1. Who we are
Nexora AI is an independent Malaysian software business. This policy
applies to the Android application with package name
com.nexoraai.journal and its supporting cloud services.
Privacy contact: nexora8ai@gmail.com
2. Information the app handles
Account and profile information
When you sign in with Google, the app receives information needed to create and operate your account, such as your Firebase user ID, name, email address and profile image. Authentication is provided through Google Sign-In and Firebase Authentication.
Journal content and media
The app handles journal text, dates, moods, weather, places, tags, favourites, photos, videos, voice recordings, AI artwork and saved AI Memory Books that you create or select. This content is primarily kept in the app's private storage on your device.
AI feature content
When you deliberately use an AI feature, the journal text, instructions and selected images needed for that feature may be securely sent through our Cloud Run backend to the OpenAI API. Generated text or artwork is returned to the app. Content that is not selected for an AI feature is not sent to OpenAI for that feature.
Location and weather
With your permission, the app may access precise or approximate device location to help add a place or weather context to a journal entry. You can deny or withdraw location permission in Android settings.
Microphone and audio
With your permission, the app may use the microphone when you choose to record audio or use a voice-entry feature. Recording does not begin unless you start the relevant feature.
Purchases, credits and app activity
For credit purchases, Google Play Billing handles your payment method. The app and our backend receive limited purchase information such as the product ID, purchase token, order reference and purchase status so that the purchase can be verified and credits can be granted. We do not receive or store your full card, bank or e-wallet credentials.
Our cloud database stores information needed to operate the account and credit system, including credit balance, credit purchases, AI-feature usage, adjustments, account activity and related audit records.
Backups
If you export a backup ZIP, the app creates a file containing your journal data and associated media and saves it to a location you choose. If you use Google Drive backup, the backup is stored in your Google Drive private app data area. That area is controlled by your Google account and is not shown among your normal Drive files.
Security and device information
The app may process basic technical information required for sign-in, service security, fraud prevention and troubleshooting. If you enable App Lock, Android performs PIN, pattern, password, fingerprint or supported face verification. Nexora AI does not receive or store your biometric template.
3. How information is used
- To create, display, organize, search, back up and restore your journals and media.
- To provide AI writing, enhancement, artwork and AI Memory Book features you request.
- To authenticate users, maintain profiles and keep account data separated.
- To verify Google Play purchases and operate the credit ledger.
- To protect the app and cloud services, prevent abuse and troubleshoot failures.
- To comply with legal obligations and enforce our terms.
4. Service providers and data sharing
We use service providers only where needed to deliver the app. Depending on the feature you use, information may be processed by:
- Google Firebase and Google Cloud for authentication, cloud database, backend hosting and security.
- Google Play for app distribution and in-app purchase processing.
- Google Drive when you choose private cloud backup or restore.
- OpenAI when you choose an AI feature that requires model processing.
These providers process information under their own terms and privacy commitments. We may also disclose limited information when legally required, to protect users or services, or during a business transfer with appropriate notice. We do not sell personal or sensitive user data.
5. Storage, security and international processing
We use reasonable technical and organizational safeguards, including authenticated access, role-restricted administration and encrypted HTTPS connections for data sent to cloud services. No storage or transmission method is completely risk-free, so we cannot guarantee absolute security.
Cloud providers may process information in countries outside Malaysia. Their infrastructure and contractual safeguards apply to that processing.
6. Retention and deletion
Device-local journals and media remain until you delete them, clear the app's storage or uninstall the app. Backup ZIP files remain wherever you saved them until you delete them. Google Drive app-data backups remain under your Google account until replaced or deleted through the app or Google Drive settings.
Cloud account, profile, credit and usage records are kept while your account is active and as needed to operate and secure the service. When a valid account-deletion request is completed, we delete or de-identify the account and associated personal cloud data, except limited transaction, fraud-prevention, security or audit records that must be retained for legitimate legal, accounting or regulatory reasons.
Visit our account deletion page to request deletion. We may verify account ownership before acting on a request.
7. Your choices
- Control location, microphone, photos and media permissions in Android settings.
- Choose whether to use AI, Google Drive backup and local ZIP export features.
- Edit or delete journal entries and media from within the app.
- Request access, correction or deletion by contacting us.
8. Children
The app is not designed for children under 13. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and take appropriate action.
9. Changes to this policy
We may update this policy as the app, providers or legal requirements change. We will publish the revised policy here and update the effective date. Material changes may also be announced in the app where appropriate.
10. Contact
For privacy questions or requests, email nexora8ai@gmail.com. Please do not send passwords, purchase tokens or payment credentials.