Privacy Policy

1. Who is responsible

Nerd is operated by Prakhar Tripathi, an individual resident in Ontario, Canada ("Nerd", "we", "us" or "our"). We intend to transfer the operation of Nerd to a company we form for that purpose. When we do, that company takes our place under this document, and we will tell you.

We are responsible for your personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for residents of Quebec, the Act respecting the protection of personal information in the private sector. Our privacy officer is Prakhar Tripathi, reachable at support@asknerd.ai.

2. What we collect

Account information. When you sign in with Google we receive your Google account identifier and email address. We do not store your Google profile name or photo. We store the handle you choose, any bio you write, the date you confirmed you are 18 or older, the date you accepted these terms, and past handles you used.

Creator Content. The nerds you make, their methods, examples, tags and versions, and your choice of Private, Link or Listed. Listed and Link nerds, your handle and your bio are visible to others.

Activity in Nerd. The nerds you add, pin, rate or try, the creators you follow, and the version of each nerd you use. Who follows whom is never shown to anyone else. Public follower and user counts are shown only once they reach 10.

Memory. Short facts you tell your AI to save for a specific nerd, such as a preference, and the names of the apps you said you use with it. Memory is saved only after you say yes, each item is one short line, and it is encrypted (see section 6).

Connected AIs. When you connect an AI, we record the app's name and its sign-in details, and issue it access tokens that expire. We store tokens only in hashed form.

Reports. If you report a nerd or a creator, we store the reason and any short note you add. We do not record who sent the report.

Technical information. To keep the Service secure and running, we keep short-lived counts of requests per account and per network, using only a shortened form of your IP address, and our hosting provider records standard request logs, which can include your IP address and browser type.

3. What we do not collect

• Your chats. When your AI uses a nerd, it sends Nerd the question it is looking up so the right part of the method comes back. We use that question only to answer, and we do not log or store it. We keep only a daily count of uses.
• What you search for on the website. Searches are sent in a way that keeps them out of web addresses and logs.
• Data from your other apps. Nerd never connects to your email, calendar, files or other apps. Your AI does that work with the connectors you give it, under that provider's terms.
• Sensitive identifiers. Nerd refuses to save passwords, PINs, one-time codes, login details, API keys, recovery phrases, government identifiers, payment card or bank numbers and health records in memory.
• Advertising or analytics data. We use no advertising, analytics or tracking tools, and we do not sell, rent or trade personal information.

4. Why we use it

We use personal information only to:

• create and secure your account, keep you signed in and let you sign out everywhere;
• let your AI find, add, use and make nerds, and recall memory you asked it to keep;
• show your public creator page and the counts described above;
• enforce our Terms, check content, handle reports, and protect users and their AIs from abuse;
• prevent fraud and overload, fix problems and measure, in aggregate, how nerds are used;
• contact you about your account, security or changes to our terms; and
• meet legal obligations.

We do not use your information or your memory to train AI models, and we do not use it for advertising.

5. Consent

By creating an account you consent to the uses described here. Saving memory needs a separate yes each time. You may withdraw consent at any time by forgetting memory, signing out everywhere (which disconnects every AI) or deleting your account, although some features will then stop working.

6. How we protect it

Each account has its own encryption key for memory, protected by Google Cloud Key Management Service. Only our servers can read our database; there is no direct access from browsers or AIs. Sign-in codes and refresh tokens are stored as hashes, sessions use secure cookies, and our logs identify accounts only by a one-way code. Content is scanned for instructions aimed at AIs before it is saved.

No system is perfectly secure. If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and the regulator as the law requires.

7. Who we share it with

We share personal information only with the service providers that run the Service for us, under contracts that limit their use of it:

• Google Cloud (hosting, database, encryption keys, logging, backups and scheduling); and
• Google Firebase Authentication and Google Sign-In (signing you in).

We also share information with the AI apps you connect, limited to what they need to act for you; with others as required by law or to protect rights and safety; and with a successor company, such as the company we form to run Nerd or a buyer, which must honour this policy.

8. Where it is stored

Our servers run in the United States (Iowa), and our database and backups are stored in Google's United States multi-region. Your information may therefore be accessible to courts, law enforcement and national security authorities of the United States. We assessed this before choosing these providers, and they are bound to protect your information.

9. Cookies

We use two strictly necessary first-party cookies: one keeps you signed in for up to 7 days and one holds an unfinished sign-up for up to 15 minutes. Pages you view while signed out set no cookies. Google's sign-in window may set its own cookies, under Google's policy.

10. How long we keep it

• Account, Creator Content, activity and memory: until you delete them or your account.
• Handles: a handle you used is kept as a retired name, with no link to you, so no one else can take it later.
• Sign-in requests and codes: minutes to an hour. Refresh tokens for connected AIs: up to 30 days unless used. Request counts: a few minutes.
• Reports: as long as needed to review them and keep the Service safe.
• Request logs at our hosting provider: under its standard retention, currently about 30 days.
• Backups: deleted information can remain in point-in-time recovery for up to 7 days and in daily backups for up to 30 days, after which it is overwritten. We do not restore it except to recover the Service, and if we do, we end every session.

11. Your choices and rights

From your account page you can see and change your profile, see and forget memory one item at a time or by nerd, sign out everywhere (which also disconnects every AI), download all your data as a file, and delete your account.

You also have the right to ask what personal information we hold about you and how it is used, to correct it, to receive it in a portable format, to withdraw consent and to ask us to delete it. Write to support@asknerd.ai. We will answer within 30 days and may need to confirm your identity first.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d'accès à l'information.

12. Children

The Service is for adults 18 and older. We do not knowingly collect information from anyone younger. If you believe a minor has an account, write to us and we will delete it.

13. Changes to this policy

We will post any update here with its effective date. For material changes we will tell you in the Service or by email at least 14 days before they take effect, and where the law needs new consent we will ask for it.

14. Contact

Questions, requests or complaints: support@asknerd.ai. Privacy officer: Prakhar Tripathi, Ontario, Canada.