Privacy
Policy

NURIOX is a mobile application developed and operated by QVEDO spletne storitve, d.o.o. (“QVEDO”, “NURIOX”, “we”, “us” or “our”), a company registered in Slovenia. For the personal data described in this Policy, QVEDO is the data controller unless we expressly state otherwise.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you use the NURIOX iOS application, create or manage an account, use transcription, translation, AI-assistant, notes, teleprompter or compatible smart-glasses features, or contact us for support.

This Policy does not govern third-party websites, applications or services that you choose to access independently. Those third parties process data under their own privacy notices.

• We do not sell personal data or user content.
• We do not share personal data for cross-context behavioural advertising and do not use user content for advertising profiles.
• We do not use audio, transcripts, translations, notes, prompts or AI outputs to train, fine-tune, evaluate or benchmark NURIOX models.
• Audio used for live transcription is processed transiently and is not retained after the requested processing is completed.
• We collect only the data reasonably needed to authenticate users, provide requested features, operate the service, diagnose faults, protect security and respond to support requests.

3.1 Account and authentication data

To sign in, you provide an email address. We send a unique one-time authentication code to that email address. We may also process login events, authentication status and limited account settings needed to keep your account available and secure.

3.2 Audio and speech data

When you enable transcription or a speech-based translation feature, audio from the microphone is transmitted to our server environment and to a speech-processing provider acting on our instructions. The audio stream is processed in real time solely to generate text. It is not recorded, stored in a user profile, retained after processing or made available for later playback.

The generated text is returned to your iPhone and, where connected, displayed through compatible smart glasses. We may change speech-to-text providers over time to maintain quality, availability and efficient operation. Any provider handling the audio stream is required to process it only for the requested service and not to retain it or use it for model training.

3.3 Transcripts, notes and teleprompter content

Live transcripts are not saved automatically. A transcript is saved only when you deliberately select the save function. Saved transcripts and notes that you choose to store are associated with your account and stored on our servers so that they can be available through the application. You can edit or delete this content using the available app controls.

Text entered for teleprompter or note features is processed only to provide the feature you request. If you choose to save that text as a note, it is handled in the same way as other saved notes.

3.4 Translation data

Text required to perform translation is processed for the duration necessary to return the translated result. Translation history that the app allows you to keep is stored on your iPhone and can be deleted by you. NURIOX does not use translation content for model training.

3.5 AI Assistant data

The AI Assistant is optional. When you choose an available AI provider and submit a request, your prompt and any context you deliberately include are transmitted to that selected provider so it can generate a response. At present, ChatGPT is available as an AI-provider option. The list of supported providers may change.

NURIOX does not use AI prompts or responses to train NURIOX models. We require providers acting on our behalf not to use NURIOX user content for model training unless you separately and expressly opt in with that provider. The selected provider may process data under its own privacy terms, which should be reviewed before use. You should not submit information that you are not authorised to disclose.

3.6 Analytics and crash diagnostics

We collect limited application analytics and crash diagnostics to understand whether features operate correctly, investigate errors and improve stability. Depending on the diagnostic tool configured in the app, this may include the app version, iOS version, device model, language setting, feature events, event timestamps, performance measurements, error codes, crash stack information and a limited technical identifier used to distinguish app installations or sessions.

We do not intentionally include raw audio, transcript content, translation content, saved notes or AI prompts in analytics or crash reports. We do not use advertising identifiers or analytics data to track you across apps or websites owned by other companies.

3.7 Support communications

When you contact us, we process your email address, the content of your request and any files or technical information you choose to provide so that we can respond, investigate the issue and maintain a record of the support interaction.

3.8 Network information

NURIOX does not use IP addresses as an account identifier and does not retain them for advertising or profiling. Internet infrastructure, hosting and security providers may process network addresses transiently as necessary to route, deliver and protect communications.

• Directly from you, when you enter your email address, save a transcript or note, submit an AI prompt, configure a feature or contact support.
• Automatically from the app, when it generates limited operational analytics, performance information or crash diagnostics.
• Through device permissions that you approve, such as microphone access and Bluetooth access for compatible smart-glasses connectivity.
• From service providers acting on our instructions, such as authentication, hosting, speech-processing, AI, analytics and crash-reporting providers.

• To create, authenticate and secure your NURIOX account.
• To provide real-time transcription, translation, AI assistance, notes, teleprompter and compatible smart-glasses features.
• To store and synchronise content that you deliberately choose to save.
• To diagnose errors, investigate crashes, measure service reliability and improve performance.
• To respond to questions, account-deletion requests and support communications.
• To prevent abuse, unauthorised access, fraud and security incidents.
• To comply with applicable law, enforce our terms and establish, exercise or defend legal claims.
• To analyse aggregated or de-identified operational trends that do not include user content.

