1Introduction
Welcome to Nuvira, a private messaging app made by Skysmind ("we", "us"). By creating an account or using Nuvira, you agree to these Terms of Service, this Privacy Policy and the End User License Agreement below (together, the "Terms"). Please read them carefully. If you don't agree, please don't use Nuvira.
2Your Messages & SkyCipher Encryption
Nuvira protects your conversations with SkyCipher, our end-to-end encryption framework.
- The content of your messages, photos, lists, reactions and similar chat content is encrypted on your device before it is sent, and can only be decrypted by the people in the conversation. We cannot read it.
- Your private encryption keys are created and kept on your device, protected by the Secure Enclave, and are never sent to us.
- Your public key is stored with your profile so others can start encrypted chats with you.
- To deliver messages we handle limited information that isn't message content, such as who a message is from and to, when it was sent, and its type (for example "text" or "image").
- Deleting: you can delete your side of a conversation at any time. Once both people in a chat have deleted it, the messages are permanently removed from our servers. "Delete for everyone" removes a message for both people.
3The Nuvira Trust Authority
The Nuvira Trust Authority helps keep Nuvira genuine and safe. It checks that you're using the real Nuvira app, that your account is in good standing, and that the encryption keys people chat with really belong to them.
What your device sends
- Proof that the app is genuine, made with Apple's App Attest service using a key that belongs to that install of the app. This key is not linked to your account.
- Your account sign-in, so passes are issued to you.
- The public half of your encryption keys, to create your chat certificate. The private half never leaves your device.
- Your app version, so we can let you know when an update is required.
What's stored on your device
A few signed passes (access, account status, chat certificate and request signing). Each contains your account ID, what it allows, when it was issued, when it expires and our signature. They're kept in protected storage that is locked while your device is locked and is not backed up to iCloud, and they renew automatically.
What we keep
The app install key (not linked to you), a fingerprint of your public key so the people you message can verify it, and your account status. Never your messages or private keys.
4Information We Collect
- Account information: email address, username, smID, password (handled by our authentication provider; we never see it in plain text), and your recovery PIN in hashed form.
- Profile information: username, avatar and bio. These are visible to other users.
- Presence & activity: whether you're online, and (only if you leave these on for a chat) typing indicators and read receipts. You control these per chat.
- Device & app information: device model, iOS version, app version and push notification tokens, used to run the service and deliver notifications and calls.
- Performance reports (optional): if you choose to share them, anonymous performance and crash reports from Apple, which come with a random install ID, app version and device model. You can change this choice anytime.
- Rewards information: your coins, streaks, invite codes and which accounts you've connected with through scan-to-earn.
- Subscription status: whether you have Nuvira Plus or Pro, verified with Apple. We never receive your payment details.
- Location: only when you choose to share a place or map pin in a chat, and that content is encrypted like other messages.
5How We Use Information
- To provide, secure and improve Nuvira, including sign-in, message delivery, calls, notifications, rewards and subscriptions.
- To protect users and the platform: preventing fraud, abuse, spam and unauthorized access, and enforcing these Terms.
- To provide support and send important service messages.
We do not sell your personal information, show you ads, or track you across other companies' apps and websites.
6Service Providers & Integrations
We use trusted providers to run Nuvira. They process information only to provide their service to us:
- Google Firebase: sign-in, database and push notifications.
- Cloudflare: hosting for our servers, including the Nuvira Trust Authority.
- Apple: App Attest, push notifications, calls and in-app purchases.
- DiceBear: generates avatar images from a random seed.
- Spotify & Shazam: optional music features. When you use them, those services' own terms and privacy policies apply.
7Teen Safety
- For younger users, Nuvira's Sensitive Content Guard is always on. It uses Apple's on-device analysis to blur sensitive images. Images are checked on the device and are not sent to us for this.
- Nuvira includes safety guidance and tools to block and report people.
- Nuvira Family: if Apple's Declared Age Range tells us you're under 18, you'll set up your account through the Nuvira Family Center. This all happens during sign-up. We only receive an age range from Apple, never your exact birthday.
- We have zero tolerance for the sexual exploitation of minors. Accounts involved are removed and may be reported to the appropriate authorities.
9Coins & Rewards
- Coins are earned in the app, for example through scan-to-earn, streaks and invites. They have no cash value, can't be bought, sold, transferred or exchanged for money, and are not your property.
- Rewards, amounts and requirements may change or end at any time.
- We may remove coins, streaks or rewards gained through cheating, automation, fake or duplicate accounts, or other abuse.
10Community Rules & Account Security
Keep Nuvira safe and respectful. You may not:
- Harass, threaten, bully, exploit or endanger others.
- Pressure anyone to delete their messages. This can get your account banned without warning.
- Share illegal content, or content that sexualizes minors.
- Impersonate others, create accounts to abuse the platform, or farm rewards.
- Bypass, tamper with or attack Nuvira's security, including the Trust Authority, App Attest or encryption.
- Spam, scam, or distribute malware.
You're responsible for keeping your account, device and recovery PIN secure. We may restrict, suspend or permanently terminate accounts that break these Terms.
11Your Rights
- Delete your account: permanently delete your account and associated data.
- Access & export: request a copy of your account information. Some data may be provided as a summary.
- Update: change your profile and account details anytime in the app.
- Choices: control presence and activity sharing per chat, and turn performance reports on or off.
- Depending on where you live, you may have additional rights under local privacy laws. Contact us to use them.
12Data Retention
We keep information only as long as needed to provide Nuvira and meet legal obligations. Messages are removed from our servers once everyone in the conversation has deleted them. Trust Authority passes expire on their own. When you delete your account, we delete or anonymize your information, except where we must keep it to comply with the law or protect users.
13Local Peer-to-Peer Chat
Peer-to-peer chat over Bonjour lets nearby devices on the same network talk directly with local encryption. These messages are not stored on Nuvira servers.
14Changes to These Terms
We may update these Terms to reflect new features, legal requirements or improvements. We'll update the date above, and for significant changes we'll let you know in the app. Continuing to use Nuvira after changes means you accept the updated Terms.
15Contact
For questions, support, privacy requests or to report misuse, contact us at sky@skysmindtech.com.
16End User License Agreement (EULA)
Skysmind grants you a limited, non-exclusive, non-transferable, revocable license to use Nuvira on Apple-branded devices you own or control, for personal and lawful purposes, as permitted by the Apple Media Services Terms and Conditions.
- You may not copy, modify, reverse engineer, decompile, redistribute, resell or interfere with the app or its systems, except where the law allows.
- Nuvira is provided "as is" and "as available", without warranties of uninterrupted or error-free operation, to the extent the law allows.
- To the maximum extent permitted by law, Skysmind is not liable for indirect, incidental, consequential or special damages arising from your use of Nuvira.
- You're responsible for complying with the laws that apply to you, including export laws.
About Apple
- This agreement is between you and Skysmind only, not Apple. Skysmind, not Apple, is solely responsible for Nuvira and its content.
- Apple has no obligation to provide maintenance or support for Nuvira.
- If Nuvira fails to meet any applicable warranty, you may notify Apple, and Apple will refund the purchase price (if any). To the maximum extent permitted by law, Apple has no other warranty obligation.
- Skysmind, not Apple, is responsible for addressing any claims relating to Nuvira, including product liability, legal or regulatory compliance, and consumer protection claims.
- Skysmind, not Apple, is responsible for investigating and defending any third-party claim that Nuvira infringes their intellectual property rights.
- Apple and its subsidiaries are third-party beneficiaries of this agreement and may enforce it against you.