Privacy Policy

We collect the minimum necessary to operate Nia:

• Account data — name, email address, hashed password, and plan information.
• Conversation data — messages and files you send to Nia to provide responses.
• Usage data — feature usage, session duration, and error logs to improve reliability.
• Device data — browser type, OS, and IP address for security and abuse prevention.

We do not collect sensitive personal data such as health, financial, or biometric information unless you voluntarily provide it in conversation.

Your data is used to:

• Provide, maintain, and improve the Nia service.
• Authenticate your identity and secure your account.
• Send transactional emails (receipts, security alerts, OTP codes).
• Analyze aggregate usage patterns to improve product quality.

We do not sell your personal data. We do not use your conversations to train shared AI models unless you explicitly opt in under Settings → Data Control.

Nia can remember facts you share across conversations. This memory is private to your account and is never shared with other users or used for model training without your consent.

You can view, edit, or delete all memories at any time from Settings → Personalization → Memory. You can disable memory entirely from Settings → Data Control.

We share data only with:

• Infrastructure providers — cloud hosting, CDN, and database vendors who process data on our behalf under strict DPAs.
• Payment processors — Stripe processes billing data. We never store full card numbers.
• Legal compliance — when required by law, valid legal process, or to protect the rights of our users.

A current list of our sub-processors is available on request at privacy@nia.ai.

We retain your account data for as long as your account is active plus 30 days following deletion, to allow recovery if you change your mind.

Conversation data is retained according to your plan and Settings → Data Control preferences. You can configure auto-deletion at intervals from 7 days to never.

Aggregate analytics data may be retained indefinitely in anonymized form.

Depending on your location, you may have the right to:

• Access — request a copy of all personal data we hold about you.
• Correction — update inaccurate or incomplete data.
• Deletion — request erasure of your account and personal data.
• Portability — export your data in a machine-readable format.
• Objection — opt out of certain processing activities.

To exercise any of these rights, visit Settings → Data Control or email privacy@nia.ai. We will respond within 30 days.

We use strictly necessary cookies to maintain your session and prevent CSRF attacks. We do not use third-party advertising or tracking cookies.

We use a privacy-first analytics tool (no cross-site tracking, no fingerprinting, data stored in the EU). You can opt out from Settings → Data Control.

We use industry-standard security practices including TLS encryption in transit, AES-256 encryption at rest, regular third-party penetration testing, and SOC 2 Type II compliance.

To report a security vulnerability, email security@nia.ai. We operate a responsible disclosure program.

Nia is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at privacy@nia.ai and we will delete it promptly.

Nia is operated from the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US. For EU/EEA users, we rely on Standard Contractual Clauses (SCCs) as the lawful transfer mechanism.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notice at least 14 days before they take effect. Your continued use of Nia after the effective date constitutes acceptance.

Questions or concerns? Reach our privacy team at privacy@nia.ai or write to: