Privacy Policy

1. What Novii does with your information, in one table

We do not sell your information. We show no ads inside Novii, and we never use your answers or results for advertising. On the website only, we use a Meta Pixel to measure our own advertising, as described in Section 4; you can opt out as described in Section 8. The mobile app contains no advertising trackers, and we do not track you across other apps.

2. How Novii works, and why that matters for your privacy

Novii asks you a fixed set of open questions. You write your answers in your own words. For each result, Novii sends your answers to an AI provider once and receives a structured result back. Four of the five results quote your own words. Novii is not a chat product; there is no ongoing conversation with an AI.

Novii is a life design and self-understanding product for adults in the United States. It is not a substitute for professional advice of any kind.

Before you sign up

You can generate your first three results before creating an account. During that phase, your answers and results are held only on your device (in the app's local storage, or in your browser's local storage on the web). Novii does not save them on our servers. Two things do leave your device during that phase:

• Your answers are sent to an AI provider to generate each result, and that provider handles them under the terms described in Section 4.
• Security signals are sent to our bot-protection provider, and content-free usage and security events may be recorded.

If you close the app or clear your browser without signing up, your answers and results are gone from Novii and we cannot recover them.

When you sign up

When you create an account, the answers and results held on your device are saved to your account on our servers. Signing up is how you tell us to keep them. From then on they stay in your account until you delete it.

The consent screen

Before your first question, you see one screen with three separate controls:

1. Acceptance of the Terms of Service and this Privacy Policy.
2. A separate consent to AI processing. This control explains that your answers will be sent to an AI provider to generate your results, and that your answers may include information about your health, relationships, habits, or other personal matters.
3. An age control where you enter your date of birth or an age range.

Each control is separate. There is no single "agree to everything" button. You can withdraw the AI-processing consent at any time in Settings. If you withdraw it, Novii stops sending your answers to AI providers. Because every result Novii produces requires that step, you will not be able to generate new results until you turn it back on. Your existing results stay in your account.

3. Information we collect, in detail

Information you give us. Your written answers. Your email address. Your sign-in credentials. Your date of birth at sign-up. Anything you send to support@novii.ai.

Information Novii creates. Your generated results. A record that you passed the age check (a yes-or-no value, a timestamp, and the policy version), never your date of birth itself. Content-free usage events. Security event records that describe behavior (how many requests, how fast) and never what you wrote.

Information collected automatically. IP address, device type, operating system, app version, and a pseudonymous analytics identifier. On the mobile app, the result of a device integrity check from Apple or Google. On the mobile app, an age signal from Apple's Declared Age Range API or Google's Play Age Signals API, used only to corroborate the age you gave.

Sensitive information. Your written answers are sensitive personal information under California law, because they can include information about your health, beliefs, or personal life. We use them only to provide the service you asked for. We do not use them to build a profile of you for any other purpose, and we do not disclose them for any other purpose. Under California law, that means the "Limit the Use of My Sensitive Personal Information" right does not require a separate link, because we already limit use to what the service needs.

4. Who receives your information

We use providers that process information for us. We name each one on our Subprocessor List, and we update that page when a provider changes. This policy describes them by category so that it stays accurate when we change a provider.

About the AI providers. Two points matter and we state them plainly.

First, the AI providers run their own automated safety systems on the text we send them. Those systems may flag content. Under their published policies, a provider may keep flagged text and the results of its safety review longer than the default period, and we cannot shorten that.

Second, the providers' retention, as stated in their own documentation on the date of this policy: by default, inputs and outputs are kept for up to 30 days and then deleted. At Anthropic, if a request is flagged by its safety systems, the inputs and outputs may be kept for up to two years and the safety classification scores for up to seven years. At OpenAI, inputs and outputs may be kept for up to 30 days for abuse monitoring. Some models require the 30-day period on every platform. We re-verify these figures on a schedule and update this section when they change.

About AI training. Novii does not train or fine-tune any AI model on your answers or your results. Our AI providers state in their commercial API terms that they do not use API content to train their models by default. We do not make promises about the providers' practices beyond what their terms state.

About analytics. Our product analytics provider never receives your written answers or your results. We name events generically (for example, "step completed"), never by what you wrote about. Session replay and automatic event capture are turned off on the screens where you write your answers and the screens that show your results.

About advertising measurement. The Novii website, and only the website, uses the Meta Pixel to measure whether our own advertising on Meta platforms led you to Novii. It records that you viewed a page or completed a step (for example, signing up or opening a store link) and, if you sign up on the website, a hashed form of your email address so Meta can match the conversion to the ad. It never receives your written answers or your results. This measurement may count as "sharing" for cross-context behavioral advertising under California law, and you can opt out: the website honors the Global Privacy Control browser signal, which turns the pixel off, or you can email support@novii.ai. The mobile app contains no advertising trackers.

When you export or share. Novii lets you export your results and share them. When you do, you choose where they go. Content you share outside Novii is outside our control.

