Legal

Privacy Policy

Effective date: April 1, 2026

1. Introduction

Novu, Inc. ("Novu," "we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our application and website (collectively, the "Service"). Please read this policy carefully.

2. Information We Collect

Account information

When you register, we collect your name, email address, and authentication credentials. We use Clerk for identity management; their privacy policy applies to authentication data.

Content you create

Tasks, goals, habit logs, journal entries, nutrition logs, financial transactions, and AI Coach conversations you create within the Service are stored in our database to provide the Service to you.

Usage data

We collect information about how you interact with the Service, including pages visited, features used, and time spent. This helps us improve the product.

Device and technical data

IP address, browser type, device identifiers, and crash reports to maintain security and stability.

3. How We Use Your Information

  • To provide, maintain, and improve the Service
  • To power AI Coach features using Groq's API (your data is sent to Groq solely to generate responses for you; Groq's privacy policy governs their handling)
  • To send transactional emails (account-related notifications)
  • To detect and prevent fraud or abuse
  • To comply with legal obligations

We do not sell your personal data. We do not use your content to train AI models without your explicit consent.

4. Data Sharing

We share data only as necessary:

  • Service providers: Supabase (database), Clerk (authentication), Groq (AI), Stripe (payments), Vercel (hosting). Each operates under their own privacy policy and data processing agreements with us.
  • Legal requirements: If required by law, court order, or government authority.
  • Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred. We will notify you beforehand.

5. Data Retention

We retain your data for as long as your account is active. You may delete your account at any time; we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.

6. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict processing
  • Data portability (receive your data in a machine-readable format)
  • Withdraw consent at any time

To exercise any of these rights, contact us at supportnovu@gmail.com.

7. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Children

The Service is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email or in-app notification at least 14 days before material changes take effect. Continued use of the Service after the effective date constitutes acceptance.

10. Contact

Questions about this policy? Contact us at supportnovu@gmail.com or write to:

Novu, Inc.
Privacy Team
supportnovu@gmail.com