Privacy Policy
1. Who we are
Nunti is a personalised AI audio news digest service provided through the Nunti apps for iOS and Android, the web app and the website nunti.app. The controller of your personal data is Paweł Kowalczyk, contactable at info@nunti.app — write to the same address about anything in this policy.
2. Data we process
• Account: your email address and password. The password is stored by Firebase Authentication in hashed form; we never see it. • First name (optional): used to greet you in your digest and to address you in emails about your account and the service, including occasional emails inviting you back. • Preferences: display and spoken language, country, news categories, your free-text interests (“personal focus”), delivery time and time zone, digest length, voice and presenter style, and whether you receive the scheduled daily digest. • Digests: the scripts and audio generated for you and the news sources used. • Listening statistics: how many times you played each digest, when you last listened to it and when you finished it. • Device and notification data: push-notification token, platform (iOS, Android or web) and how many times you opened a notification. • App analytics and crash reports: usage events (for example sign-up, onboarding completed, digest requested, played or completed, settings changed) collected with Google Analytics for Firebase, and crash reports from Firebase Crashlytics (device model, operating-system version and error details, linked to your account ID). • Subscription: plan, trial end date, subscription status and billing-period dates, and your Stripe customer and subscription IDs. Card details are entered on Stripe’s payment page and never reach us. • Website (nunti.app), only with your consent: Google Analytics cookies and ad-campaign data — UTM parameters, ad click IDs (such as gclid or fbclid), the landing page and the referring website. The campaign data is kept in your browser for up to 30 days and, if you subscribe, attached to your Stripe subscription so that we know which campaign it came from. • Messages you send us.
3. Purposes and legal bases
• Providing Nunti — your account, generating and delivering your digests, notifications that a digest is ready, keeping your settings in sync: performance of our contract with you (Art. 6(1)(b) GDPR). • Taking payments and managing your trial and subscription: performance of the contract (Art. 6(1)(b) GDPR); keeping payment records required by tax and accounting law: legal obligation (Art. 6(1)(c) GDPR). • Telling you that your trial is ending, reminding you once after it has ended, and occasionally emailing you about your account or the service, including invitations to come back: our legitimate interest in keeping you informed (Art. 6(1)(f) GDPR). You can turn notifications off in your device settings and opt out of emails at any time by writing to info@nunti.app. • App analytics and crash reports, to fix errors and improve Nunti: our legitimate interest (Art. 6(1)(f) GDPR). • Website analytics and ad measurement: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time under “Cookie settings”. • Security, preventing abuse, usage limits, records of account deletions, and establishing or defending legal claims: our legitimate interest (Art. 6(1)(f) GDPR). We do not sell your personal data and do not use it for personalised advertising.
4. How your digest is made
Each digest is produced automatically. Your country, language, news categories and personal focus are sent to Google Gemini to find current news. The news found, your categories, personal focus and first name are sent to OpenAI to write the script, which Inworld AI (or, as a fallback, OpenAI) turns into audio. Your email address is not sent to these providers. The AI selects and summarises news for you; it makes no decisions that have legal or similarly significant effects on you.
5. Service providers
We share personal data only with the following providers, which process it to provide their services to us: • Google (Firebase and Google Cloud) — sign-in, database and file storage (located in the EU), server functions (run in the United States), web hosting, push notifications, analytics and crash reporting; Google Gemini — news search. • OpenAI — script writing and backup text-to-speech. • Inworld AI — text-to-speech. • Stripe — payments, subscriptions and the billing portal. Stripe receives your email address, your account ID and, with your consent, website campaign data. • Apple and Google — app distribution and delivery of push notifications.
6. International transfers
Google, OpenAI, Inworld AI and Stripe may process data in the United States or other countries outside the European Economic Area. Such transfers are based on the European Commission’s adequacy decision for the EU–US Data Privacy Framework, for providers certified under it, or on Standard Contractual Clauses approved by the European Commission. You can request a copy of the relevant safeguards at info@nunti.app.
7. How long we keep data
• Digests (script, audio, sources and listening statistics) are deleted automatically 30 days after they are created. • Account and profile data are kept for as long as you have an account. • You can delete your account at any time in the app (Settings → Delete account). This permanently deletes your profile, all your digests and audio and your sign-in account, cancels any subscription and deletes your customer record at Stripe. We keep only a minimal record that the account was deleted (account ID and time, without your email address), which prevents processes still running from recreating it and documents the deletion. If we delete an account at your request, that record also contains your email address. • Payment and invoice records held by Stripe are kept for the periods required by tax and accounting law. • Crash reports are kept for 90 days; analytics data for 2 months. • On the website, campaign data stays in your browser for up to 30 days and your cookie choice for 12 months.
8. Cookies on nunti.app
When you first visit nunti.app, a banner asks whether you accept analytics and ad-measurement cookies. Accepting and rejecting are equally easy, and nothing optional is stored until you accept. • Always used, because the site needs them: your cookie choice (12 months), your language and currency choice and, on the subscribe page, your sign-in session. • Only with your consent: Google Analytics cookies (_ga, _ga_*) and the campaign data described above (nunti_attribution, 30 days). We use Google Consent Mode: before you choose, or if you reject, Google Analytics sets no cookies and may receive only cookieless signals (for example, that a page was viewed) with no identifier stored on your device. You can change your choice at any time via “Cookie settings” at the bottom of each page; rejecting also deletes stored campaign data and Google Analytics cookies. The mobile apps do not use browser cookies; app analytics are described in section 2.
9. Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to receive it in a portable format, and to object to processing based on our legitimate interests. Where processing is based on consent, you can withdraw it at any time; this does not affect processing carried out before the withdrawal. Many details can be changed directly in the app’s Settings; for anything else write to info@nunti.app — we will respond within one month. You also have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl) — or with the authority in the EU country where you live or work.
10. Is providing data required?
An email address is needed to create an account; without it we cannot provide the service. Your first name and personal focus are optional, and you can change your preferences at any time.
11. Security
Data is encrypted in transit (TLS) and at rest. Access rules ensure that each user can read only their own data, and your digest audio can be reached only through private links.
12. Changes to this policy
We may update this policy. We will tell you about significant changes in the app or by email before they take effect; the date at the top shows the current version.
13. Contact
Questions about this policy or your data: info@nunti.app