Other disclosures. We disclose information when the law requires it, to protect the rights and safety of users and others, or as part of a merger or sale of the company, in which case this policy will continue to apply to your information until it is changed with notice. We do not sell your information. The only disclosure that may count as "sharing" for cross-context behavioral advertising is the website advertising measurement described above, which you can opt out of.

5. Automated access limits

To prevent abuse and keep our costs under control, Novii applies limits that do not look at what you write: a cap on how many results you can generate in a session and in a day, a bot check, and, on the mobile app, a device integrity check. Your IP address can trigger a repeat bot check but never blocks you on its own. If you hit a limit, you will see a plain message; nothing about you is recorded except the count.

6. How long we keep your information, and our retention policy

We keep information only as long as we need it for the purpose we collected it for, and this section states the specific periods. This is our written data retention policy.

We do not keep separate copies of your answers in our system logs. We do not keep information "just in case."

7. Deleting your account

You can delete your account from Settings in the app, or by using the account deletion page, or by emailing support@novii.ai from the address on your account.

What happens next:

1. Your account is closed immediately.
2. For 30 days, you can restore it. Nothing new is generated in that time.
3. After 30 days, your answers, results, email, and account records are permanently deleted from our active systems.
4. Backups are overwritten on their normal cycle, and no backup holds your information more than 6 months after deletion.
5. We instruct our providers to delete what they hold for you. The AI providers keep inputs and outputs only for the periods described in Section 4, which run from the date of each request, not from your deletion date; we cannot shorten those periods.

If we learn that an account belongs to someone under 18, we delete it and its information promptly, without a recovery window.

8. Your rights

We give every user the same set of rights, whatever state you live in. Some state laws grant some of these; we grant all of them to everyone.

How we verify requests. For requests made inside the app, being signed in is the verification. For requests by email, we reply to the email address on your account and may ask you to confirm through a code sent to that address. We never ask for more information than we need to match you to your account.

Authorized agents. You can have someone submit a request for you. We will ask for your written permission and may ask you to confirm the request directly.

Timing. We respond to requests within 45 days. If we need more time, we tell you within those 45 days and take up to 45 more.

Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sale and sharing: the website does not load the advertising measurement pixel for that browser. We do not sell your information, so there is nothing further to change.

9. Appeals

If we deny a request in whole or in part, you can appeal by replying to our decision or by emailing support@novii.ai with "Appeal" in the subject line. We respond to appeals within 45 days. If we deny the appeal, our response will explain why and give you a way to contact your state's attorney general. For residents of Washington, the Attorney General's consumer complaint page is at atg.wa.gov. For other states, we include the relevant contact in our response.

10. Novii is for adults

Novii is for people 18 and older in the United States. Before the first question, you enter your date of birth or an age range. If the answer is under 18, Novii stops and does not collect anything beyond a count that someone was turned away. On the mobile app, we also use Apple's and Google's age signals to corroborate what you entered, and if either says under 18, that answer controls. At sign-up we ask for your date of birth again and check it against your earlier answer.

Novii is not directed to children under 13 and we do not knowingly collect information from anyone under 13. If we learn that we have collected information from anyone under 18, we delete it promptly. If you believe a person under 18 has an account, email support@novii.ai.

11. Security and breach notification

We protect your information with encryption in transit and at rest, access controls, and short retention. No system is perfectly secure. If a security incident affects your personal information, we will notify you without unreasonable delay and in any case within 30 days of discovering it, or sooner if the law requires, and we will notify regulators where the law requires.

12. Where Novii operates

Novii is available in the United States only. We store and process information in the United States.

13. State-specific disclosures

California. Sections 1, 3, 6, and 8 are our notice at collection and our description of consumer rights under the CCPA. In the 12 months before this policy's effective date, we collected the categories of personal information in Section 1 and disclosed them to the provider categories in Section 4 for the business purposes stated there. We did not sell personal information. The website's advertising measurement (Section 4) may count as sharing, and you can opt out of it as described in Section 8. We do not use or disclose sensitive personal information for purposes beyond those the CCPA permits without a right to limit. Under California's "Shine the Light" law, we do not disclose personal information to third parties for their own direct marketing. Under CalOPPA, Novii does not track you across third-party sites for its own purposes; the website's advertising measurement provider may collect information about your visit as described in Section 4. We do not change our behavior in response to Do Not Track signals, but we honor Global Privacy Control as described in Section 8.

Oregon. You can request a list of the specific third parties, not only categories, to which we have disclosed your personal information. Our answer is the Subprocessor List, plus any specific disclosure required by law.

Minnesota. You can question the result of any profiling that produces a decision with legal or similarly significant effects. Novii makes no such decisions; your results are for your own use and Novii takes no action based on them.

Nevada. We do not sell personal information as Nevada defines it. Nevada residents can submit a request at support@novii.ai.

Washington, Nevada, and Connecticut health data. See our Consumer Health Data Privacy Policy, linked from our homepage.

14. Changes to this policy

When we make a material change, we notify you by email and in the app before it takes effect, and we update the version and date at the top. Version 4 removed the earlier section on optional AI training. Novii has never trained a model on user content, and that section described a use we never made.

15. Contact