Nuj Privacy Policy

Version 1.5 · Effective August 12, 2026

The short version

We collect what we need to coach a student and run an account, and not much else. We don’t sell your data. We don’t do behavioral advertising. We never touch your payment information at all, because Apple and Google handle every transaction. If you want your data gone, ask and we’ll delete it.

1. Who’s asking

This policy explains how Nuj App LLC, a California limited liability company (“Nuj,” “we,” “us”), handles personal information across our apps, trynuj.com, our SMS coaching, and our emails.

If a student is under 13, our Children’s Privacy Notice governs. It’s shorter, more specific, and it wins over this document wherever the two differ. This policy and the Children’s Privacy Notice work together with our Terms of Service, which also apply to your use of the Service.

2. What we collect

When a parent signs up

• Parent: first and last name, email address, and, after purchase and only if you choose to verify it, a phone number.
• Student, entered by the parent: first and last name, email address, date of birth, and grade level.

Why the date of birth: it’s how we determine whether a parent-created student account belongs to someone under 13, and therefore whether COPPA protections kick in. Grade alone gets that wrong for the unusually young 7th grader.

When a student signs up for themselves

Direct-signup students are 9th grade or above by design. We collect first and last name and email. We don’t collect a date of birth from direct students. The grade attestation is the age signal.

From the student, once they’re using Nuj

• Assessment responses, both the 12-question intro assessment and the full 36-item screener derived from the ESQ-R
• Skill scores, skill levels, composite score, and tier band
• Activity completions, XP, time invested, and progress milestones
• Free-text reflections and personalization inputs the student types inside activities
• SMS replies to coaching prompts
• A phone number, if the student enters and verifies one themselves

Automatically

Device and app version, OS, IP address (used for security and for our consent audit log), time zone from your device, app and page usage, referral source and campaign attribution, crash and diagnostic logs, and cookies or similar storage on the web.

Before you have an account

When someone starts the intro assessment, we create a pre-account record before any account exists: the 12 responses, the resulting scores, grade, buyer type, campaign attribution, and device. It isn’t linked to a name, but it is tied to a device identifier, so we don’t call it anonymous. It’s anchored to a first-party cookie, browser storage, or app keychain entry that lasts 90 days. If you go on to create an account, we link it to you. If you don’t, it expires.

Billing

We collect no payment information whatsoever. Every Nuj subscription is purchased through the App Store or Google Play, so Apple or Google takes your payment, holds your card, and runs the billing. We never see your card number, your billing address, or your name as it appears on the card.

What we do receive from the app store is a transaction identifier, the plan you bought, your subscription status, and renewal and cancellation events. That’s what tells our systems to turn your student’s access on and keep it on. None of it identifies your payment method.

Consent records

Every time you accept our Terms, consent to something, toggle an opt-in, or text STOP, we log it: timestamp, IP address, browser or device, which version of the document you saw, and the exact wording shown to you. It’s an append-only record. It exists to protect you as much as us.

Sensitive information

Some of what a student types, like a reflection touching on stress or focus, could be considered sensitive personal information under California law. We don’t collect it to learn anything about a student’s health, we don’t analyze reflections for health signals, and we don’t use it for any purpose beyond running the coaching experience described in this policy, scoped the same way as any other assessment or reflection data. We never sell sensitive information.

3. Why we collect it

Things we do not do

• We do not sell personal information, and we don’t share it for cross-context behavioral advertising.
• We do not do behavioral advertising to students. At all. No ad targeting, no ad profiles, no third-party ad pixels tied to a student account.
• We don’t use student assessment responses or reflections to train third-party AI models.
• We don’t share student data with schools unless you explicitly ask us to.

4. The student’s words are private, including from the parent who pays

This deserves its own section because it’s the part people most need to trust.

A parent can see: assessment scores and results, skill levels, composite score, tier and XP, activities completed, time invested, and milestones. Two more things worth naming explicitly, because they aren’t obvious:

• The gap between their answers and the student’s. If a parent took the observer assessment about their child and the child later took it about themselves, we calculate and show the parent the per-skill difference.
• Support flags. If a student’s scores land in a range suggesting they’d benefit from more help than a coaching app provides, we may surface that to the parent with a suggestion to consider professional support. This is a pattern in scores, not a diagnosis.

How much detail a parent sees depends on the student’s stage: richer at middle school, activity-level at high school, narrowest at college.

A parent cannot see: the student’s free-text reflections, their SMS conversations with Nuj, or the personalization answers they type inside an activity. We don’t summarize them, quote them, or paraphrase them into a digest.

The line is simple. The work product is shared, the words are not.

The exception is a parent’s legal right to review their under-13 child’s personal information, which we can’t and won’t refuse. See the Children’s Privacy Notice.

