Privacy Policy

Last updated: 27 May 2026

Welcome to Nukio, a product of Yekta Technologies Ltd ("we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Nukio application and website (collectively, the "Service"). Please read it carefully. By using the Service you agree to the practices described here.

1. Information We Collect

1.1 Information you provide directly

• Account data — your name, email address, and password (or OAuth token) when you register.
• Profile data — a display name and any optional preferences you configure.
• Content you create — concepts, notes, and sources you import or author inside the app.
• Communications — messages you send to our support team.

1.2 Information collected automatically

• Usage data — which features you use, collections and knowledge pages you study, review sessions, streaks, and XP progress.
• Device and technical data — device model, operating system version, app version, IP address, and crash reports.
• Cookies and similar technologies — see our Cookie Policy for full details.

1.3 Information from third parties

If you sign in with Google or another OAuth provider, we receive your name, email address, and profile photo from that provider, subject to their own privacy policies.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account.
• Provide and personalise the Service — including scheduling spaced repetition reviews and generating AI-powered explanations.
• Track your learning progress and maintain streaks and XP.
• Send transactional emails (account confirmation, password reset).
• Send optional product updates and learning tips (you may opt out at any time).
• Diagnose bugs, monitor performance, and improve the Service.
• Detect and prevent fraud, abuse, and violations of our Terms of Service.
• Comply with applicable laws and legal obligations.

3. Legal Bases for Processing (EEA / UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:

• Contractual necessity — to provide the Service you signed up for.
• Legitimate interests — to improve the Service, prevent fraud, and communicate with you about product changes.
• Consent — for non-essential cookies and optional marketing communications.
• Legal obligation — where required by law.

4. Sharing Your Information

We do not sell your personal information. We share your data only in the following circumstances:

• Service providers — trusted third-party vendors who help operate the Service (e.g., cloud hosting, AI inference, analytics, payment processing). They are contractually bound to use your data only as instructed.
• Legal requirements — if required to comply with a subpoena, court order, or applicable law.
• Business transfers — if Nukio is acquired or merges with another entity, your information may be transferred as part of that transaction.
• With your consent — in any other situation where you have explicitly agreed.

5. AI Features

Nukio uses AI models to generate explanations on request ("Ask AI"). When you use this feature, the text of the knowledge page and your question may be sent to a third-party AI provider (such as Anthropic or OpenAI) to generate a response. We do not intentionally send other personal data to these providers. AI-generated responses are not stored longer than necessary to display them to you.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. You may delete your account at any time from the app settings. Upon deletion, your personal data is removed within 30 days, except where we are required to retain it by law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to erasure").
• Object to or restrict certain processing.
• Request a portable copy of your data in a structured, machine-readable format.
• Withdraw consent at any time (where processing is based on consent).
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at privacy@nukio.app. We will respond within 30 days.

8. Data Security

We implement industry-standard technical and organisational measures to protect your data — including encryption in transit (TLS), encrypted storage for sensitive fields, and access controls. No system is completely secure; in the event of a breach that affects your rights, we will notify you as required by law.

9. International Transfers

Your data may be processed in countries outside your own. Where we transfer data from the EEA or UK to countries without an adequacy decision, we rely on Standard Contractual Clauses or equivalent safeguards.

10. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with their data, please contact us at privacy@nukio.app and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date at the top and, for material changes, notify you via email or an in-app notice. Continued use of the Service after changes constitutes acceptance.

12. Contact

Questions about this Privacy Policy? Reach us at: privacy@nukio.app