Knowledge
Privacy deep dive
What we collect, how NobuAI runs, isolation, sponsorship, retention, and your controls — plain language.
One human · one account · one isolated cosmos. Your reflections are not a product we resell. User-facing surfaces say NobuAI only. This page is the plain-language deep dive; the binding Privacy Policy and Terms live at /privacy · /terms.
The floor, not a feature
- We do not sell your personal data or ad profiles.
- We do not use your sittings to train third-party foundation models.
- We do not mix your cosmos with anyone else's.
- Essential session cookies only — no third-party ad trackers on the product for retargeting.
What we collect
Name, email, session cookies — to sign you in and support you.
Date, optional time, place with lat/lon when you pick from autocomplete — to map your chart.
Story, North Star, moments, Kronos & Solis chat — the product itself.
Plans, notes, optional audio — your Library.
Theme, reading balance, quiet hours, channels, devices.
Customer / subscription metadata from our payment processor — not full card numbers on our servers.
Routes, errors, rate limits — keep the service up.
Connect your life is opt-in; patterns-only paths stay on-device where promised.
How intelligence runs
Guidance is generated server-side under the NobuAI brand. Under the hood, operators may route to configured model providers. You never pick or see those provider names in the product.
Minimum necessary context
Prompts carry what is needed for the turn — not your entire life dump on every call. Secrets are redacted where implemented.
Tier gates
Sensitive features (e.g. spoken coach audio) may be limited by plan so processing stays intentional, not unbounded.
Isolation & security
- One active cosmos per person — membership uniqueness.
- TLS in transit; encryption at rest for the database volume.
- Membership checks on growth APIs — no cross-cosmos access.
- Admin ops tools are not exposed to ordinary growth users.
No system is perfectly secure. We apply industry-standard controls; the full legal disclaimer is in the Privacy Policy.
First-party sponsorship on Echo
On the Echo entry plan, some Solis replies and coach plans may include a short first-party line such as “Sponsored by …”, configured by operators (name + start / end / both).
- Not a third-party ad auction or tracker.
- Not shown on any plan above Echo.
- Can be disabled server-side by operators.
Retention, export & erase
While active
We keep what is needed to run your cosmos. Spoken clips may purge on a shorter schedule.
When you leave
Export and erase from Your data. Stored files are removed immediately; primary content removal follows the timeline in the Privacy Policy (typically within ~30 days). Encrypted database backups cycle out on a fixed schedule, up to seven years for long-term archives. Anonymized aggregates may remain for reliability metrics.
Your controls
- Export & erase — Your data
- Quiet hours & channels — Notifications
- Connect / disconnect sources — Devices
- Reading balance — Profile
- Sign out — Account menu
Rights requests (access, correct, delete): privacy@nobukaizen.com · binding text: Privacy Policy & Terms.
Third parties (minimum share)
- NobuAI / model routing — generate guidance (server-side).
- Our payment processor — billing for paid plans.
- Optional Google sign-in — auth only if you choose it.
- Optional email / SMS — only if you enable those channels.
Each receives only what that function requires. Status: /status.
Last updated July 10, 2026