Nuvix - Privacy Policy

1. Information We Collect

We collect the following categories of information to operate effectively and provide you with a secure and personalized experience.

a) Information You Provide Directly

Name, email address, phone number, and date of birth.
Account credentials (username, password — stored in encrypted form and never readable by our team).
Identity verification data (KYC information, government-issued ID, photos, proof of address).
Wallet-related details (for crypto rewards or future transactions).
Communication content (messages, support requests, feedback, and survey responses).
Referral and invitation data (e.g., referral codes used during registration).

b) Information Collected Automatically

IP address, approximate geolocation, device type, operating system, browser type, and app version.
Usage data: pages visited, features used, session duration, click patterns, and interaction logs.
Contextual ad data: device type, operating system, app version, approximate region, and app context used by our advertising partners (including Google AdMob and other ad networks) solely to serve non-personalized advertisements. We do not use or share advertising identifiers (GAID/IDFA) for ad targeting purposes.
Ad performance data: aggregate ad impressions, clicks, and revenue metrics collected by our advertising partners for billing and platform sustainability purposes.
Analytics identifiers used to measure overall app performance and stability (e.g., Firebase Analytics).
Log data: timestamps, error reports, and performance diagnostics.

c) Information from Third Parties

We may receive information from:

Authentication or social login providers (e.g., Google, Apple, Facebook) if you choose to use them.
Identity and data verification partners (for KYC and fraud prevention).
Analytics, advertising, or hosting providers that help us improve our Services.
Publicly available sources or sanctions screening databases used for AML/CTF compliance.

2. How We Use Your Information

We use your data to:

Create, maintain, and secure your Nuvix account.
Facilitate secure access to our Platform and its features.
Operate mining simulations, Token reward mechanics, and network participation features.
Verify your identity and prevent fraud, money laundering, and terrorist financing (KYC/AML compliance).
Deliver personalized user experiences and relevant in-app content.
Display non-personalized advertisements within the application to cover platform operating costs and keep the Services free for all users. Ads are served based solely on context (app category, region) and never on your personal profile or behavioral data.
Measure aggregate ad performance (impressions, clicks) for billing and sustainability purposes — no individual profiling is performed.
Improve performance, stability, and functionality of our Services.
Send transactional notifications, security alerts, and support messages.
Comply with all applicable legal, regulatory, and reporting obligations.
Conduct analytics and research to enhance security and user engagement.
Enforce these Terms and protect the rights of Nuvix, its founders, and other users.

✔ We never sell, rent, or trade your personal information. The ads displayed in our application are non-personalized and are not based on your profile, behavior, or advertising identifier.

3. Legal Bases for Processing

Depending on your jurisdiction and the nature of the processing activity, we rely on one or more of the following legal bases:

Consent — when you have given us explicit permission (e.g., marketing communications, optional data sharing, analytics cookies). You may withdraw consent at any time without affecting prior processing.
Contractual necessity — to perform the services you have requested by creating an account and using the Platform.
Legal obligation — to comply with applicable laws, including KYC/AML requirements, tax obligations, and regulatory reporting.
Legitimate interests — to maintain, improve, and secure our Platform, prevent fraud, enforce our Terms, and communicate with you about service updates, provided these interests are not overridden by your fundamental rights.

Where required by applicable law (e.g., GDPR for EU users, CCPA for California users), we will clearly identify the specific legal basis for each processing activity.

4. How We Share Information

We may share your data with:

Service providers who help us operate our Platform (hosting, cloud infrastructure, analytics, identity verification, customer support, payment processing). These providers act as data processors and are contractually bound to process data only on our instructions and to maintain appropriate security standards.
Business partners who assist in offering rewards, additional features, or integrated services, strictly on a need-to-know basis.
Legal and regulatory authorities when required by applicable law, court order, subpoena, or government request, or when reasonably necessary to prevent fraud, illegal activity, or harm.
Successors or affiliates in the event of a merger, acquisition, sale of assets, or corporate restructuring, provided the acquiring entity agrees to honor this Privacy Policy.

We do not share your personal data with third parties for their own marketing or advertising purposes. Whenever we share data, we ensure appropriate contractual, technical, and organizational safeguards are in place.

5. International Data Transfers

Because Nuvix operates globally, your information may be transferred to and stored on servers located outside your country of residence, including countries that may not provide the same level of data protection as your home country.

Where such transfers occur, we ensure your data is protected through appropriate safeguards, which may include:

Standard Contractual Clauses (SCCs) approved by the European Commission (for EU/EEA data).
Adequacy decisions where the destination country has been recognized as providing sufficient protection.
End-to-end encryption and strict access controls on all transferred data.
Binding data processing agreements with all third-party recipients.

6. Data Security

We use advanced security technologies and procedures to protect your personal data, including:

End-to-end data encryption in transit (TLS/HTTPS) and at rest (AES-256 or equivalent).
Multi-factor authentication and strict role-based access controls.
Continuous security monitoring and regular independent security audits.
Incident response procedures and a dedicated security team.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities within the timeframes required by applicable law (e.g., 72 hours under GDPR).

However, no online system is completely secure. You use our Services at your own risk, but we strive to protect you to the highest standard reasonably available.

