1. Who we are
Nexorium OS is a personal command system operated under the Nexorium name. Questions about this policy or your data can be sent to support@nexorium.ch.
2. Information we process
Depending on the features you use, we may process account details, authentication identifiers, workspace content, goals, tasks, calendar events, finance or health information you choose to enter, device and browser information, and basic security or diagnostic logs.
3. Connected Google Calendar data
When you connect Google Calendar, Nexorium requests permission to read events from calendars you can access. We use this information to display your schedule, detect conflicts and capacity pressure, and generate calendar guidance inside Nexorium. The current connection does not request permission to create, edit, or delete Google Calendar events.
Nexorium's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
4. Connected health data
If you explicitly connect Apple HealthKit or Android Health Connect, the Nexorium companion requests read access only to the categories you approve: steps, sleep, resting heart rate, active energy, and weight. Access can be changed or revoked at any time in Apple Health or Health Connect settings.
The companion processes raw health records locally on your device and sends Nexorium only daily summaries. Raw HealthKit and Health Connect records are not uploaded or retained by Nexorium. Background access is optional and is used only to keep approved Android daily summaries synchronized. Health data is used to display your personal wellness history and is not sold, used for advertising, or used to train advertising models.
You can remove provider-specific synced summaries from the companion or the Connected Data page without deleting records from Apple Health, Samsung Health, or Health Connect.
5. How information is used
- Provide, synchronize, secure, and improve Nexorium OS.
- Authenticate users and preserve their preferences.
- Calculate execution, capacity, and planning insights.
- Respond to support requests and investigate failures or abuse.
- Meet legal, security, and compliance obligations.
6. Storage and security
Nexorium uses service providers, including Supabase, to host application data and authentication services. Calendar access and refresh tokens are stored server-side in encrypted form and are not intentionally exposed to the browser. We use reasonable technical and organizational safeguards, but no system can guarantee absolute security.
7. Sharing and sale of data
We do not sell personal information. Information may be shared with infrastructure and service providers only as needed to operate Nexorium, when you direct us to connect a service, to protect users or the service, or when required by law. Third-party services process information under their own terms and privacy policies.
8. Retention, disconnection, and deletion
We retain information while your account or connection remains active and as reasonably needed for security, legal, backup, or operational purposes. Disconnecting a calendar stops future synchronization and removes the stored provider connection from Nexorium. Removing a connected health provider deletes that provider's synced summaries from Nexorium. You may separately revoke access in Google, Apple, or Android settings. To request account or data deletion, contact us at the address above.
9. Your choices and rights
Subject to applicable law, you may request access, correction, export, restriction, objection, or deletion of your personal information. Users in Switzerland, the EEA, or the United Kingdom may have additional rights under local data-protection law. We may need to verify your identity before completing a request.
10. International processing
Our providers may process information outside your country. Where required, appropriate contractual or legal safeguards are used for international transfers.
11. Changes
We may update this policy as Nexorium evolves. The effective date above identifies the latest version. Material changes will be communicated through an appropriate channel.