Privacy Policy
Effective date: August 2, 2026
1. Introduction
This Privacy Policy (“Policy”) sets forth the privacy practices of NURSIFYAI LLC, a Florida limited liability company (“Nursify AI,” “we,” “us,” or “our”), with respect to the collection, use, disclosure, retention, and protection of personal information and user content in connection with the Nursify AI study platform and related services (collectively, the “Service”). This Policy is incorporated by reference into, and forms an integral part of, our Terms of Service, and any capitalized terms not defined herein shall have the meanings ascribed to them in the Terms of Service. By accessing, registering for, or otherwise using the Service, you acknowledge that you have read, understood, and consented to the practices described in this Policy, including the collection, use, disclosure, and international transfer of your information as set forth herein. If you do not agree with any provision of this Policy, you should not access or use the Service.
2. Information we collect
Account information
When you register for an account, we collect the information you provide, including your first and last name, email address, and a password. Passwords are stored exclusively as salted, one-way cryptographic hashes and are never retained, logged, or transmitted in plaintext. If you elect to authenticate using a third-party identity provider such as Google or Apple, we collect your name, email address, and the unique identifier assigned to you by that provider, together with any profile information the provider makes available to us consistent with its own terms; we do not receive or store the password associated with your third-party provider account.
User content
To provide the functionality of the Service, we collect, store, and process the content that you create, upload, record, import, or otherwise submit, including without limitation folders, decks, flashcards, notes, quizzes, lecture recordings and transcripts, mind maps, images, documents, and conversations with the AI tutor. Binary files that you upload are stored in secure cloud object storage, and text extracted or derived therefrom (including document text and lecture transcripts) is stored in our databases to enable the features you request.
Usage data
We automatically collect limited usage and telemetry information regarding your interaction with the Service, including study session events, quiz attempts, feature interactions, onboarding milestones, and associated metadata such as timestamps and session duration. This information is used to calculate your personal analytics, including streaks, activity heatmaps, and review-readiness metrics, and to evaluate and improve the performance, quality, and usability of the Service.
Payment information
When you purchase a subscription, all payment processing is performed by our third-party payment processor, Stripe, Inc., in accordance with its own privacy practices and terms of service. We do not collect, store, or have access to your full payment card number, expiration date, or card verification value. We receive and retain only such limited billing identifiers as are necessary to administer your subscription, including your customer reference, subscription identifier, plan type, status, and billing cycle dates.
Device and session information
For security and account-management purposes, we collect your Internet Protocol (IP) address and user-agent string and maintain records of the authenticated sessions established on your account, including the time and device from which each session originated. This information enables you to review and revoke active sessions from your profile page and assists us in detecting and responding to unauthorized access.
3. How we use your information
Service delivery and operation
We use your information to operate, maintain, secure, and improve the Service, including synchronizing your study materials across devices, generating flashcards, quizzes, notes, and mind maps from your uploaded sources, transcribing lecture recordings, delivering AI tutoring responses, and otherwise fulfilling the features and functions you request.
Analytics and product improvement
We use usage information, in both aggregated and per-user form, to compute analytics, identify usage trends, diagnose technical issues, and improve the functionality, content quality, and user experience of the Service.
Account administration and communications
We use your contact information to administer your account, communicate with you regarding the Service, provide security or maintenance notices, respond to your inquiries, and deliver information you have requested.
Legal, safety, and compliance purposes
We use your information to enforce our Terms of Service and other applicable policies, detect and prevent fraud, abuse, and security incidents, protect the rights and safety of our users and the public, and comply with applicable laws, regulations, and legal processes.
4. Legal bases for processing
Where applicable law, including the General Data Protection Regulation (GDPR) where it applies to you, requires a valid legal basis for processing personal information, we process such information on one or more of the following bases: (a) the performance of a contract to which you are a party, where processing is necessary to provide the Service you have requested; (b) our legitimate interests in operating, securing, and improving the Service, including fraud prevention, product development, and network and information security, provided such interests are not overridden by your fundamental rights and freedoms; (c) your consent, where we have obtained it and where such consent is required by law; and (d) compliance with our legal and regulatory obligations. Where we rely on your consent, you may withdraw your consent at any time through your account settings or by contacting us, and such withdrawal shall not affect the lawfulness of processing conducted prior to withdrawal.
