Privacy Policy
The operator of Nirelia (“we”) handles information in the Nirelia app (“App”) as described below.
1. Local-first design
Customer profiles, visits, notes, events, relationships, recording metadata, photos, and device settings are generally stored in SQLite or app-only storage on your device. Customer search and possible-existing-customer matching run on the device. Search terms, customer names, and note text are not sent to Analytics.
2. Recording and on-device retention
The App captures microphone audio only after you explicitly start a recording. You are responsible for any notice, consent, law, and venue rules that apply. Audio is stored on your device. You may choose retention of 7, 14, or 30 days, or unlimited retention. Unlimited audio is not automatically deleted, so you must manage storage and sensitivity.
3. AI processing
When you choose “Summarize with AI,” audio in the selected range is sent over encrypted HTTPS to our Backend. After VAD and FFmpeg processing, OpenAI is used for transcription and candidate extraction. Candidates are never added to a customer profile until you review and approve them.
Backend raw audio is deleted after successful processing or a non-recoverable failure. It may be retained temporarily for crash recovery; abandoned processing is normally cleaned up after 24 hours. Transcript checkpoints are deleted when extraction completes. Results not yet received by the device are deleted after acknowledgement or no later than 14 days. Backend logs exclude audio, transcript text, customer names, and note content.
4. Authentication and abuse prevention
Firebase Anonymous Authentication creates a random user identifier and authentication token. Firebase App Check helps verify that requests come from a genuine App instance. We use them for Backend authentication, abuse prevention, and linking verified subscription status and AI usage. We do not obtain your Apple ID or Google account password.
5. Analytics
Firebase Analytics may collect safe events such as app opens, recording start/stop, analysis start/completion, candidate decisions, result counts, and paywall views. We do not send audio, transcripts, customer names, contact details, search terms, note text, or API keys to Analytics.
6. Subscriptions and billing
Purchases are handled by Apple App Store or Google Play and subscription state is aggregated through RevenueCat. The RevenueCat App User ID is the Firebase UID. Product, entitlement, purchase, renewal, cancellation, and period information is verified by our Backend to authorize AI use and account for usage. Store providers process payment-card details; we do not receive them.
Plans are Free, Pro, Pro+, Max, and Extra 10h for paid subscribers. Eligible Pro and Pro+ users receive a 14-day Trial with a total of five AI-analysis hours; it renews automatically at the displayed price when the trial ends. Early conversion to paid access requires a deliberate price-bearing action and confirmation in the Store sheet.
7. Backups
The .nirelia files created by Backup and Transfer are not encrypted. They are sensitive files that can include customer information, photos, conversation-derived notes, recording metadata, and—if selected—audio. Save and share them only through destinations you trust.
Backups exclude Firebase UID/tokens, App Check tokens, RevenueCat identity, billing and quota state, Backend jobs, pending candidates, transient transcripts, Analytics state, and secrets.
8. Service providers
- OpenAI: AI transcription and candidate extraction
- Google Firebase: Anonymous Authentication, App Check, and Analytics
- RevenueCat: subscription-state aggregation and verification
- Apple and Google: app distribution and Store billing
- Our VPS provider: Backend and PostgreSQL hosting
Each provider also processes information under its own privacy policy.
9. Security and retention
We use encrypted transport, Backend-only secrets, access control, content-minimized logs, and time-limited transient storage. You remain responsible for data on your device and for any unencrypted backup you share with another party.
10. Requests and contact
To request access, correction, or deletion of information controlled by us where applicable, do not post your device or Firebase UID publicly; contact kt24engineer@gmail.com. You can remove on-device data by uninstalling the App after checking whether you need a backup. Cancel Store purchases in the subscription-management screen of the applicable Store.
11. Children and changes
The App is not directed to anyone who cannot legally evaluate contracts and recording consent under the laws where they live. If this Policy changes, we will update the date above and provide additional notice for material changes where appropriate.