At Nimrix, privacy is designed in from the start rather than bolted on later. This page lays out, in plain
language, what data we handle, why we handle it, and the control that stays with you. By using Nimrix, you
agree to the practices described below.
01 Who we are
“Nimrix” refers to the app and the services offered under the name Nimrix. For the purposes of this policy, our team is the party responsible for the data you provide through our products.
Have a question about anything here? Write to us at [email protected]. We aim to acknowledge every message within two business days.
02 What we collect
We keep data collection to a minimum. What we do gather falls into three groups.
Account essentials
Display name
A name of your choosing — it doesn't need to be your legal one.
Email address
Used for sign-in, password resets, and important service notices.
Password hash
We store only a one-way hash, never a plaintext password.
Preferences
Language, theme, notification toggles, and other in-app settings.
Activity in the app
Companions you build — their descriptions, traits, and starter memories
Conversations between you and your companions
Usage events (such as “opened the companion studio”) with no message content attached
Reports and feedback you submit through in-app tools
Device & diagnostics
Device model, OS version, app build, and screen dimensions
Rough region derived from your IP (country or region only — never a street address)
Crash reports and performance data that help us track down problems
Session tokens stored on your device to keep you signed in
03 How we use it
Everything we collect ties back to a specific purpose:
Operate the service — authenticate sessions, deliver chats, sync across devices
Personalize — remember your settings and conversation context
Act on reports — investigate moderation reports and abuse claims
Communicate — send account notices and reply to support requests
Improve reliability — diagnose crashes, latency, and regressions
Comply with the law — respond to lawful requests and enforce our Terms
What we never do
We run no targeted advertising, we don't sell personal data, and we don't use your conversations to train models outside Nimrix unless you enable an explicit, reversible opt-in.
04 How we protect it
Security is built into the product rather than simply promised:
In transit
TLS 1.3 on every client–server connection, with strict HSTS.
At rest
AES-256 envelope encryption for stored chats and companion data.
Access control
Role-based permissions and 2FA-gated access for our engineers.
Geo-redundant backups held to the same encryption standard as live data.
No system is flawless. We keep working to lower risk, and we'll notify affected users of any material incident without undue delay.
05 When we share
We disclose personal data only in a handful of narrow, clearly defined cases:
Service providers — hosting, payment, and analytics partners bound by confidentiality
Legal duties — valid court orders, lawful government requests, and tax compliance
Corporate changes — a merger or acquisition, with notice to affected users
Protecting the platform — enforcing our Terms or preventing harm to others
With your consent — any time you authorize a specific disclosure in the app
06 Retention
Active accounts
Kept for as long as your account remains active.
Dormant accounts
Flagged after 18 months of inactivity, with email warnings before removal.
Deleted accounts
Personal data removed from primary systems within 30 days.
Backups
Rotated out of geo-redundant backups within 90 days of deletion.
Diagnostic logs
Purged automatically after 60 days; aggregate counts may persist for capacity planning.
Moderation records
Retained up to 24 months for safety and abuse investigations.
07 Your choices
Wherever you live, we honor the following rights:
Access — obtain a copy of the data we hold about you
Correct — fix information that's wrong or incomplete
Delete — ask us to erase your personal data
Export — receive your companions and chats in a portable archive
Restrict — limit certain kinds of processing
Object — push back on processing you disagree with
Withdraw consent — revoke any opt-in you previously gave
Complain — raise a concern with your local data protection authority
To exercise any of these, contact us at the address below. We reply within 30 days — usually sooner — and never charge for routine requests.
08 Cookies
On the web we use a small set of cookies and similar storage, grouped by purpose:
Essential
Session tokens that keep you signed in and route requests securely.
Functional
Remember your language, theme, and accessibility preferences.
Performance
Anonymous timing data that flags slow pages and bad releases.
Analytics
Aggregated, opt-out usage counters. No third-party advertising cookies.
09 Minimum age
Nimrix is intended for adults aged 18 and over. We don't knowingly gather personal data from anyone under 18. If we learn that a minor has opened an account, we close it and erase the related data. If you believe a minor has signed up, please contact us at the address below.
10 Global transfers
Your data may be processed in countries other than the one you live in. When we move data across borders, we rely on appropriate safeguards:
Standard contractual clauses issued by data protection authorities
Adequacy decisions, where they apply
Binding internal rules that govern data flow between our engineering regions
Recognized privacy-framework certifications, where relevant
11 Changes to this policy
We may update this policy as the product evolves. When a change is material, we'll let you know in one or more of these ways:
An email to the address on your account
An in-app banner the next time you open Nimrix
A version note on this page, with a refreshed “Effective” date
If you keep using Nimrix after a revision takes effect, you accept the updated policy. If you don't agree, you can export your data and close your account.
Privacy questions or requests?
We handle privacy requests personally — no ticket maze.