5. Disclosure of your information
Service providers
We disclose personal information and user content to third-party service providers that perform services on our behalf, including providers of artificial intelligence model inference and generation, audio transcription, cloud hosting and storage, and payment processing. Such providers are authorized to process your information only to the extent necessary to render the services to us and are subject to applicable data protection and confidentiality obligations.
Corporate transactions
In the event of a merger, acquisition, reorganization, divestiture, bankruptcy, or sale of all or a portion of our assets, your information may be transferred to a successor or acquirer as part of such transaction, subject to the continuation of the protections set forth in this Policy.
Legal compliance and safety
We may disclose your information where we are required to do so by law, regulation, legal process, subpoena, or governmental request, or where we reasonably believe that such disclosure is necessary to protect the rights, property, or personal safety of Nursify AI, our users, or the public, or to prevent or investigate suspected illegal activity.
No sale of personal information
We do not sell, rent, lease, or otherwise trade your personal information or user content to any third party, and we do not use your content to serve you advertising. We do not engage in the sale of personal information or in behaviorally targeted advertising based on your personal information.
6. AI processing of your content
To deliver the generative and analytical features of the Service, portions of your content, including extracted document text, lecture transcripts, and relevant portions of your tutoring conversations, may be transmitted to and processed by third-party artificial intelligence providers. Such processing occurs solely for the purpose of generating the output you request, including flashcards, quiz questions, notes, mind maps, transcriptions, and tutoring responses. We do not use your content to train or fine-tune any general-purpose artificial intelligence model, and we do not disclose your content to any third party except as necessary to provide the features you request or as otherwise described in this Policy. Third-party providers are instructed to process such content solely on our behalf and to retain it only as required to provide the service to us.
7. Data retention
User content
Your user content remains associated with your account until you delete it or close your account. When you delete content through the Service, we endeavor to remove the relevant records from our active systems in a timely manner, subject to reasonable backup, archival, security, fraud-prevention, and legal retention periods, after which such information will be deleted or anonymized.
Authentication sessions
Records of authenticated sessions are retained for a period of thirty (30) days from their creation, after which they expire automatically. You may revoke any active session at any time from your profile page.
Verification codes
One-time verification and password-reset codes are stored in hashed form and expire ten (10) minutes after issuance.
Usage telemetry
We retain usage telemetry for as long as is reasonably necessary to provide analytics and to improve the Service, after which such information is deleted or aggregated in a manner that no longer identifies you.
8. Data security
We employ reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, alteration, disclosure, or destruction, including encryption of data in transit using HTTPS/TLS, salted one-way password hashing, token-based authenticated sessions, and access controls that restrict access to personal information on a need-to-know basis. Notwithstanding these measures, no method of electronic transmission or storage is completely secure, and we cannot guarantee the absolute security of your information. You are responsible for safeguarding your password and for the confidentiality of your account credentials.
9. Your rights and choices
Depending on your jurisdiction, you may have certain rights with respect to your personal information, including the right to access, correct, or delete personal information we hold about you; the right to request a copy of or transfer (port) certain information to another service; the right to object to or restrict certain processing; and the right to lodge a complaint with a supervisory authority. To exercise any of these rights, you may contact us at [email protected]. We will respond to verifiable requests within the timeframes required by applicable law and may request information reasonably necessary to verify your identity before processing your request. We will not discriminate against you for exercising any of your rights under applicable law.
10. Children's privacy
The Service is not directed to, and we do not knowingly collect personal information from, individuals under the age of 13. If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information, please contact us at [email protected], and we will take reasonable steps to delete such information from our systems.
11. International data transfers
Your information may be processed and stored in the United States and in other countries where we or our service providers maintain facilities or operations. Where required by applicable law, we take steps designed to ensure that personal information transferred across national borders receives an adequate level of protection, including through appropriate contractual mechanisms and safeguards.
12. Changes to this policy
We may update this Policy from time to time to reflect changes in our practices, technology, or legal obligations. If we make material changes, we will provide notice through the Service or by email to the address associated with your account before such changes take effect, and the effective date at the top of this page will be revised accordingly. Your continued use of the Service after the effective date of any revised Policy constitutes your acceptance of the changes.
13. Contact us
If you have questions, concerns, or requests regarding this Policy or our privacy practices, or if you wish to exercise any of your rights, you may contact us at [email protected]. Our registered office is located at 2125 Biscayne Blvd, Ste 204 #23187, Miami, FL 33137.