Privacy & Terms
Privacy Policy
1. Introduction
Neuruz Innovations ("we", "our", or "us") operates the NEURUZ application — a communication and task management platform designed for neurodivergent and neurotypical individuals. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our application and services.
By using NEURUZ, you agree to the collection and use of information described in this policy.
2. Information We Collect
Account information:
- Name and display name
- Email address
- Password (stored securely using bcrypt hashing)
- Neurotype preferences
- Language preference
Usage data:
- Messages sent within your private space
- Tasks and to-do items you create
- Tutor relationships and interactions
- Online status and activity timestamps
Technical data:
- Session information
- Browser type and device information
- IP address (for security purposes only)
3. How We Use Your Information
- Provide, maintain, and improve the NEURUZ application
- Enable real-time messaging and task management features
- Support tutor–user communication and collaboration
- Send service-related email notifications
- Provide AI-powered assistance features (optional; off by default)
- Ensure the security and integrity of our services
4. AI Features and Third-Party AI Services
NEURUZ offers optional AI-powered features. These features are disabled by default and must be explicitly enabled by you in your account settings.
What data is sent to AI providers
- Message content — when AI mediation is enabled, messages are sent for tone-softening suggestions.
- Task descriptions — when auto-detection is enabled, messages are analysed to suggest tasks.
- No personally identifiable information (name, email, password, IP) is ever sent to AI providers.
Which providers may receive data
Data is sent only to the provider you configure in settings:
- OpenAI (GPT models) — openai.com/policies/privacy-policy
- Anthropic (Claude) — anthropic.com/legal/privacy
- Google (Gemini) — policies.google.com/privacy
Your consent and control
- On your first login, a consent modal asks for explicit permission before any AI feature can be used.
- AI features are opt-in — the consent checkbox is unchecked by default.
- If you decline, all AI features are disabled server-side. Any attempt to enable them later will re-prompt for consent.
- You can disable AI features at any time in Settings > AI Assistant.
- When AI is disabled, no data is sent to any AI provider.
- AI providers do not use your data to train their models (per their API terms of service).
- Data is not retained by AI providers beyond request processing.
5. Data Storage and Security
- Passwords are hashed using bcrypt before storage.
- All data transmission is encrypted using HTTPS/TLS.
- Session data is stored securely in Redis with expiration.
- Database access is restricted and connection-pooled.
- The application runs in isolated containerised environments.
6. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With your tutor: Messages and tasks are visible to the tutor you choose to invite.
- AI providers: Only when you have enabled optional AI features.
- Legal requirements: When required by law or to protect our rights.
7. Data Retention and Account Deletion
We retain your personal data for as long as your account is active or as needed to provide our services.
Deleting your account
You may delete your account at any time directly within the app:
- Go to Settings
- Scroll to Account
- Tap Delete Account
- Enter your password to confirm
Two-step deletion process
- Immediate (Day 0): Your account is deactivated and becomes inaccessible. Your profile, messages, and tasks stop appearing in the app. You are logged out immediately.
- Permanent (Day 30): After 30 days, all personal data (profile, messages, tasks, relationships, session logs, invites) is permanently deleted via an automated scheduled job. This action is irreversible.
A confirmation email is sent upon deactivation, including a reactivation link as a safeguard. You may reactivate within the 30-day window using that link or by attempting to log in.
Data may persist in encrypted backups for up to 90 days after permanent deletion for disaster recovery purposes, after which backups are permanently purged.
Data shared with third-party AI providers is subject to their respective retention policies (see Section 4). We do not have the technical ability to delete data from those providers on your behalf.
8. Your Rights
In accordance with applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:
- Access your personal information
- Correct inaccurate or incomplete information
- Request deletion of your personal information
- Withdraw consent for data processing
- Request a copy of your data in a portable format
9. Children's Privacy
NEURUZ is designed to be inclusive of neurodivergent individuals of various ages. For users under 13, guardian consent and oversight is required. We do not knowingly collect personal information from children under 13 without parental or guardian consent.
10. Cookies and Local Storage
We use session cookies to maintain your authenticated session, and browser local storage and service workers to enable offline functionality. These are essential for the application to function and cannot be disabled while using the service.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the application or via email. The "Last updated" date at the top of this page shows when the policy was last revised.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us: