Knowledge
Privacy deep dive
What we collect, how NobuAI runs, isolation, sponsorship, retention, and your controls — plain language.
One human · one account · one isolated cosmos. Your reflections are not a product we resell. User-facing surfaces say NobuAI only. This page is the plain-language deep dive; the binding Privacy Policy and Terms live at /privacy · /terms.
The floor, not a feature
- We do not sell your personal data or ad profiles.
- We do not use your sittings to train third-party foundation models.
- We do not mix your cosmos with anyone else's.
- Essential session cookies only — no third-party ad trackers on the product for retargeting.
What we collect
Name, email, session cookies — to sign you in and support you.
Date, optional time, place with lat/lon when you pick from autocomplete — to map your chart.
Story, North Star, moments, Kronos & Solis chat — the product itself.
Plans, notes, optional audio — your Library.
Theme, reading balance, quiet hours, channels, devices.
Customer / subscription metadata from our payment processor — not full card numbers on our servers.
Routes, errors, rate limits — keep the service up.
Connect your life is opt-in, and each source shows exactly what leaves it before you turn it on.
How intelligence runs
Guidance is generated server-side under the NobuAI brand. Under the hood, operators may route to configured model providers. You never pick or see those provider names in the product.
Minimum necessary context
Prompts carry what is needed for the turn — not your entire life dump on every call. Secrets are redacted where implemented.
Tier gates
Sensitive features (e.g. spoken coach audio) may be limited by plan so processing stays intentional, not unbounded.
Isolation & security
- One active cosmos per person — membership uniqueness.
- TLS in transit; encryption at rest for the database volume.
- Membership checks on growth APIs — no cross-cosmos access.
- Admin ops tools are not exposed to ordinary growth users.
No system is perfectly secure. We apply industry-standard controls; the full legal disclaimer is in the Privacy Policy.
Sponsorship on Maya
On the free Maya plan, a podcast episode can carry a short sponsor read, and some Solis replies and coach plans a short line such as “Sponsored by …”. A sponsor read adds to an episode; it never takes from your listening time. On Maya, the Transmissions we deliver may carry the same short sponsor breaks. Paid plans never do.
- Not a third-party ad auction or tracker.
- Never on a paid plan.
- Can be disabled server-side by operators.
Retention, export & erase
While active
We keep what is needed to run your cosmos. Spoken clips may purge on a shorter schedule.
When you leave
Export and erase from Your data. Stored files are removed immediately; primary content removal follows the timeline in the Privacy Policy (typically within ~30 days). Encrypted database backups cycle out on a fixed schedule, up to seven years for long-term archives. Anonymized aggregates may remain for reliability metrics.
Your controls
- Export & erase — Settings → Privacy
- Quiet hours & channels — Notifications
- Connect / disconnect sources — Settings → Privacy → Devices
- Reading balance — Settings → Voice
- Sign out — Account menu
Rights requests (access, correct, delete): privacy@nobukaizen.com · binding text: Privacy Policy & Terms.
Third parties (minimum share)
- NobuAI / model routing — generate guidance (server-side).
- Our payment processor — billing for paid plans.
- Optional Google sign-in — auth only if you choose it.
- Optional email / SMS — only if you enable those channels.
Each receives only what that function requires. Status: /status.
Last updated September 15, 2026