Privacy Policy

Last updated: 12 October 2026

1. Who we are and what this covers

AzurApps FZ-LLC, Office 119, Dubai Internet City Building 1, Dubai, UAE ("we", "us") operates the Nano: AI Chatbot Assistant apps for iOS and Android and the services behind them ("Nano"). We are the controller of the personal data described here.

This policy explains what we collect when you use Nano, why, who receives it, where it is kept, and what choices you have. Contact us about privacy at dpo@azurapps.com.

2. Data we collect

2.1 Account and device

• Guest account. Nano works without registration. On first launch we create an account ID and link it to a device identifier: the app-scoped Android ID on Android, or a random installation ID kept in the Keychain on iOS. The iOS identifier can survive reinstalling the app.
• Sign-in. If you sign in with Google or Apple, we receive that provider's ID for your account and your name, plus your verified email address where the provider gives it (with Apple this may be a private relay address). We do not receive or store your password, and we do not keep the provider's tokens.
• Session. We keep a hashed session token with your account ID, device identifier, platform and app build number.
• Country. We look up your country and continent from your IP address when you make a request, using a database stored on our own servers. We keep a history of the countries your account has been used from, with first and last dates. We do not store the IP address itself in your account.
• Settings. Language, theme, favourite assistants and similar preferences.

2.2 Content you give us and content Nano generates

• Chats. Your messages, the AI's replies, chat titles, the model used, timestamps and your device's time zone.
• Conversation memory. For long chats we store an AI-written summary of the earlier conversation so the model can stay in context.
• Files. Photos, videos, audio and documents you attach, with file name, type and size. We convert photos and videos to standard formats and create previews.
• Generated media. Images, video, speech and music that Nano creates for you.
• Companions. The name, personality, appearance, avatar and gallery of AI characters you create. To stay in character, a companion remembers things you tell it about yourself, such as your interests and habits.
• Feature data. Photos and descriptions you save for the Fitting Room (your personas), and your tastes, ratings and library in Recommender.

You decide what to put into Nano. Please do not share sensitive information about yourself that you would not want processed by AI providers, and do not upload information about other people without their permission.

2.3 Data that needs your permission

We ask for each permission only when you use the feature that needs it, and you can withdraw it in your device settings.

• Camera and photo library. To take or pick photos and videos to attach, and to save media to your library.
• Microphone and speech recognition. For dictation. Speech is turned into text by your device's speech service (Apple on iOS; the recognition service on your Android device, usually Google's), which may process the audio on its servers under its own privacy policy. We receive only the resulting text.
• Location. For "nearby" search only. When you send a nearby request we take a single location reading. We send the coordinates to a geocoding service and to the AI search provider to answer that request, and keep them in server memory for up to 15 minutes. We do not save your coordinates in your account and we do not track your location in the background. The answer, which may name nearby places and addresses, is saved in your chat like any other reply.
• Notifications. If you allow notifications, we store a push token and your language. Notifications carry only identifiers, not the text of your conversation.

2.4 YouTube and web links

If you ask Nano to summarise a link, we send that link to the AI model handling your request.

2.5 Purchases

Payments are handled by Apple or Google. We never receive your card details. From the store we receive the product purchased, transaction identifiers, purchase, renewal and expiry dates, and the status of the purchase (for example renewed, cancelled or refunded). We keep a record of the charges granted to and spent by your account.

2.6 Service metrics and logs

We count activity to run and size the service: which account was active in a time window, and how many times a feature or assistant was used. These records hold identifiers, counters and timestamps. They do not contain your messages or files. Our servers also write technical logs for troubleshooting.

2.7 Analytics and attribution

We use two third-party SDKs in the apps to understand how Nano is used and how people find it:

• Google Analytics for Firebase collects an app-instance identifier, events describing what you do in the app (for example opening a screen or starting a subscription), device model, operating system, app version, language, and approximate location derived from your IP address.
• AppsFlyer measures which advertisement or link led to an install. It collects an AppsFlyer ID, your IP address, device and operating system details, install and in-app events including purchases, and your device's advertising identifier (IDFA on iOS only if you allow tracking when asked; the advertising ID on Android unless you have deleted or reset it).

We do not send the content of your chats, your files, or your precise location to these analytics services.

2.8 Support

If you write to us, we receive your contact details and whatever you include in the message.

3. Why we use your data

We do not use your chats or files to train our own AI models. We do not make decisions about you by automated means that have legal or similarly significant effects.

4. How AI providers process your content

Nano does not run AI models itself. To answer you, we send the relevant content to the provider of the model you are using. That content can include your message, earlier messages from the same chat, the conversation summary, attached files and images, and, for nearby search, your coordinates. We send a chat identifier with the request, but not your name, email address or account ID.

Most requests go through OpenRouter, a gateway that passes them to the model's vendor. Each provider handles the data under its own terms and privacy policy, and may keep it for a period for safety and abuse monitoring. We do not control how providers treat data once they have it.

