Privacy Policy

Effective: October 7, 2026 · Last updated: October 19, 2026

The operator of Nirelia (“we”) handles information in the Nirelia app (“App”) as described below.

1. Local-first design

Customer profiles, visits, notes, events, relationships, recording metadata, photos, and device settings are generally stored in SQLite or app-only storage on your device. Customer search and possible-existing-customer matching run on the device. Search terms, customer names, and note text are not sent to Analytics.

2. Recording and on-device retention

The App captures microphone audio only after you explicitly start a recording. You are responsible for any notice, consent, law, and venue rules that apply. Audio is stored on your device. You may choose retention of 7, 14, or 30 days, or unlimited retention. Unlimited audio is not automatically deleted, so you must manage storage and sensitivity.

The audio recording sent for AI analysis may contain your voice, customers' voices, voices of other people nearby, and conversation content. Depending on what is spoken, it may contain personal information such as names or familiar names, employment or workplace information, residential area, plans, interests and preferences, information discussed during a visit, and other personal information spoken in the conversation.

3. AI processing, external data sharing, and consent

AI analysis is optional. Only audio in the range you select with “Summarize with AI” is sent over encrypted HTTPS to our Nirelia Backend. That audio is then sent through our Backend to the third-party AI service OpenAI for audio transcription and creation of customer-note candidates. The transcript generated from the audio is also sent to OpenAI to extract candidate customer information. VAD and FFmpeg may adjust the audio range sent to OpenAI. Candidates are never added to a customer profile until you review and approve them.

Before transmission, the App displays the data that will be sent, the recipient, and the purpose. No audio or transcript is sent for AI analysis until you actively select the initially unchecked consent checkbox and choose “Agree to Send Data to OpenAI and Continue.” If you do not consent, recording, on-device customer management, visit history, search, and other non-AI Free/local features remain available. You can withdraw consent in Settings > AI data sharing. After withdrawal, you must consent again before any future AI-analysis transmission. Withdrawal alone does not delete existing on-device data, recordings, or a Store subscription.

Backend raw audio is deleted after successful processing or a non-recoverable failure. It may be retained temporarily for crash recovery; abandoned processing is normally cleaned up after 24 hours. Transcript checkpoints are deleted when extraction completes. Results not yet received by the device are deleted after acknowledgement or no later than 14 days. Backend logs exclude audio, transcript text, customer names, and note content.

According to OpenAI's official API data-control documentation, API inputs and outputs are not used to train or improve OpenAI models by default unless the API customer explicitly opts in. Depending on the API endpoint and configuration, some inputs or outputs may be retained for up to 30 days for abuse monitoring or related purposes. We do not state or guarantee that Zero Data Retention is enabled for Nirelia. See the current OpenAI API Data Controls for details.

4. Authentication and abuse prevention

Firebase Anonymous Authentication creates a random user identifier and authentication token. Firebase App Check helps verify that requests come from a genuine App instance. We use them for Backend authentication, abuse prevention, and linking verified subscription status and AI usage. We do not obtain your Apple ID or Google account password.

5. Analytics

Firebase Analytics may collect safe events such as app opens, recording start/stop, analysis start/completion, candidate decisions, result counts, and paywall views. We do not send audio, transcripts, customer names, contact details, search terms, note text, or API keys to Analytics.

6. Subscriptions and billing

Purchases are handled by Apple App Store or Google Play and subscription state is aggregated through RevenueCat. The RevenueCat App User ID is the Firebase UID. Product, entitlement, purchase, renewal, cancellation, and period information is verified by our Backend to authorize AI use and account for usage. Store providers process payment-card details; we do not receive them.

Plans are Free, Pro, Pro+, Max, and Extra 10h for paid subscribers. Eligible Pro and Pro+ users receive a 14-day Trial with a total of five AI-analysis hours; it renews automatically at the displayed price when the trial ends. Early conversion to paid access requires a deliberate price-bearing action and confirmation in the Store sheet.

7. Backups

The .nirelia files created by Backup and Transfer are not encrypted. They are sensitive files that can include customer information, photos, conversation-derived notes, recording metadata, and—if selected—audio. Save and share them only through destinations you trust.

Backups exclude Firebase UID/tokens, App Check tokens, RevenueCat identity, billing and quota state, Backend jobs, pending candidates, transient transcripts, Analytics state, and secrets.

8. Service providers

We use service providers, including OpenAI, that process data only as needed for the purposes described in this Policy and under applicable contractual and technical safeguards. OpenAI describes reasonable and appropriate organizational and technical measures for protecting API customer data. Each provider's applicable agreement and privacy policy also govern its processing.

9. Security and retention

We use encrypted transport, Backend-only secrets, access control, content-minimized logs, and time-limited transient storage. You remain responsible for data on your device and for any unencrypted backup you share with another party.

10. Requests and deletion

In Settings, choose “Delete account and data” to delete the current Firebase anonymous account, Backend analysis jobs, results and temporary audio linked to that identifier, and customer, visit, recording, and audio data stored by Nirelia on the device. Store billing records that must be retained for legal or accounting reasons may be kept after removing the direct link to the deleted Firebase UID. Using online features again after deletion may create a new, empty anonymous account.

Deleting an account does not cancel an Apple App Store or Google Play subscription. Manage or cancel the subscription in the applicable Store. To request access, correction, or deletion of other information controlled by us where applicable, do not post your device or Firebase UID publicly; contact kt24engineer@gmail.com.

11. Children and changes

The App is not directed to anyone who cannot legally evaluate contracts and recording consent under the laws where they live. If this Policy changes, we will update the date above and provide additional notice for material changes where appropriate.