Privacy Policy

Privacy Policy

Effective July 11, 2026

This Privacy Policy explains how Nivora ("Nivora", "we", "us", or "our") handles information when you use the Nivora mobile application, getnivora.app, and related support services (collectively, the "Services").

Information we collect

Account and sign-in information

  • Your internal user ID, display name, avatar URL, and account creation and update times.
  • A guest account identifier when you continue without Apple or Google sign-in.
  • For Apple or Google sign-in: the provider name, provider user ID, email address, email-verification status, and profile information made available by that provider.
  • Linked-account status and sign-in activity, including the last successful sign-in time.
  • Authentication and session information. Access and refresh tokens are stored securely on your device; refresh-session records are also stored by our backend so sessions can be validated and revoked.

Readings and app activity

  • Daily and collectible reading history, reading category and date, locale, timezone, and creation time.
  • Cards, meanings, and generated reading snapshots associated with your history.
  • Collectible progress, source-card references, generated content, and whether a collectible reading has been opened.

Notifications and device information

  • A device identifier created for Nivora, device platform, push-notification token, and token activity status.
  • Your reminder preference, reminder time, locale, and timezone.
  • Notification delivery status and related operational error information.
  • App and device integrity signals processed through Firebase App Check.

Support and technical information

  • Information you include in email or other support communications.
  • Technical logs used to operate and protect the Services. Depending on the request and hosting provider, these may include IP address, request time and path, response status, user ID, device ID, and error details.

How information is collected

We receive information from you when you create or link an account, configure reminders, contact support, or otherwise provide it. We create reading and activity records when you use Nivora. Apple, Google, Firebase, your device, and our service infrastructure also provide information needed for sign-in, notifications, security, and service delivery.

How we use information

  • Provide guest and social sign-in, account linking, and session management.
  • Deliver daily readings, preserve reading history, and calculate collectible progress.
  • Generate collectible reading content and display it to you.
  • Send reminders you request and record delivery outcomes.
  • Protect the Services, prevent abuse, enforce rate limits, troubleshoot errors, and maintain reliability.
  • Answer support, privacy, and account-deletion requests.
  • Meet applicable legal obligations and respond to lawful requests.

Service providers and disclosures

We disclose information only as needed to provide, secure, and support the Services, comply with law, or protect users and the Services. Providers may process information under their own terms and privacy policies.

  • Apple and Google provide optional social sign-in.
  • Google Firebase Cloud Messaging delivers notifications, and Firebase App Check helps verify legitimate app requests.
  • DeepSeek may process card names, reading excerpts, categories, dates, locale, and derived themes to generate collectible readings when AI generation is enabled. We do not intentionally send your name, email address, account ID, social-provider ID, push token, or device ID in that generation request.
  • Backend hosting, database, website hosting, content-delivery, and email providers process information required to run the Services and respond to support requests.

We do not sell personal information. Nivora does not use your information for third-party advertising or track you across apps and websites owned by other companies for advertising purposes.

Retention and deletion

  • Account, sign-in, reading, collectible, and notification data is retained while your account is active.
  • When in-app account deletion succeeds, the active database records associated with your account are deleted, including linked sign-ins, refresh sessions, readings, collectibles, push tokens, notification settings, and notification delivery records.
  • Support communications are retained only as long as reasonably needed to handle the request, prevent abuse, and meet applicable obligations.
  • Security and operational logs are retained for a limited period appropriate to troubleshooting, security, and abuse prevention.
  • Deleted information may remain temporarily in restricted disaster-recovery backups until those backups rotate. Backups are not used to restore a deleted account during normal operations.
  • We may retain limited information when required by law or necessary to establish, exercise, or defend legal claims.

Deleting the app from your device does not delete your account. See Account Deletion for available deletion methods.

Your choices

  • You can choose guest access or supported social sign-in and manage linked accounts in Profile.
  • You can turn reminders off in Nivora and revoke notification permission in your device settings.
  • You can delete your account directly from Profile in the app.
  • You may contact us to ask about your information or make a privacy request, subject to identity verification and applicable law.

Security

We use technical and organizational safeguards intended to protect information. No storage or transmission method is completely secure, so we cannot guarantee absolute security.

Children

Nivora is not directed to children under 13. You must be at least 13 years old to use the Services. If applicable law requires permission from a parent or legal guardian for a minor, use Nivora only with that permission. Contact us if you believe a child provided personal information without appropriate permission.

International processing

Our providers may process information in countries other than the country where you live. Where required, we use appropriate measures for such transfers.

Changes to this policy

We may update this policy as the Services or legal requirements change. We will post the revised policy here and update the effective date.

Contact

For privacy questions or requests, contact Nivora at [email protected].