Legal
Privacy Policy
1. Overview
This Privacy Policy explains how personal data is handled when you use the Nimo mobile app or visit nimo.aimoxyz.xyz. Nimo is designed to keep personal affirmation content on your device. We do not require an account, operate an advertising profile or use third-party advertising SDKs.
2. Data stored locally on your device
Nimo stores app settings, saved and custom affirmations, category information, download status and similar preferences locally on your device. When you download the optional voice model, Nimo can generate affirmation audio on-device; your affirmation text is not sent to a remote text-to-speech service for this process.
Local data is under your control and is generally removed when you delete Nimo or clear its app data. Device backups operated by Apple, Google or your device provider may retain copies according to your backup settings and their privacy terms. The legal basis for local processing needed to provide requested app functions is Article 6(1)(b) GDPR.
3. Subscription and purchase data
If you view, buy or restore Nimo Premium, RevenueCat, Inc. processes purchase-related information on our behalf, such as an automatically generated app user identifier, app and device information, product and offering identifiers, transaction receipts, subscription status, country and store-related diagnostic data. RevenueCat helps validate purchases and keep your Premium access in sync.
Apple or Google processes the actual payment and may associate it with your store account. We do not receive your complete payment-card details. Processing is necessary to perform the subscription contract (Article 6(1)(b) GDPR) and to prevent fraud and maintain reliable purchase records (Article 6(1)(f) GDPR). RevenueCat’s privacy information is available at revenuecat.com/privacy. Apple’s and Google’s own privacy terms apply to their store and payment processing.
4. Voice-model download
If you choose to enable offline audio, Nimo downloads the voice-model file from infrastructure hosted by Hugging Face, Inc. The server necessarily receives technical request data such as your IP address, request time, user agent and transfer information. The file download is requested by you and is necessary to provide offline voice functionality (Article 6(1)(b) GDPR). Hugging Face’s privacy information is available at huggingface.co/privacy.
5. Shared categories and deep links
If you actively use Nimo’s sharing feature, the text and category data you select may be encoded into or transmitted through a share link and handled by the apps or people you choose. Do not share sensitive content unless you intend recipients and their service providers to receive it. Processing is initiated at your request (Article 6(1)(b) GDPR).
6. Website and communications
Our hosting provider may process server logs including IP address, browser type, requested URL, referring page and time of access to securely deliver the website, diagnose errors and prevent abuse. The legal basis is our legitimate interest in a secure and functional website (Article 6(1)(f) GDPR). We do not use advertising cookies or website analytics on this site.
If you email us, we process your email address, message and related correspondence to answer your request (Article 6(1)(b) GDPR for contract-related enquiries or Article 6(1)(f) GDPR for other communications).
7. Recipients and international transfers
We share data only as described above, with service providers acting under appropriate contractual safeguards, where required by law, or to establish, exercise or defend legal claims. RevenueCat, Apple, Google, Hugging Face and Google may process data in the United States or other countries outside the European Economic Area. Where the GDPR requires it, transfers rely on an adequacy decision such as the EU–US Data Privacy Framework or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
8. Retention
Local app data remains on your device until you delete it, clear app data or remove the app, subject to device backups. Purchase data is retained for as long as needed to provide subscription access, maintain legally required business records, resolve disputes and prevent fraud. Support emails are generally retained until the request is resolved and then for up to three years where needed to establish or defend claims. Statutory tax and commercial records may need to be retained for longer periods.
9. Your rights
Subject to the applicable conditions, you may have the right to request access, correction, deletion, restriction, data portability and objection to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting earlier processing.
To exercise your rights, email hello@aimoxyz.xyz. You also have the right to lodge a complaint with a data-protection authority. The authority responsible for Berlin is the Berliner Beauftragte für Datenschutz und Informationsfreiheit; you may also contact the authority where you live or work.
10. Children
Nimo is not directed to children under 16 and we do not knowingly collect their personal data through an account. If you believe a child has provided personal data to us, please contact us so we can review and delete it where appropriate.
11. Security
We use reasonable technical and organisational measures appropriate to the nature of the data. No system is completely secure, and you are responsible for protecting access to your device and store account.
12. Changes
We may update this Privacy Policy when Nimo, our providers or legal requirements change. The effective date above shows the latest revision. We will provide additional notice in the app where required for material changes.
13. Contact
For privacy questions or requests, contact Maximilian Fricke at hello@aimoxyz.xyz.