7. Data Retention

We retain your personal data for as long as necessary to provide and maintain our Services, fulfill our contractual or legal obligations, resolve disputes, and ensure security. Indicative retention periods include:

Account data: retained for the duration of your account and up to 5 years after deletion, as required by applicable law.
KYC/identity data: retained for a minimum of 5 years after account closure to comply with AML/KYC regulations.
Transaction and Token records: retained for a minimum of 5 years for audit, legal, and regulatory purposes.
Support and communication data: retained for up to 3 years after resolution.
Analytics and usage data: retained in anonymized or aggregated form indefinitely after the active period.

Once data is no longer needed for any purpose, it is securely deleted or irreversibly anonymized.

8. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

Access: the right to request a copy of the personal data we hold about you.
Rectification: the right to correct inaccurate or incomplete information.
Erasure ("right to be forgotten"): the right to request deletion of your personal data, subject to legal retention obligations.
Restriction: the right to request that we limit how we use your data in certain circumstances.
Objection: the right to object to processing based on legitimate interests or for direct marketing purposes.
Data portability: the right to receive your data in a structured, machine-readable format (where applicable).
Withdrawal of consent: the right to withdraw consent at any time where processing is based on consent, without affecting prior processing.
Complaint: the right to lodge a complaint with the competent data protection authority in your country of residence.

To exercise any of these rights, please contact us via our FAQ & Support page. We will respond within 30 days (or within the timeframe required by applicable law).

9. Children's Privacy

Nuvix does not knowingly collect personal data from individuals under 18 years of age. Our Services are not directed at minors. If we become aware that a person under 18 has provided personal information, we will delete it immediately and terminate the associated account.

If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately via our FAQ & Support page.

10. Account Deletion Request

Users may request the deletion of their account directly through the mobile application or by contacting our support team. Before submitting your deletion request, you may download a copy of your personal data via the account settings page.

Once the request is submitted, we will send a confirmation email to the address associated with your account. This confirmation is required to validate the deletion process.

After the confirmation email is sent, the account will remain active for a period of 30 days. During this period, no mining activity or login must occur for the deletion to proceed. If the account remains inactive for 30 consecutive days following confirmation, it will be permanently deleted and all associated personal data will be removed in accordance with this Privacy Policy.

Please note that certain data may be retained after deletion where required by applicable law (e.g., KYC records, transaction logs for AML compliance), as described in Section 7.

If you did not initiate an account deletion request, you may disregard the confirmation email and your account will remain active. The deletion process will be automatically cancelled if any activity is detected within the 30-day period.

⚠ Account deletion is permanent and irreversible. All Token balances will be permanently forfeited upon deletion, with no right to compensation or recovery.

11. Cookies and Tracking Technologies

Nuvix's mobile application does not use browser cookies. Our website may use strictly necessary technical session identifiers required for secure operation only.

Within the mobile application, our advertising partner (Google AdMob) and analytics tools (e.g., Firebase) may use lightweight SDKs to collect contextual technical data (device type, OS version, region) strictly for the purpose of delivering non-personalized ads and measuring app performance. No behavioral tracking, cross-app tracking, or user profiling is performed. Please refer to Section 12 for full details on our advertising practices.

12. Advertising

Nuvix displays advertisements within its mobile application to support the free operation of our Services. We work with third-party advertising partners, including Google AdMob and potentially other ad networks, to serve ads to our users.

12.1 How Advertising Works

Our advertising partners may collect and use the following data to serve you relevant ads and measure their performance:

Your device advertising identifier (Google Advertising ID on Android, IDFA on iOS).
Your approximate location (country or region level).
Device type, operating system, and app version.
In-app behavior and interaction data (e.g., features used, session length).
Ad interaction data (impressions, clicks, conversions).

This data may be used to show you personalized advertisements based on your interests and profile, or non-personalized advertisements based solely on context (e.g., your region, app category).

12.2 Consent for Personalized Ads

Where required by applicable law (including GDPR for EU/EEA users and similar laws in other jurisdictions), we will request your explicit consent before serving personalized advertisements. You may be shown a consent dialog (e.g., via Google's User Messaging Platform) when you first use the application.

If you decline or withdraw consent, you will still see ads, but they will be non-personalized. This will not affect your access to the Platform's features.

12.3 Google AdMob

We use Google AdMob, a mobile advertising service provided by Google LLC. Google AdMob may collect and process data in accordance with Google's own privacy policies. We encourage you to review:

12.4 Opt-Out of Personalized Advertising

You may opt out of personalized advertising at any time through the following methods:

Android: Go to Settings → Google → Ads → Delete advertising ID or opt out of ads personalization.
iOS: Go to Settings → Privacy & Security → Tracking → disable "Allow Apps to Request to Track", and Settings → Privacy & Security → Apple Advertising → disable "Personalized Ads".
In-app: Access the Privacy Settings in your Nuvix account to manage your ad preferences.

Please note that opting out of personalized ads does not mean you will stop seeing ads — it means the ads displayed will be less relevant to your interests.

12.5 Children and Advertising

As stated in Section 9, our Services are not directed at individuals under 18. We do not knowingly serve personalized ads to minors. If a user is identified as under 18, only non-personalized, age-appropriate ads will be displayed or all ads will be disabled, in compliance with applicable law including COPPA and Google AdMob's policies.

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Services. For material changes, we will notify you via in-app notification or email at least 14 days before the updated Policy takes effect. For non-material changes, updates are effective immediately upon posting.

The "Last updated" date at the top of this page will always reflect when the most recent changes were made. We encourage you to review this Policy periodically. Continued use of our Services after any update constitutes your acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:

Via our FAQ & Support page.

If you are located in the European Economic Area and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.