Last updated: 16 July 2026

This Privacy Policy explains how Nuvaa (“we”, “us”), operating from Kathmandu, Nepal, collects, uses and protects your information when you use our platform. We have tried to keep it readable rather than legalistic.

Your chats stay yours

We don’t sell your data or use your private conversations to train models.

Encrypted by default

Data is encrypted in transit and at rest. Payments run through trusted local gateways.

You’re in control

Export or delete your data any time from Settings.

Kept only as needed

We retain data only as long as your account is active or the law requires.

01Information we collect

Information you give us

Account details: your name, email and/or phone number when you register.
Sign-in details: if you register or sign in with Google, the basic profile information Google shares with us — your name, email address and profile picture.
Conversations and content: the prompts, files and code you send to models, and the responses generated.
Payment information: top-up amounts and the method used. Wallet or bank credentials are handled by the payment provider, not stored by us.

Information collected automatically

Usage data: which features and models you use, and your credit history.
Device and log data: browser type, IP address and basic diagnostics to keep the Service secure and reliable.

02How we use your information

To provide, maintain and improve the Service.
To route your requests to the AI model you choose and return the response.
To process top-ups, track your credit balance and prevent fraud.
To send you essential service messages and, only with consent, product updates.
To comply with legal obligations under the laws of Nepal.

We do not sell your personal data, and we do not use your private conversations to train AI models.

03AI model providers

When you chat, your prompt is sent to the third-party provider that hosts your chosen model, such as Anthropic, OpenAI or Google, so it can generate a response. These providers process your input under their own privacy and data-handling terms.

We choose providers that offer business or API terms which, by default, do not use submitted content for training, and we pass only the data needed to complete the request you asked us to run.

We share information only in limited circumstances:

Service providers: model hosts and infrastructure partners, strictly to operate the Service.
Authentication providers: if you choose Google sign-in, your identity is verified through Google and our authentication provider, strictly to sign you in.
Payment processors: top-ups made through Nepali payment methods such as eSewa, Khalti, IME Pay, Fonepay QR, ConnectIPS, and supported bank transfers are handled by the provider processing that transaction.
Legal reasons: when required by a valid legal request under Nepali law.
Business transfers: if Nuvaa is involved in a merger or acquisition, with notice to you.

05Data security

We use industry-standard measures including encryption in transit (TLS) and at rest, access controls and regular reviews. No system is perfectly secure, but we work hard to protect your data and will notify you of any breach as required by law.

06Data retention

We keep your information for as long as your account is active. When you delete your account, we permanently remove your conversations and personal data, except where we must retain certain records, such as payment records, to meet legal or accounting obligations.

07Your rights and choices

Access and export: download a copy of your data from Settings.
Correction: update your account details at any time.
Deletion: delete your account and associated data from Settings → Account.
Communication preferences: opt out of non-essential emails any time.

08Children’s privacy

Nuvaa is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us information, contact us and we will remove it.

09Changes to this policy

We may update this Policy as our Service evolves. We will revise the “Last updated” date and, for significant changes, notify you in-app or by email.

10Signing in with Google

You can create your account or sign in using Google. When you do, our authentication provider receives basic profile information from Google — your name, email address, profile picture and Google account identifier — which we use only to create and secure your account and to sign you in. We never receive your Google password, and we do not access your Gmail, Drive, contacts or any other Google service.

Nuvaa’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this information, use it for advertising, or share it except as described in this Policy.

11Contact us

Questions about your privacy? Email privacy@sajilo.ai or visit our Help. See also our Terms of service.

Privacy Policy