Privacy Policy

Nia is available worldwide. For India's Digital Personal Data Protection Act, 2023 ("DPDP Act") Nurdd is the Data Fiduciary and you are the Data Principal. For users in the European Economic Area, the United Kingdom and Switzerland, Nurdd is the controller under the GDPR / UK GDPR. For California residents, Nurdd is the business under the California Consumer Privacy Act as amended by the CPRA ("CCPA").

Contents

1. Who this policy covers
2. Data we collect
3. How we use it and our legal bases
4. Publicly available information
5. AI features and AI-generated content
6. Face, voice and likeness (AI twins)
7. Conversations with Nia (text and voice)
8. Who we share data with
9. Service providers (sub-processors)
10. Analytics, advertising and tracking choices
11. Messages we send you
12. YouTube API Services
13. Pulse: Google Ads and Meta Ads data
14. How long we keep data
15. International transfers
16. Security
17. Children (18+ only)
18. Your rights and how to use them
19. Extra terms for the EEA/UK and California
20. Grievance Officer and contact
21. Changes to this policy

1. Who this policy covers

• Brands: businesses, founders and teammates who use Nia to make AI ads, cast AI influencers or real creators, and run collaborations.
• Creators: people who use Nia to find collaborations, get paid and, if they choose, license an AI likeness of their face and voice.
• Visitors: people who browse our websites or contact us.
• Public creators who do not use Nia: we process limited publicly available information about public social media creators (Section 4).

2. Data we collect

a) Data you give us

b) Data collected automatically

• Identifiers: your Nia user ID, a device ID, the push notification token for your device, and IP address.
• Approximate location / country: we work out your country from your verified mobile number, your payment card's country, the country you declare, or your IP address. We use it for pricing and tax, to decide whether collaborations are available to you (India only, Section 3), and for fraud and security. We do not collect precise GPS location.
• Search history: searches you run inside Nia (for example creators, categories or products).
• Product interaction: screens viewed, buttons tapped, features used, purchases started and completed, errors. Our product analytics identifies your account by your mobile number with country code, so that support can find your account.
• Diagnostics: crash reports and performance data (device model, operating system, app version, language, time zone, memory and network state at the time of a crash).
• Advertising data (only with your consent, Section 10): app-install and in-app event data used to measure our own ads, and on iPhone the device advertising identifier (IDFA) only if you allow tracking in Apple's prompt.
• Website: cookies and similar technologies. Analytics and advertising cookies load only after you accept them in the cookie banner.

c) Data from other sources

• Accounts you connect: YouTube (read-only, Section 12), Instagram, and ad accounts in Pulse (Section 13).
• Sign-in providers: Google and Apple share your name and email (or relay email).
• Verification partners: results of identity, bank, business, liveness and face-match checks.
• Payment partner: payment status, card country, transaction references and settlement information.
• Public sources: Section 4.

3. How we use it and our legal bases

Where we rely on consent you can withdraw it at any time (Section 18); this does not affect processing already done. Your consent to this policy is separate from your acceptance of our Terms. Nurdd's own team and test accounts are excluded from business metrics.

We do not sell your personal data.

4. Publicly available information

About brands. To build a brand's "brand brain" and plans, Nia reads information the brand or others have made public: websites, public social posts and posts that tag the brand, ads in public ad libraries, public reviews and listings, news and search-trend data. We use this to understand the business, not to profile the individuals who wrote reviews or posts.

About creators, including creators who do not use Nia. We process information from public social media profiles (name or handle, profile picture, follower and engagement counts, public posts, estimated audience characteristics, sponsored posts) so brands can discover creators and creators can benchmark themselves. If you do not want your public profile shown in Nia, email support@nurdd.club and we will exclude it.

