Privacy Policy

Last updated: 18 June 2026

NurLogic ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your data across our applications: Fokus, Rutini, Loop Player, and SpendWise.

1. Data We Collect

Account Information

When you create an account, we collect:

Username and email address
Password (stored as a bcrypt hash — we never store plain-text passwords)
Optional profile information (display name, avatar)

App Usage Data

Depending on the app, we store data you actively create:

Rutini: Habits, tasks, projects, routines, mood logs, journal entries, streak data, habit photos (optional, stored locally and backed up to cloud), mood insights and correlations, friend list and social data (optional), health metrics from Apple Health (optional, with your permission)
SpendWise: Transactions, categories, budgets, receipt photos
Fokus: Focus session history and timers
Loop Player: Saved loop presets and playback settings

This data is stored on our servers and is associated with your account. It is used solely to power app functionality — syncing across your devices, tracking progress, and providing features you've asked for.

Technical Data

We collect minimal technical data for operational purposes:

API request logs (endpoint, timestamp, status code) — for debugging and monitoring
Device type and app version — to ensure compatibility
Device push notification tokens — to deliver reminders and notifications you've enabled

2. What We Do NOT Collect

No ads, no ad trackers, no third-party analytics
No contacts, microphone access, or location data
Photos library access is used only for optional features (habit photos, avatar uploads) and only with your explicit permission
No selling of data to third parties — ever

3. How We Use Your Data

To provide and improve our apps
To sync your data across your devices
To enable cloud backup and restore (optional)
To respond to support requests
To monitor server health and fix bugs

4. Data Storage & Security

Data is stored on servers in Singapore
Passwords are hashed with bcrypt
API communication uses HTTPS/TLS encryption
JWT tokens for session management (short-lived access tokens, refresh tokens)
Regular backups with encryption at rest

5. Data Retention

Your data is retained as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days. We retain minimal technical logs for up to 90 days for security and debugging purposes.

6. Your Rights

Access: Request a copy of your data
Correction: Update your information in-app or via email
Deletion: Delete your account and all data at any time
Export: Export your data (where supported, e.g., SpendWise CSV export, Rutini JSON backup)

To exercise any of these rights, email us at hello@nurlogic.ai.

7. Third-Party Services

Our apps may use the following third-party services:

Cloudflare: DNS, CDN, and email routing
Apple App Store / Google Play: App distribution and crash reporting (if enabled)
Apple HealthKit: Optional integration for reading health metrics (steps, sleep) — data stays on your device and is only synced if you enable it

These services have their own privacy policies. We do not share personal data with them beyond what is necessary for app functionality.

8. Children's Privacy

Our apps are not directed to children under 13. We do not knowingly collect data from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via in-app notification or email. The "Last updated" date at the top of this page reflects the current version.

10. Contact

For privacy-related questions or requests:

hello@nurlogic.ai