Privacy Policy

Nexbi AI, Inc. ("Nexbi AI", "we", "our", or "us") operates the Nexbi AI mobile application and web platform (collectively, the "Service"). We take the privacy of our users seriously, especially because the Service involves sensitive financial information.

This Privacy Policy describes how we collect, use, disclose, and protect information about you when you use our Service. By creating an account or using Nexbi AI, you agree to the practices described in this policy.

We collect information in three ways: information you provide to us directly, information we collect automatically, and information from third-party sources.

Information you provide directly:

• Account registration details (name, email address, password)
• Profile information (country, currency preference, language setting)
• Financial data you enter manually (income, expenses, savings goals)
• AI chat messages and voice inputs you send within the Service
• Payment information when upgrading to Pro (processed by our payment partners)
• Communications you send to our support team

Information we collect automatically:

• Device information (type, operating system, unique device identifiers)
• Usage data (features accessed, session duration, interaction patterns)
• Log data (IP address, browser type, pages viewed, error reports)
• Location data at country or region level (derived from IP address only)
• In-app analytics to improve product performance and reliability

Information from third parties:

• Authentication tokens if you sign in via Google or Apple
• Payment confirmation data from our payment processors (MTN, Orange, Visa, Mastercard)

We do not directly connect to your bank accounts, read your transaction history from financial institutions, or store your full payment card numbers. All payment processing is handled by certified third-party processors.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Personalise your AI financial guidance and savings roadmaps
• Process your subscription payments and send billing confirmations
• Respond to your questions and provide customer support
• Send you product updates, security alerts, and policy change notifications
• Monitor and analyse usage trends to improve user experience
• Detect, investigate, and prevent fraudulent or prohibited activity
• Comply with legal obligations

We use your financial data exclusively to power the AI features you request — such as categorising expenses, generating insights, and building your roadmap. We do not use your financial data for advertising, profiling for third parties, or any purpose unrelated to the Service.

We do not sell, rent, or trade your personal or financial information to any third party for advertising or marketing purposes. We may share your information only in the following limited circumstances:

• Service providers: We share data with trusted vendors who help us operate the Service (cloud hosting, payment processing, analytics), under strict confidentiality agreements.
• AI processing: Your chat messages and financial context are sent to our AI model provider to generate responses. This data is processed under data processing agreements and is not used to train third-party models.
• Legal requirements: We may disclose information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of Nexbi AI, our users, or the public.
• Business transfers: If Nexbi AI is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to equivalent privacy protections.
• With your consent: We may share information with third parties when you explicitly consent to such sharing (for example, when using a sharing feature).

We implement industry-standard security measures to protect your information against unauthorised access, alteration, disclosure, or destruction:

• All data is encrypted in transit using TLS 1.2 or higher
• Data at rest is encrypted using AES-256 encryption
• Access to user data is restricted to authorised personnel on a need-to-know basis
• We undergo regular security audits and penetration testing
• Multi-factor authentication is available for all user accounts
• We maintain an incident response plan and will notify you promptly of any breach

While we take every reasonable precaution, no system is completely secure. We encourage you to use a strong, unique password and to enable two-factor authentication on your account.

To report a security vulnerability, please contact security@nexbi.ai. We operate a responsible disclosure programme and appreciate all legitimate security reports.

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data is retained until you delete your account, plus a 90-day grace period to allow account recovery.
• Financial data you enter is retained until you delete it or your account. Free plan users retain 30 days of history; Pro plan users retain full history.
• AI chat history is retained for up to 12 months to power personalised recommendations, unless you delete it earlier.
• Billing records are retained for seven years to comply with financial regulations.
• Log data is retained for up to 90 days for security and operational purposes.

When you delete your account, we will permanently delete or anonymise your personal data within 30 days, except where we are required by law to retain it.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a machine-readable format.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Objection: Object to our processing of your data for direct marketing or legitimate interests.
• Withdraw consent: Where we rely on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at privacy@nexbi.ai or through the Settings > Privacy section of the app. We will respond within 30 days (or sooner as required by applicable law).

If you are located in the European Economic Area, UK, or California, you have additional rights under GDPR, UK GDPR, and CCPA respectively. You also have the right to lodge a complaint with your local data protection authority.

Nexbi AI operates globally. Your information may be transferred to and processed in countries other than your country of residence, including the United States and the European Union, where data protection laws may differ from those in your jurisdiction.

When we transfer data internationally, we use appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to ensure your data receives equivalent protection.

The Service is not directed to children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has provided us with personal information, please contact us at privacy@nexbi.ai and we will take steps to delete that information promptly.

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policies of any third-party sites you visit. This Policy applies solely to information collected by Nexbi AI.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (at the address associated with your account) and by posting a prominent notice in the app at least 14 days before the changes take effect.

Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy. If you do not agree with the changes, you may delete your account before they take effect.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:

• Email: privacy@nexbi.ai
• Data Protection Officer: dpo@nexbi.ai
• Mailing address: Nexbi AI, Inc., Privacy Team, [Address]

We aim to respond to all privacy-related enquiries within 5 business days.