Privacy Policy

This Privacy Policy explains how Nyra ("Nyra," "we," "us," or "our"), developed and operated by Nexdev, collects, uses, and protects your information when you visit https://nyra.nexdev.codes (the "Website") or use the Nyra iOS, Android, and web applications (collectively, the "App"). Nyra is an AI-powered crystal & gemstone companion providing camera-based identification, chakra insights, and metaphysical guides.

By accessing or using Nyra, you agree to this Privacy Policy and our Terms of Use. If you do not agree with our practices, please discontinue use of the App and Website.

Account and Profile Information

When you register an account, we may collect your email address, username, and authentication credentials. If you authenticate using Apple Sign-In or Google Sign-In, we receive the tokenized identifier necessary for authentication without accessing your social network data or personal contacts.

Authentication & Security Tokens

We maintain secure session tokens on your device (stored in encrypted iOS Keychain / Android Keystore) to keep you logged in safely. Anonymous guest sessions are also supported and can be converted into registered accounts at any time.

Images & Crystal Scans (User Content)

When you take photos or upload images to scan gemstones, raw rocks, or jewelry, those photos are processed by our neural vision models to generate identification results, chakra properties, and geological details.

Device, Usage & Telemetry

We collect device attributes including model, operating system version, app build version, anonymized IP address, preferred language, and in-app interaction logs. Coarse geographic location (country or region) may be derived from your IP; we do not track your precise GPS coordinates.

Crash Diagnostics

Anonymized crash reports and stack traces are collected to help us diagnose bugs, optimize memory usage, and improve app stability.

Push Notification Tokens

If you grant notification permissions, we generate a device push token for moon phase cleansing alerts and daily crystal insights. You can disable notifications anytime in your operating system settings.

Purchases & Entitlements

In-app purchases and subscriptions are handled securely through Apple App Store (In-App Purchases) and Google Play Billing. Nyra receives entitlement status and transaction tokens via RevenueCat to grant premium features; we never store or receive your credit card numbers.

Cookies & Web Technologies

On our Website, we use essential cookies and lightweight privacy-preserving analytics to ensure site functionality and monitor aggregate traffic.

• Provide, maintain, and enhance the Nyra crystal recognition models and app features.
• Authenticate user accounts, sync personal gemstone collections, and manage cross-device access.
• Deliver metaphysical readings, zodiac recommendations, and personalized crystal guides.
• Validate subscription status, restore active purchases, and prevent billing fraud.
• Monitor technical performance, server uptime, and troubleshoot crash diagnostics.
• Display non-intrusive advertisements in the free tier (subject to your consent preferences where required by law).
• Comply with statutory legal obligations, prevent abusive use, and enforce our Terms of Use.

If you reside within the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following GDPR legal bases:

• Contractual Necessity: Processing required to provide our service under our Terms of Use (e.g., account management, crystal scanning, collection storage).
• Legitimate Interests: Processing necessary for our legitimate interests in securing our infrastructure, detecting fraud, and improving app accuracy, provided such interests are not overridden by your fundamental rights.
• Consent: Where required by law (e.g., non-essential website cookies or personalized advertising), we obtain your explicit consent, which you may withdraw at any time.
• Legal Compliance: Processing required to satisfy tax, accounting, or regulatory directives.

We never sell your personal data. We disclose information only to vetted third-party service providers bound by strict confidentiality and security commitments:

• Cloud Infrastructure & Database: PocketBase and secure cloud servers for account authentication and encrypted collection data.
• Purchase & Subscription Architecture: RevenueCat to verify in-app receipts, sync entitlements across iOS and Android, and manage active tiers.
• Crash Reporting & Analytics: Google Firebase Analytics and Crashlytics for aggregate crash metrics and reliability telemetry.
• Advertising Partners: Google Mobile Ads (AdMob) for free-tier ad display in compliance with privacy regulations.
• Authentication Partners: Apple and Google for secure identity verification.
• Legal Authorities: When compelled by subpoena, court order, or applicable law to protect the safety of users or defend legal claims.

You can manage website cookies through your browser settings. On mobile devices, you can manage or reset your advertising identifier (IDFA on iOS or GAID on Android) via your device privacy settings. We do not track users across unrelated third-party websites.

We retain your personal data only for as long as your account remains active or as needed to provide you with Nyra services. If you delete your account or submit a deletion request, we permanently erase or anonymize your data within 30 days, unless longer retention is required by tax, legal, or regulatory obligations.

Depending on your location (e.g., GDPR, UK GDPR, CPRA, LGPD), you possess the following rights:

• Access & Portability: Request a copy of the personal data we hold about you in a structured, machine-readable format.
• Correction: Update or rectify inaccurate personal profile information.
• Erasure ("Right to be Forgotten"): Request full deletion of your account and saved crystal history.
• Restriction & Objection: Object to or restrict specific processing activities.
• Withdraw Consent: Revoke previously granted consent for notifications or analytics without affecting prior lawful processing.

We apply rigorous technical and organizational security measures, including HTTPS/TLS 1.3 encryption in transit, strict access control policies, and encrypted storage for authentication credentials. While we maintain industry-leading safeguards, no electronic system is 100% infallible.

Your data may be processed on secure servers located outside your home jurisdiction. Where cross-border data transfers occur, we implement valid legal transfer mechanisms, including European Commission Standard Contractual Clauses (SCCs), to safeguard your privacy rights.

Nyra is not directed to children under 13 years of age (or under 16 in the EEA/UK). We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please notify us immediately at support@nexdev.codes and we will take immediate steps to remove it.

We may periodically update this Privacy Policy to reflect app enhancements or legal requirements. When updates occur, we will revise the "Last Updated" timestamp at the top of this page. Continued use of Nyra after updates signifies acceptance of the modified policy.

California residents are entitled to specific rights regarding their personal information. Nyra does not sell personal information. Under the CPRA, you have the right to request disclosure of categories of personal information collected, request deletion, correct inaccuracies, and opt-out of cross-context behavioral advertising. To submit a CPRA request, email support@nexdev.codes with the subject line "California Privacy Request."