Privacy Policy

This policy explains how Denema Technologies, based in United Republic of Tanzania, processes personal data when you use NuruXplore.

1. Data we collect

• Account and contact data: name, email, country, phone number, password hash, account status, preferences, and acceptance of legal terms.
• Research content: project titles, prompts, proposals, theses, sections, chat messages, research profiles, uploaded papers, datasets, references, supervisor notes, and extracted text.
• Billing data: selected plan, purchase amount, currency, credits, transaction status, Pesapal references, confirmation code, and masked payment-account details. NuruXplore does not store full card or mobile-money credentials.
• Usage and technical data: credit activity, generation status, token and model-usage metadata, feedback, error information, login/activity timestamps, IP address and browser information contained in security/session logs.
• Device storage: essential session/security cookies, an authentication token, and interface preferences such as theme. See our Cookie Notice.
• Mobile app: the Android app uses the same account and research data as the website. It keeps your sign-in token in the device's secure storage and your appearance choice on the device. It reads a file only when you choose it with the system file picker, and it saves exported documents to temporary app storage so you can share them. The app does not contain advertising, third-party analytics, tracking or crash-reporting software, and it does not use your location, contacts, camera, microphone or biometrics.

2. How and why we use data

We process data to perform our contract with you by creating your account, generating and editing research documents, maintaining project history, providing exports, allocating credits, and processing payments. We also process limited data for legitimate interests such as security, fraud prevention, troubleshooting, service measurement, and enforcing our terms. We use consent for optional research-tip emails and optional anonymized product-improvement feedback, and you can withdraw those choices in My Account.

We may process or retain information where required to comply with law, respond to lawful requests, resolve payment disputes, or establish and defend legal claims.

3. AI and academic-content processing

NuruXplore sends the instructions and relevant project context needed to fulfil an AI request to configured AI infrastructure. The system may process uploaded or generated content to extract text, build a research profile, generate drafts, edit requested sections, and maintain conversational context. Do not upload personal data about research participants unless you have a lawful basis and have removed unnecessary identifiers.

NuruXplore does not make decisions that produce legal or similarly significant effects about you. AI output is probabilistic and must be reviewed by the user. Optional feedback may be used by authorized personnel to improve NuruXplore prompts only where your account preference permits it or after content has been appropriately de-identified.

4. When data is shared

We disclose only what is reasonably necessary to service providers acting for us, including hosting and storage providers, AI-processing providers, email and support services, and Pesapal for payment processing. Providers may process data under their own legally required notices where they act independently, particularly for payment services.

We may disclose information to professional advisers, regulators, courts, law-enforcement bodies, or another company involved in a lawful merger or acquisition. We do not sell or rent personal data to advertisers.

5. Retention and deletion

We keep account and research data while your account is active. Payment, tax, fraud-prevention, audit, and security records may be retained after account deletion where the law requires or permits it.

How to delete your account

You can request deletion yourself, on the website in My Account or in the NuruXplore mobile app under Account, then Delete account. You confirm with your password. If you cannot sign in, email support@nuruxplore.com from the address on your account.

• 14-day waiting period. Your request is recorded straight away and you stay able to sign in. You can cancel it in the same place until the period ends. This protects against accidental or unauthorized deletion.
• What is permanently deleted afterwards: your name, email address, country and phone number; all projects and everything in them (sections, chat messages, version history, generation records, analysis results and their working files); uploaded papers, datasets and other files; sign-in tokens and sessions; and your communication preferences.
• What we keep: payment orders and credit transactions, because we must keep financial records. They are kept under an anonymized account labelled “Deleted user”: your payment-account details and the payment provider’s raw messages are removed, and only amounts, dates, references, and statuses remain. We also keep a record that the deletion took place.
• Backups: deleted data can remain in disaster-recovery and deployment backups for up to 30 days, after which those backups are destroyed. It is not restored or used in the meantime.
• Temporary files: exported PDF and Word files are removed within about a day of being created, and analysis working folders are removed after a short retention period, even if you never delete your account.

You can also export your data before deleting it, in My Account.

6. Your data-protection rights

Depending on applicable law, you may have rights to be informed, access data, correct inaccurate data, request deletion, restrict or object to processing, obtain portable data, withdraw consent, and complain. NuruXplore provides profile correction, preference controls, data export, and deletion requests in My Account and, for deletion, in the mobile app. We may need to verify your identity before completing a request.

7. Security

We use access controls, password hashing, encrypted HTTPS transport, authorization checks, credential separation, payment-status verification, audit records, and operational monitoring. No online system is completely secure; keep your password confidential and notify us promptly if you suspect unauthorized access.

8. International data transfers

NuruXplore is operated from Tanzania but may use infrastructure and service providers in other countries. Where required, we use contractual, organizational, or other lawful safeguards for cross-border processing. Users should ensure their own upload and research activities comply with applicable institutional and national transfer restrictions.

9. Younger users

NuruXplore is intended for university students, researchers, and other users able to enter a binding agreement. A person below the age of legal capacity in their location must use the service only with authorization from a parent, guardian, or institution where required.

10. Contact, changes, and complaints

Questions or rights requests can be sent to support@nuruxplore.com. Tanzania users may also complain to the Personal Data Protection Commission. Users elsewhere may contact their local data-protection authority.

We may update this policy when the service or law changes. Material changes will be communicated through the service or by email where appropriate, and the effective date above will be updated.