5. Who receives your data

We do not sell your personal data. We share it with the following categories of recipients, only as needed for the purpose listed.

AppsFlyer may pass attribution results to the advertising networks we work with so they can measure their campaigns. Under some US state laws this can count as "sharing" personal information for cross-context advertising. Section 8 explains how to opt out.

We may also disclose data when the law requires it, to protect the rights, safety or property of our users, ourselves or others, to investigate fraud or abuse, and to a successor if our business is merged, acquired or sold. In that last case we will tell you before your data becomes subject to a different privacy policy.

6. Where your data is kept

• Application servers, databases, and your chats and files are in Germany (Hetzner).
• AI providers, analytics providers and app stores process data mainly in the United States and in other countries where they operate.

This means your data is transferred to, and stored in, countries other than your own, including countries whose data protection laws differ from those where you live. Where the law requires a safeguard for such a transfer, we rely on standard contractual clauses with the recipient.

7. How long we keep it, and deletion

• Account, chats, files and generated media are kept until you delete your account.
• "Delete" in chat history moves a chat to the archive. It does not erase the chat from our servers; you can restore it from Settings → Archive. To have chats permanently erased, delete your account.
• Sessions expire after 30 days without renewal.
• Nearby-search coordinates are held in memory for up to 15 minutes.
• Purchase and charge records are kept for as long as financial and tax law requires, even after your account is deleted.
• Backups are encrypted and may hold deleted data for up to 30 days, until they are replaced.
• Analytics data is kept by Firebase for 2 months at user level, and by AppsFlyer under its own retention policy.

To delete your account and its data, go to Settings → Delete account in the app. If you cannot use the app, write to dpo@azurapps.com and tell us which sign-in provider and email address the account uses. We erase your account, chats, files and generated media immediately, except for records we must keep by law; copies in backups are gone within 30 days. Data already sent to an AI provider is deleted on that provider's own schedule. Deleting your account does not cancel a subscription bought through the App Store or Google Play; cancel it in your store account.

Data cached on your device stays there until you remove the app. On iOS the installation ID in the Keychain may remain after uninstalling.

8. Your choices

• Don't sign in. Nano works as a guest.
• Permissions. Turn camera, photos, microphone, speech recognition, location and notifications on or off in your device settings.
• Tracking on iOS. Decline the tracking prompt, or change it later in Settings → Privacy & Security → Tracking. AppsFlyer then does not receive your IDFA.
• Advertising ID on Android. Delete or reset it in Settings → Google → Ads.
• AppsFlyer. You can ask AppsFlyer to stop measuring your device through the opt-out form on its website.
• What you share. You control what you type, upload and tell a companion.

9. Your rights

Depending on where you live, you may have the right to:

• know whether we process your data and get a copy of it;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to processing, including processing based on legitimate interest and direct marketing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting earlier processing;
• complain to your data protection authority.

To use these rights, write to dpo@azurapps.com. We may need to confirm that the request comes from the account owner. We answer within one month, or within the period your local law sets. We will not treat you worse for using your rights.

EEA, UK and Switzerland. The legal bases for our processing are in section 3.

United States. Residents of states with privacy laws (including California, Colorado, Connecticut, Texas and Virginia) have the rights above, plus the right to opt out of the "sale" or "sharing" of personal information and of targeted advertising, and the right to appeal if we refuse a request. We do not sell personal information for money. To opt out of sharing for advertising measurement, use the controls in section 8 or write to us. An authorised agent may make a request for you with your written permission. To appeal a decision, reply to our response and say you are appealing.

10. Children

Nano is not for anyone under 16, and we do not knowingly collect personal data from children under 16.

People who are 16 or older but not yet adults where they live may use Nano only with the consent of a parent or guardian, as our Terms of Use require.

If you believe someone under 16 has used Nano, or that a minor is using it without a parent's or guardian's consent, write to dpo@azurapps.com and we will delete the account and its data.

11. Security

• Data travels between the app and our servers over encrypted connections (TLS).
• Session tokens are random, and we store only their hashes on the server.
• On your device, the session token is kept in the Android Keystore-protected storage or the iOS Keychain.
• Files and chats are stored in private storage that is not publicly accessible, and each request is checked against the account that owns the data.
• Backups are encrypted.

No system is perfectly secure. If a breach affects your data, we will notify you and the authorities as the law requires.

12. Access by our staff

A small number of authorised staff can view account details, chats and files through an internal administration tool. They do so only where needed to provide support you asked for, investigate abuse or safety reports, fix faults, or meet legal obligations.

13. Changes to this policy

We will update this policy when our practices change, for example when we add a provider or a feature that uses data in a new way. We will change the date at the top and, for material changes, tell you in the app before they take effect.

14. Contact

AzurApps FZ-LLC
Office 119, Dubai Internet City Building 1, Dubai, UAE
Privacy requests: dpo@azurapps.com
Support: info@azurapps.com

Attributions

Country lookup uses IP geolocation data by DB-IP (db-ip.com), licensed under CC BY 4.0. Place data © OpenStreetMap contributors.