5. AI features and AI-generated content

• Your inputs. Prompts, scripts, product photos, reference images, and (for AI twin or licensed videos) likeness data are sent to the AI model providers that generate the result (Section 9). Where it explains price or quality, the app shows which AI model is used.
• AI influencers are fictional adults. Nia's AI influencers are synthetic people, always presented as adults (18+). They are not real people and do not use or endorse products personally. We refuse AI influencer designs that copy a real person or depict a minor.
• Labels. Every video or image showing an AI person carries an "AI-generated" label. Outputs made without any charge (for example free previews) also carry a "Made with Nia" mark; outputs you pay for in credits or money do not. We keep a clean master copy so marks can be updated without regenerating your content.
• Content checks. Before a paid job runs, we check the product category and script against our advertising content rules, and may refuse a job or add mandatory disclaimers (see our Terms).
• Reporting AI content. If you see Nia-made content that misuses your face, voice or brand, or is harmful, report it in the app or email support@nurdd.club with a link or copy. We review reports, can take content down and suspend the account responsible.
• Who owns outputs. As set out in our Terms, as between you and Nurdd you own the outputs made for you, subject to third-party rights and any creator likeness licence.
• Model training. Nurdd does not train its own AI models on your personal data, and does not use your face, voice, likeness or private content to train AI models. Our AI providers process your inputs only to return results to you, under business or API terms that do not allow them to use your inputs or outputs to train their models.
• Accuracy. AI output can be wrong or unexpected. Review it before you publish.

6. Face, voice and likeness (AI twins)

This applies to creators who license their likeness and to brand users or teammates who create their own AI twin.

• Consent. We create an AI twin only after you record your own photos, voice clip and a consent video, pass a liveness check and face match, and accept the likeness agreement (creators) or own-face consent (brands), in which you confirm the face is yours. A brand cannot upload someone else's face: a teammate who wants to be the face of a brand records and consents through their own invite.
• Purpose. Only to make the videos you order or, for creators, the videos you approve for a specific brand. For creators, no video is released to a brand until you approve it; your blocked categories, blocked brands and "never say" list apply; each licence is limited to the brand, product, video type and term shown (for example 30 or 90 days).
• Who receives it. Captures are stored encrypted in private storage and shared only with the AI providers that build and run your twin and with our identity-verification partner for liveness and face match. They are never made public or sold.
• Pausing and deleting. You can pause or delete your twin at any time in the app. Deletion removes the twin and your captures from our storage and asks our providers to delete their copies. Licences you already approved run to their end date, and videos already delivered under an approved licence are not recalled.
• Retention. Captures and the twin are kept only while the twin is active. The signed agreement, consent record and licence history are kept as long as needed to prove consent and resolve disputes (Section 14).
• Sensitive data. Face and voice data used for a twin may be biometric data. We process it only with your explicit consent and with the safeguards in Section 16.

7. Conversations with Nia (text and voice)

• Your messages and Nia's replies are processed by AI language and speech providers to generate answers, and kept in your conversation history so Nia can continue the conversation and remember your preferences.
• Voice. When you talk to Nia, your audio is streamed in real time to a speech AI provider and transcribed. We store the text transcript and Nia's reply; we do not keep the audio recording. Voice conversations are charged in credits by the second.
• The app asks for microphone permission only when you start a voice conversation or record a voice clip.

8. Who we share data with

• Service providers who process data on our instructions (Section 9).
• Other users: brands see the profile, rates and content a creator shares with them; creators see the brand, brief and messages of collaborations they join; teammates see their shared brand workspace.
• Platforms you connect, only as you authorise.
• Advisers, auditors, banks and authorities where required by law or court order, or to protect rights and safety.
• A buyer or successor in a merger, acquisition or sale of assets, with the same protections.

9. Service providers (sub-processors)

We use the following providers to run the Services. Each may process personal data only to provide its service to us. This list is kept current; we update it when providers change.