Where the General Data Protection Regulation (“GDPR”) applies, we rely on the following legal bases, depending on the processing activity:

Your speech, saved transcripts, notes, translations or AI prompts may contain sensitive or special-category personal data that you choose to provide. NURIOX does not intentionally infer or classify sensitive characteristics from this content. Where special-category processing requires explicit consent or another additional legal condition, we rely on that condition before or at the time the relevant feature is used.

We disclose personal data only as necessary to provide and protect NURIOX, comply with law or follow your instructions. Recipient categories may include:

• Cloud hosting and infrastructure providers that operate application servers and storage.
• Email and authentication providers that deliver one-time login codes.
• Speech-to-text and translation providers that process audio or text transiently to return requested results.
• AI providers selected by the user for the optional AI Assistant.
• Analytics and crash-reporting providers that help diagnose faults and measure reliability.
• Security, customer-support, professional-adviser and business-operations providers.
• Courts, regulators, law-enforcement bodies or other authorities when disclosure is legally required.
• A successor organisation in connection with a merger, acquisition, financing, reorganisation or transfer of assets, subject to appropriate confidentiality and data-protection safeguards.

Service providers acting for NURIOX are permitted to process data only for the services they provide to us, under contractual and confidentiality obligations. We require them to apply protection that is consistent with this Policy and applicable law. Because our speech and AI architecture is vendor-neutral, individual providers may change. You may request the current provider and subprocessor list by contacting support@nuriox.com.

We do not sell personal data. We do not disclose user content for advertising, data-broker or cross-context behavioural advertising purposes.

Backup copies may remain for a limited period under security and disaster-recovery procedures. Backups are not used for ordinary processing and are overwritten or deleted according to the applicable backup cycle. We may retain limited information where required by law or necessary to establish, exercise or defend legal claims.

You can request deletion of your NURIOX account and associated personal data:

• Directly through the account-deletion function in the NURIOX app; or
• By emailing support@nuriox.com from the email address associated with the account.

We may send a one-time code or request limited additional information to verify that the request comes from the account holder. Deletion removes the account and user-saved content from active systems, except for information that must be retained temporarily for security, legal compliance, dispute resolution or limited backup cycles.

QVEDO is established in Slovenia. Some service providers may process personal data in the European Economic Area and in other countries. Where personal data is transferred outside the European Economic Area, we use a legally recognised transfer mechanism where required, such as an adequacy decision, the European Commission’s Standard Contractual Clauses or another appropriate safeguard. You may request information about applicable safeguards by contacting support@nuriox.com.

We use technical and organisational measures designed to protect personal data from unauthorised access, disclosure, alteration, loss or destruction. These measures may include secure transmission, access controls, separation of duties, monitoring, software-security practices, restricted administrative access and incident-response procedures.

No method of electronic transmission or storage is completely secure. You are responsible for protecting access to your email account, iPhone, one-time authentication codes and connected devices. Please contact us promptly if you believe your account or device has been compromised.

Subject to applicable law and relevant exceptions, you may have the right to:

• Request access to personal data we process about you.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of personal data.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests.
• Receive certain data in a structured, commonly used and machine-readable format and request portability where applicable.
• Withdraw consent at any time where processing is based on consent, without affecting processing that occurred before withdrawal.
• Lodge a complaint with a competent data-protection supervisory authority.

To exercise a right, email support@nuriox.com. We may need to verify your identity before completing the request. We will respond within the period required by applicable law.

NURIOX requests access only to device capabilities needed for a feature you choose to use. Microphone permission is needed for live transcription and speech-based translation. Bluetooth or related connectivity permission may be needed to pair and communicate with compatible smart glasses. You can review or revoke device permissions in iOS Settings. Disabling a permission may prevent the corresponding feature from working.

Before sending information to an optional third-party AI provider, consider whether the information is confidential, sensitive or belongs to another person. Do not submit personal data or protected information unless you are authorised to do so. You are responsible for complying with applicable notice and consent requirements when using NURIOX to capture or transcribe speech involving other people.

AI-generated responses may be incomplete or inaccurate and should not be treated as professional, medical, legal, financial or emergency advice. This statement concerns the use of the feature and does not change the privacy commitments described in this Policy.

NURIOX is intended only for individuals who are at least 18 years old. We do not knowingly create accounts for or collect personal data directly from anyone under 18. If you believe that a person under 18 has provided personal data to NURIOX, contact support@nuriox.com so that we can investigate and take appropriate action.

NURIOX does not use personal data to make decisions that produce legal effects or similarly significant effects about users through solely automated processing. Transcription, translation and AI outputs are generated to provide user-requested communication features and are not used by NURIOX to determine eligibility, employment, credit, insurance, healthcare access or other comparable outcomes.

We may update this Policy when NURIOX features, providers, data practices or legal requirements change. We will post the updated version, revise the “Effective date” and provide additional notice where required by law. Material changes affecting optional processing may require renewed consent.