Draft. This policy will be finalized before Nuvari launches.

Privacy Policy

Last updated October 9, 2026

Nuvari is run by JB Ventures LLC, 5513 Moultrie Road, Springfield, VA 22151, United States ("we"). This policy explains what we collect when you use the Nuvari website and app, why, and the choices you have. The short version: we use your information to run your mentors, we never sell it, and you can download or delete all of it at any time.

What we collect

Profile, friends and groups (adults only): if you set up a profile, the name and username you choose, an optional photo (shrunk, with its other details removed, and stored encrypted), your invite code, who your friends are and who has asked to be, the groups you start or join (their name, weekly goal and members), whether you muted each one, people you've blocked, reports you've sent, and the bonus messages you've earned from invites.
Group chats: the messages you send in a group chat (stored encrypted), when you were last in a chat and whether you're typing (only for a few seconds), what the group mentor remembers about the group, notes shared with the group (kept as study topics, not as files), and the answers and scores from group quizzes. If you report a message, we keep a copy of it and the messages around it so we can review it.
Photos and PDFs you attach: up to three per message, in a mentor or group chat. Photos are shrunk in your browser before they're sent. Each file is stored encrypted and is only readable by you, or by the members of the group you sent it to. A mentor reads it to reply. It's deleted when you delete the message it was sent in, or your account. Files that were never sent are deleted after a day.
Spoken practice: if you answer out loud, we receive the text your browser wrote down and how long you spoke, never the audio. We keep only the scores (pace, filler words, clarity, structure), the topic you were asked and one tip, so we can chart them for you. We don't keep the text of what you said.
Progress records: for each skill level you complete, the skill, level, number of exercises, the date, and, only if you add one, a name for the card. If you create a link, a random code that makes the link work.
Account details: your email address, and if you chose one, a password. Passwords are stored only as a one-way scrambled form (a hash), never as readable text, and are never written to our logs. We also check a new password against known data breaches, sending only a few characters of a fingerprint of it, never the password itself. Your name and profile picture are kept too if you signed in with Apple or Google earlier.
What you tell Nuvari: your onboarding answers, chats with your mentors, exercise answers and the feedback on them, a short running summary of longer chats (so your mentor can pick up where you left off), and the memories Nuvari saves from your conversations (like your goals and plans).
Progress: the skills you add, your levels, scores, streaks and weekly reviews.
Study tools: the files you upload for exam mode (kept encrypted), the topics and key points the SI takes from them, your study plan, quiz answers, readiness scores, the review cards made from questions you missed, and the exam dates and deadlines you add.
Settings: your time zone, theme and notification choices, and browser notification tokens if you turn them on.
Subscription: whether you have Nuvari Pro, and its status and renewal date. Payments are handled by Stripe, Apple or Google; we never see or store your card number.
SI usage records: each time SI writes a reply, we record when, which AI model, how much it used and what it cost us. These never include the content of your messages. We use them to apply Pro plan allowances and to keep costs in check.
Voice: if you use the microphone, your browser turns your speech into text on your device or with its own speech service, which may receive the audio. Nuvari never receives or stores your audio. Replies can also be read aloud by your browser.
Technical data: your IP address and browser details, used for security and to stop abuse. Our logs never include the content of your messages or memories, or your email address. When you sign up through a friend's invite, we keep a scrambled (salted hash) form of your sign-up network address for 30 days, to spot invites that come from the same network. We never store it as readable text, and it's cleared after 30 days. Such an invite is only flagged for our review, never blocked automatically.

How we use it

To run Nuvari: your mentors' replies, exercises, feedback, levels and memory.
To send the reminders and emails you've asked for.
To handle your subscription.
To keep Nuvari secure and to prevent abuse, such as rate limiting, filtering offensive names, and reviewing reports about profiles.

We don't sell your information, show you ads, or use your conversations to train AI models.

Who we share it with

Only the services we need to run Nuvari, each bound by their own privacy and security commitments:

Anthropic is a service provider that runs the AI behind Nuvari, so it processes the messages, photos and files you send to Nuvari. When you message a mentor, that message, recent messages in the chat, a short summary of the earlier conversation and your relevant memories are sent to Anthropic to write a reply. Any photo or PDF you attach to that message is sent to Anthropic too. Study material you upload is also sent to Anthropic, to read it into topics and to write your quizzes. When someone asks the group mentor, the recent messages in that group chat, the group's subject, exam date, notes topics and shared memory are sent to Anthropic to write the reply, and the notes you share with a group are sent to be read into topics. The text of a spoken answer is sent to Anthropic to score its clarity and structure. Anthropic doesn't use this data to train its models.
Anyone you give a progress record link to, and only if you create one: they see the skill, level, number of exercises, date and the name you added, if any, and nothing else, not even your account. The link is hidden from search engines and stops working the moment you turn it off. Records you haven't shared are never visible to anyone else.
Your browser's speech-to-text service, if you use spoken practice. Your browser, not Nuvari, turns your voice into text, and in some browsers (for example Chrome and Edge) your voice is processed by the browser maker's online service to do it. We never receive the audio. Check your browser's privacy settings if you want to know more.
Your friends, but only people you've accepted as friends, and only what you choose to show: your name, username, photo, and your skills, levels, streaks and completed goals. They never see your chats, memories, exercise answers, exams or anything you type to a mentor. Nobody can see your profile before you both accept, and people you block see nothing. Someone you invite sees only your display name on the invite page.
Neon hosts our database in the United States.
Vercel hosts the website and app servers.
Stripe, Apple and Google process payments and, if you choose them, sign-in.
Resend sends our emails, such as sign-in links and reminders you turn on.

We may also share information if the law requires it, or to protect people's safety.

How we protect it

Everything is encrypted in transit and at rest. Your memories, uploaded files, and the topics, quizzes and review cards made from them get an extra layer of encryption with a key only our server holds, tied to your account. The database itself prevents one user's data from being read by another account.

How long we keep it

We keep your information while your account is open, and your uploaded files until you delete them or your account. When you delete your account, we delete everything right away, and it's gone from our backups within 30 days.

Your choices and rights

See and edit what Nuvari remembers on the Memory page, or say "forget that" in any chat.
Everyone in a group chat you're in sees what you write there, your name and username, whether you're online or typing, your quiz answers and scores, and the notes you share. Anyone who joins later with the group's link or code can read the earlier messages. Group mates never see your private chats with your own mentors. Our team sees a reported message only when someone reports it.
Your group mates, but only people in a group you've joined: your name, username, how many days you practiced this week, your streak (if you show streaks), and the same profile your friends can see. They never see your chats, memories, exercise answers, exams or anything you type to a mentor. Anyone who has a group's link or code can see its name, goal and how many people are in it before joining. If you have browser notifications on, group mates can cause a notification to be sent to you (for example, that someone practiced today); you can mute any group.
Download all your data or delete your account in one tap under Settings, then Privacy and data.
Control your profile: choose what friends and group mates see, hide any skill, change or remove your photo, remove or block friends, mute, leave or (as creator) delete groups, and delete your account to remove your profile, friendships and group memberships entirely.
Delete your spoken practice scores in any skill whenever you like, turn off or delete any progress record link, and delete your own group chat messages.
Report, block, mute or leave in any group chat at any time.
Delete uploaded files, an exam or review cards whenever you like. Deleting a file also deletes the topics and plan sessions taken from it, and deleting an exam deletes everything made for it.
Turn notifications off in Settings, or use the link at the bottom of any email.

Depending on where you live, you may have more rights, such as objecting to how we use your information or complaining to a data protection authority. Email us and we'll help.

Cookies

Nuvari uses no analytics or advertising cookies. Most cookies are essential. The device check below asks first. We set these:

Sign-in session (better-auth.session_token, named __Secure-better-auth.session_token on the live site). It keeps you signed in for up to 30 days, renewed while you use Nuvari, and it's removed when you sign out. It's HttpOnly, so scripts on the page can't read it, and it holds only a random session id, never your details or chats.
Invite code (nv_invite). If you open a friend's invite link, this keeps their code for seven days so the invite can be credited when you finish signing up. It holds only the invite code, and it's cleared once onboarding is done.
Your choices (nv_cookies and nv_consent). Remember that you've seen the cookie notice, and whether you accepted or rejected the device check, for one year. It's essential, so we set it either way.
Device ID (nv_device), only if you accept the device check. A random ID for this browser, kept for 30 days. When someone signs up through a friend's invite, we keep a salted hash of it for 30 days, to flag repeat sign-ups from one device for our review. Nothing is blocked automatically. If you reject, this cookie isn't set and nothing is kept.

Two settings are kept in your browser's local storage, not in cookies: your light or dark theme, and whether you've closed the "What's new" note. Neither holds personal information. Clearing your browser's site data removes them.

Children

Nuvari is only for people 18 and over, and we don't knowingly collect information from anyone younger. If you tell us you're under 18, we don't set up your account. If you believe someone under 18 has an account, email us and we'll delete it.

Changes

If we make important changes to this policy, we'll tell you in the app or by email before they apply.

Contact

Questions or requests: support@nuvari.si. See also our Terms.