Privacy Policy

1. Who is responsible

NuggetWolf is run by [OPERATOR NAME], [CITY, STATE], India, an individual. Under India’s Digital Personal Data Protection Act, 2023, [OPERATOR NAME] is the “data fiduciary” for the personal data described here: the person who decides why and how it is used.

2. What we collect

• Your Google account details. When you sign in with Google we receive your name, email address and profile photo, and an account ID.
• What you write and the results. Your answers to the assessments, your SWOT and 3 Lives plans, your goals, task progress and notes, your startup details and Startup Coach chats, and the AI results generated from them.
• Images. AI-generated goal images, and a photo of yourself if you choose to upload one for a goal image.
• Your work profile, if you add one. A short summary of your work taken from your LinkedIn PDF or pasted profile text, and your LinkedIn link if you give it. See “Your work profile” below.
• Usage and credit records. Your credit balance and a log of credits spent and refunded; for each AI run, the feature used, token counts and its cost to us; which Nuggets lessons and AI News stories you have read, bookmarked or rated, and how long you spent on stories; your sign-in dates; and which price plans you tapped while payments were not yet open (counts and dates only).
• Payments. Payments are handled by Razorpay. We never see or store your card, UPI or bank details. We keep only what we need to record a purchase, such as the plan, amount, date and payment reference.
• Support messages. What you send us when you contact support.

We do not collect your location, contacts or device identifiers, and we do not use analytics or advertising trackers.

3. Why we use it

• To sign you in and keep your account and results available to you.
• To run the AI features you ask for, and to show you your history and progress.
• If you agree, to tailor your assessment results to your work, and to count which organisations our users come from.
• To keep your credit balance correct, process payments and refund failed runs.
• To prevent abuse, for example rate limits on how often the AI can be called.
• To understand our AI costs and keep the service affordable.
• To answer your support requests and meet our legal obligations.

4. Your work profile (optional)

You can add a work profile on the More page by uploading the PDF that LinkedIn’s “Save to PDF” creates, or by pasting your profile text. We send it to Google Gemini once to pull out a short summary, show you that summary to check and edit, and keep only what you save: your headline, current role and company, years of experience, past roles with dates, industries, skills and a few highlights, plus your LinkedIn link if you give one. We do not keep the file or the pasted text, and we never open your LinkedIn link.

We use it only for what you tick. Each purpose has its own checkbox, and both start unticked:

• “Use to tailor my results”: a short version of the summary is sent to Google Gemini with your Self Discovery, Role Reveal, Stress Check and SWOT runs, so the questions and results fit your work.
• “Include in anonymous organisation insights”: we count how many users work at each organisation and which tools they finished. An organisation is shown by name only when at least 3 such users work there. We never show names, emails, roles or summaries.

To withdraw either consent, untick it in your work profile on the More page. To remove the profile, delete it there; it is removed at once. Results you got while it was in use keep their “In your work context” section until you delete those results or ask us to delete your data.

5. Who processes your data

We use these service providers to run NuggetWolf. They process data on our behalf and only for these purposes:

• Google Gemini API: generates AI results. What you enter for an AI run (and your photo, if you add one to a goal image) is sent to Google to produce the result.
• Firebase and Google Cloud: sign-in, database and file storage.
• Vercel: hosts the website and runs our server code.
• Upstash: a short-lived counter tied to your account ID, used for rate limiting.
• Razorpay: processes payments.
• Google reCAPTCHA: protects the support form from spam. When you open the form, Google collects information about your device and how you use the page (and may read or set its own cookies) to check that you are a person.

Some of these providers may store or process data outside India. We do not sell your personal data, and we do not share it with advertisers.

6. How long we keep it

We keep your account data and results while your account is open, so you can come back to them. Your work profile is kept until you delete it or ask us to delete your data. If you ask us to delete your data, we delete it within 30 days. Short-lived rate-limit counters expire on their own.

If you delete an assessment result in the app to take it again (Self Discovery, Role Reveal, Stress Check or a SWOT), it disappears from your account but we keep the deleted answers and result on our side, so we can answer support and billing questions about your credits. They are erased with the rest of your data when you ask us to delete it.

We may keep a limited record of payments after deletion where the law requires it, for example for tax or accounting purposes.

7. Your rights

You can:

• see and correct your data: most of it is visible in the app, and you can ask us for a summary of what we hold or to correct something;
• delete your data: send a deletion request through the support form (topic “Delete my data”) or by email to support@nuggetwolf.com. We delete your account and its data within 30 days and confirm when it is done;
• withdraw consent: untick a work-profile purpose or delete the profile on the More page, or stop using NuggetWolf and ask us to delete your data;
• nominate someone to exercise these rights for you if you die or become unable to.

To use any of these rights, email support@nuggetwolf.com from the email address on your account. We reply within 7 days.

8. Cookies and browser storage

We do not use advertising or analytics cookies. We use your browser’s storage only to make the site work:

• Firebase keeps you signed in by storing your sign-in session in your browser.
• We remember whether you chose “Unread” or “All” in the Nuggets feed, on that device only.
• For a moment, we hold small values in your browser tab, such as where to go after you sign in or a goal you are about to create, and clear them once used.

Signing in with Google may set Google’s own cookies, covered by Google’s privacy policy. The support form on our Contact page, which only signed-in users see, loads Google reCAPTCHA, which may also read or set Google cookies; Google’s Privacy Policy and Terms apply to it. reCAPTCHA is loaded when you open the support form and may stay active for the rest of that visit.

9. Security

Your data is stored with Google Cloud. Access rules limit it to your own signed-in account, and our server checks your identity on every AI request. We access account data ourselves only to run the service, fix problems or answer your requests. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.

10. Children

NuggetWolf is not meant for children under 18 without a parent’s or guardian’s consent. If you believe a child has given us data without that consent, contact us and we will delete it.

11. Grievances

For any concern about your data, contact our grievance officer, [OPERATOR NAME], at support@nuggetwolf.com. We reply within 7 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

12. Changes to this policy

We will update this page if what we collect or who processes it changes. The date at the top shows the last change. For significant changes we will tell you on the site or by email. See also our Terms.