Send Notifications: To deliver local notifications for mood check-in reminders and daily quotes, if you enable these features.
• To Provide Support: To respond to your inquiries and provide customer support.
• To Ensure Security: To detect and prevent technical issues, crashes, and potential security vulnerabilities.

We do NOT use your data for:

• Advertising or marketing to you based on your behavior
• Tracking you across other apps or websites
• Selling your information to third parties
• Training AI models

3. How We Share Your Data

We do NOT sell your personal data.

We may share limited data with the following third-party service providers, solely to operate the App:

3.1 Service Providers

Mixpanel (Analytics): We share anonymized usage data with Mixpanel to analyze App performance and feature usage. Mixpanel does not receive any personally identifiable information or your mood/journal data.

RevenueCat (Subscription Management): We share an anonymous user identifier and subscription status with RevenueCat to manage your premium subscription. RevenueCat does not receive your mood data or journal entries.

Apple (Payment Processing): When you make an in-app purchase, Apple processes your payment information according to their privacy policy. We do not have access to your payment details.

3.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or subpoena), or to:

• Comply with a legal obligation
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the personal safety of users or the public

3.3 Business Transfers

If Nuvin is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4. Data Storage & Security

4.1 Where Your Data is Stored

On Your Device: Your mood logs, statistics, preferences, and personalization data are stored locally on your device using iOS Keychain (encrypted) and UserDefaults.

Third-Party Services: Anonymous analytics data is stored by Mixpanel in the United States. Subscription data is stored by RevenueCat in the United States.

No Cloud Sync: Nuvin does not use iCloud or any other cloud service to sync your data. Your data stays on your device unless you explicitly export it.

4.2 How We Protect Your Data

We implement commercially reasonable security measures to protect your information:

• Sensitive data (mood logs, user stats) is stored in iOS Keychain with encryption
• All network communications use HTTPS encryption
• We use anonymous identifiers instead of personal identifiers wherever possible
• Journal entries are never stored (immediately deleted)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

4.3 Data Retention

Local Data: Data stored on your device (mood logs, stats, preferences) remains on your device until you delete it manually or uninstall the App.

Analytics Data: Mixpanel retains analytics data according to their retention policy (typically 5 years, but anonymized).

Subscription Data: RevenueCat retains subscription data as long as necessary to provide the service and comply with legal obligations.

5. Your Privacy Rights & Controls

5.1 Access & Export Your Data

You can export all of your locally stored data at any time:

1. Open the App and go to Settings
2. Tap "Data & Privacy"
3. Tap "Manage Your Data"
4. Tap "Export All Data"

This will generate a JSON file containing your mood entries, session stats, and preferences, which you can save or email to yourself.

5.2 Delete Your Data

You can delete all of your locally stored data at any time:

1. Open the App and go to Settings
2. Tap "Data & Privacy"
3. Tap "Manage Your Data"
4. Tap "Delete All Data"
5. Confirm deletion

This action is permanent and cannot be undone. After deletion, your mood logs, streaks, and preferences will be erased from your device.

Note: Deleting data from the App does not delete anonymized analytics data already sent to Mixpanel or subscription records stored by RevenueCat.

5.3 Manage Notifications

You can control notifications at any time in Settings. All notifications are local (generated by your device), not push notifications from our servers.

5.4 Cancel Your Subscription

You can cancel your subscription at any time through the App Store:

1. Open the Settings app on your iPhone
2. Tap your name at the top
3. Tap "Subscriptions"
4. Select Nuvin and tap "Cancel Subscription"

5.5 Additional Rights for European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Access: You can request confirmation of what personal data we process about you and receive a copy (use the Export feature above).
• Right to Rectification: You can correct inaccurate data by updating it in the App settings.
• Right to Erasure: You can request deletion of your data (use the Delete feature above).
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can export your data in a machine-readable format (JSON).
• Right to Object: You can object to our processing of your data for certain purposes.
• Right to Withdraw Consent: If we process your data based on consent, you can withdraw that consent at any time.

To exercise any of these rights, contact us at nathan.douziech@gmail.com.

5.6 Additional Rights for California Users (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to Know: You can request details about the personal information we collect, use, disclose, and sell.
• Right to Delete: You can request deletion of your personal information (use the Delete feature in Settings).
• Right to Opt-Out of Sales: We do NOT sell your personal information, so there is nothing to opt out of.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at nathan.douziech@gmail.com.

6. Children's Privacy

Nuvin is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13 years of age.

If you are between 13 and 17 years old, you must have permission from a parent or guardian to use the App.

If we learn that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as quickly as possible. If you believe we have collected information from a child under 13, please contact us at nathan.douziech@gmail.com.

7. International Data Transfers

Your information may be transferred to and processed in the United States, where our third-party service providers (Mixpanel and RevenueCat) are located. The United States may have data protection laws that are different from the laws of your country.

By using the App, you consent to the transfer of your information to the United States. We take steps to ensure that your data receives adequate protection in accordance with applicable data protection laws.

8. Do Not Track Signals

The App does not track you across other apps or websites for advertising purposes. Our Privacy Manifest (PrivacyInfo.xcprivacy) explicitly declares that we do NOT engage in tracking as defined by Apple's App Tracking Transparency framework.

We do not respond to web browser "Do Not Track" signals because the App does not use web-based tracking technologies.

9. Third-Party Links

The App may contain links to external websites and resources, such as:

• Crisis support hotlines (988 Suicide & Crisis Lifeline, Crisis Text Line)
• Mental health organizations (NAMI, ADAA, Mental Health America)
• Our Terms of Service and Privacy Policy (hosted on GitHub Pages)

These third-party sites have their own privacy policies. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you through the App or via the email you provided (if applicable)
• For material changes, we may provide more prominent notice

We encourage you to review this Privacy Policy periodically. Your continued use of the App after changes are posted constitutes your acceptance of the updated Privacy Policy.

11. Medical Disclaimer

While this is a privacy policy, it's important to note: Nuvin is not a medical device and does not provide medical advice, diagnosis, or treatment. The App is designed to provide general wellness support for anxiety and stress management.

We do not collect or process health data in a way that would classify the App as a medical device under applicable regulations. Your mood tracking data is for your personal use and self-reflection only.

If you are experiencing a mental health crisis, please contact emergency services (911 in the US) or a crisis helpline immediately.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: nathan.douziech@gmail.com

We will respond to your inquiry within 30 days.