10. Analytics, advertising and tracking choices

• In the app, Settings → Privacy → Privacy choices lets you turn Analytics and Personalised ads on or off at any time. Essential processing (sign-in, payments, safety) is always on.
• If your verified number or device is in the EEA, the UK or Switzerland, analytics and advertising stay off until you choose.
• iPhone: we access the advertising identifier (IDFA) and share app events for ad measurement only if you allow tracking in Apple's App Tracking Transparency prompt and have Personalised ads on.
• Meta SDK: automatic app-event logging and advertiser-ID collection are off by default and switch on only when your privacy choices allow advertising.
• Website: analytics and advertising cookies load only after you accept them in the cookie banner.
• We do not show third-party ads inside Nia and do not let advertisers target you inside the app.

11. Messages we send you

• Service messages (sign-in codes, receipts and invoices, approvals, deadlines, account and security notices) are part of the Services.
• Updates, reminders and offers may be sent by push, in-app, email or WhatsApp. You can mute notifications in the app, turn off push in your phone settings, unsubscribe from emails, or opt out on WhatsApp.

12. YouTube API Services

Creators can connect a YouTube channel to Nia using Google OAuth. This is optional and started only by you. By connecting your channel you agree to the YouTube Terms of Service. Google's handling of your information is governed by the Google Privacy Policy.

Permissions you grant (all read-only): view your YouTube account (videos, playlists and activity); view YouTube Analytics reports for your channels and videos; see your personal info, including info you have made publicly available; see your primary Google Account email address; and associate you with your personal info on Google.

Data accessed: channel identity (channel ID, name, profile image, subscriber count); video and playlist metadata (titles, descriptions, thumbnails, publish dates, privacy status); YouTube Analytics metrics (views, watch time, average view duration, impressions, click-through rate, likes, comments, shares, subscriber gains and losses); aggregated audience demographics and geography; and your Google Account profile (name, primary email, profile picture).

How we use it: to verify you own or manage the channel; to show your channel, content and performance in Nia; to generate engagement and audience-quality insights for creator discovery and collaboration matching; to measure collaborations you take part in; and to share agreed performance metrics with brands only for collaborations you opt into.

Read-only. Nia cannot upload, edit, delete or publish any video, playlist, comment or channel setting on your behalf.

Storage and retention: OAuth tokens are encrypted at rest and used only to refresh the data you authorised. Channel and analytics data is cached for your dashboard and refreshed periodically, and is deleted within 30 days of you disconnecting your channel, revoking access, or deleting your Nia account. Aggregated, anonymised metrics that cannot identify you or your channel may be kept.

Sharing: YouTube data is never sold, rented or shared for advertising or profiling, and never used to develop, improve or train generalised AI or ML models. It is shared with brands only for collaborations you opt into, and is accessible to authorised Nurdd staff only for support.

Revoking access: disconnect the channel in the Nia app; revoke access at Google Account permissions; or email support@nurdd.club to request deletion of all YouTube data we hold about you.

Nia's use of information received from YouTube API Services complies with the YouTube API Services Terms of Service and the Google API Services User Data Policy, including the Limited Use requirements.

13. Pulse: Google Ads and Meta Ads data

Pulse, a product of Nurdd Solutions Private Limited, connects to the Google Ads API and the Meta Marketing API so authorised users can view, analyse and manage their own ad accounts. The same commitments apply to ad-account, analytics and store connections inside Nia when switched on.

Data accessed: ad account details, campaigns, ad groups or ad sets, ads, keywords and creatives; performance metrics (impressions, reach, clicks, spend, conversions, ROAS); billing and budget information; audience, targeting and placement data; and Page and Instagram account details linked to a connected Meta ad account.

Use: dashboards and insights; creating, editing, pausing or optimising campaigns at the user's request; and AI-assisted recommendations based on that account's performance. Data is cached only to deliver the dashboard, deleted when the account is disconnected, and never sold, shared for advertising or profiling, or used to train generalised AI or ML models. Our use of Google API data complies with the Google API Services User Data Policy, including the Limited Use requirements, and our use of Meta data complies with Meta's Platform Terms and Developer Policies.

14. How long we keep data

Anonymised, aggregated statistics that cannot identify you may be kept. Data under a legal hold (for example an investigation or dispute) is kept until the hold ends.

15. International transfers

Nurdd is based in India and our main file storage is in India. Our service providers may process data in other countries, including the United States, the European Union and Singapore. We transfer data out of India as permitted by section 16 of the DPDP Act. For users in the EEA, the UK and Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) or another lawful transfer mechanism, together with supplementary safeguards.

16. Security

We use encryption in transit and at rest for sensitive data, private storage for faces, voices and identity results, access limited to authorised staff, rate limits and monitoring. No system is perfectly secure. If a personal data breach affects you, we will tell you and the Data Protection Board of India (and, where applicable, the relevant EEA/UK authority) as the law requires.

17. Children (18+ only)

Nia is only for people aged 18 or over. We do not knowingly collect personal data from anyone under 18 and do not track or target ads at children. AI presenters are always adults, including in ads for children's products. If you believe a child has given us data, contact us and we will delete it.

18. Your rights and how to use them

Wherever you live, you can:

• Access your data: Settings → Privacy → Download my data in the app, or email us.
• Correct or update it in the app or by contacting us.
• Erase it: Settings → Privacy → Delete account in the app, or follow nurdd.club/delete-account. If you signed in with Apple, we revoke our access to your Apple ID when your account is deleted.
• Withdraw consent at any time: change Privacy choices, pause or delete your AI twin, disconnect a platform, turn off notifications.
• Nominate another person to exercise your rights in the event of your death or incapacity (DPDP Act s.14).
• Complain to our Grievance Officer (Section 20), and then, if unresolved, to the Data Protection Board of India.

Email requests to support@nurdd.club from your registered email, or include your registered mobile number. We may verify your identity before acting. We respond within the time the applicable law sets (within 30 days for GDPR requests and 45 days for CCPA requests). Some data must be kept by law (for example invoices), or while a collaboration payment is still in progress.

19. Extra terms for the EEA/UK and California

EEA, UK and Switzerland

You also have the right to restrict or object to processing (including processing based on legitimate interests and direct marketing), and to data portability. We do not make decisions that produce legal or similarly significant effects about you solely by automated means; content checks that refuse an ad can be reviewed by a person on request. You can complain to your local data protection authority. Nurdd has not appointed an EU or UK representative under Article 27 GDPR.

California (CCPA/CPRA)

• Categories collected in the last 12 months: identifiers (name, email, phone, user ID, device ID, IP); customer records; commercial information (purchases); internet and app activity (interactions, search history); approximate geolocation (country); audio and visual information (voice, photos, videos); sensitive personal information (face and voice used for AI twins, government ID and account details for KYC) used only to provide the Services; and inferences (preferences). Sources, purposes and recipients are described in Sections 2 to 9; retention in Section 14.
• We do not sell personal information. When you have Personalised ads on, app and website event data shared with Meta and Google for measuring our own ads may count as "sharing" for cross-context behavioural advertising.
• Do Not Sell or Share My Personal Information: turn off Personalised ads in Settings → Privacy → Privacy choices, reject cookies in the website banner, or email support@nurdd.club with the subject "Do not sell or share".
• We use sensitive personal information only as permitted by the CCPA, so the right to limit it does not apply.
• You may know, access, delete and correct your data, and you will not be discriminated against for exercising these rights. An authorised agent may make a request with your signed permission. We do not knowingly sell or share the data of anyone under 16.

20. Grievance Officer and contact

Grievance Officer (DPDP Act and IT Rules, 2021): Abhijeet Singh Kaushal, Founder & CEO, Nurdd Solutions Private Limited, Unitech Cyber Park, Sector 39, Gurugram, Haryana 122003, India. Email: abhijeet@nurdd.club (copy support@nurdd.club, subject "Grievance"). We acknowledge complaints within 24 hours and resolve them within 15 days, or sooner where the law requires.

Privacy questions: support@nurdd.club.

21. Changes to this policy

We will post updates here with a new "Last updated" date. For material changes we will tell you in the app or by email before they take effect and, where the law requires, ask for your consent again.