5. Who we share it with

We share personal information with service providers who need it to make Nuj work, under written contracts that prohibit them from selling it, and from retaining, using, or disclosing it for any purpose other than the services they perform for us, and prohibit them from combining it with information from other sources except to provide services to us:

A note on the first row. Because Apple and Google are the merchant on every Nuj transaction, your payment relationship is with them directly. We aren’t handing them your billing information; you gave it to them, and they tell us only whether your subscription is active. Their handling of it is governed by their own privacy policies, not this one.

Every vendor above is necessary to operate the piece of the Service it supports; we don’t hand a vendor personal information for a purpose that isn’t integral to running Nuj. If that ever changes, and it would require sharing a child’s information for a new, non-integral purpose, we’ll get separate verifiable parental consent first, as COPPA requires.

We also disclose information when the law requires it (subpoena, court order, lawful request), to protect rights and safety, or in a merger, acquisition, or sale of assets, in which case we’ll notify you and the acquirer stays bound by this policy or gives you notice before changing it.

6. Cookies and tracking

We honor Global Privacy Control (“GPC”) signals as an opt-out of sale and sharing, as California requires. Aside from GPC, our systems do not currently respond to browser “Do Not Track” signals, and we don’t track your activity across other companies’ sites and services over time for advertising.

You can clear or block cookies in your browser. Some of Nuj won’t work if you block the essential ones.

7. Your rights

Everyone, wherever you live, can ask us to:

• See the personal information we hold about you
• Correct anything that’s wrong
• Delete your account and data
• Export your data in a portable format
• Opt out of marketing email (unsubscribe link in every one) and SMS (text STOP)

Most of this is self-serve. Export, deletion, and, for parents, review of a child’s data live in your account settings under Privacy. You shouldn’t have to email anyone. Data exports are delivered as a JSON archive within 7 days.

If you’d rather write to a human, or your request doesn’t fit the self-serve tools, email legal@trynuj.com. We’ll confirm we got it within 10 business days and respond within 45 days, or tell you why we need up to 45 more. We’ll verify who you are first, usually by confirming control of the account email.

One thing we can’t help with: billing records held by Apple or Google. Your purchase history lives in your platform account, and requests about it go to them.

If you’re in California, the CCPA/CPRA also gives you the right to know the categories and specific pieces of information we’ve collected, the sources, our purposes, and who we’ve disclosed it to; the right not to be discriminated against for exercising any of this, meaning we won’t change your price or degrade your service; and the right to opt out of sale or sharing. We use sensitive personal information only for the purposes California law permits without a separate opt-out, which for us means providing the coaching you asked for, keeping the Service secure, and having our service providers perform work for us, so a separate right to limit its use does not arise. If we ever sold or shared personal information, California law would require opt-in consent first: from the student themselves if they are 13 to 15, and from a parent or guardian if they are under 13. We do not sell or share personal information, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.

We do not sell or share personal information. We still provide a “Do Not Sell or Share My Personal Information” link, and honoring it costs you nothing since there’s nothing to stop.

If you’re in Virginia, Colorado, Connecticut, Utah, or another state with a comprehensive privacy law, you have substantially the same rights, plus, in most of those states, the right to appeal if we deny a request. To appeal, reply to our denial or email legal@trynuj.com with “Appeal” in the subject. If we deny the appeal you can complain to your state attorney general.

Authorized agents can make requests on your behalf with written permission we can verify.

8. Students and minors, specifically

Most Nuj users are minors, so a few extra commitments:

• Under 13: governed by the Children’s Privacy Notice. We collect only what’s reasonably necessary, we ask for verifiable parental consent before a child’s account becomes active, and the parent can review or delete at any time. We determine age from the date of birth a parent gives us when they create a student account.
• California SOPIPA and Illinois SOPPA: where these apply, we don’t target ads at students based on their information, don’t build non-educational profiles, and don’t sell student information.
• FERPA: Nuj is sold direct to families, not to schools, so FERPA generally doesn’t apply to us. If we ever sell into a school, we’ll operate as a school official under direct control and update this policy first.
• How scoring works. Nuj turns assessment answers into skill scores, skill levels, a composite score, and a tier band, and where a parent has also taken the observer assessment we calculate the difference between their answers and the student’s. Where a score pattern suggests a student would benefit from more help than a coaching app provides, we may surface that to their parent as a suggestion to consider professional support. These are calculations from answers the student gave us. None of them denies anyone access to anything, none produces a legal effect, and none is a diagnosis. If you’d like to understand how a particular score was reached, email legal@trynuj.com and we’ll explain it.
• California’s Age-Appropriate Design Code Act: parts of this law are being litigated and are currently enjoined, and its final scope isn’t settled. Regardless of how that litigation comes out, we already apply privacy-protective defaults to minors’ accounts, avoid manipulative design patterns, and don’t use a minor’s information in ways not needed to provide Nuj, consistent with the Act’s core intent.
• The amended federal COPPA Rule: we maintain a written information security program and a written data retention and deletion policy covering children’s personal information, we get written confirmation from vendors that they maintain reasonable security before we let them touch a child’s data, and we don’t disclose a child’s information to a third party for a purpose that isn’t integral to the Service without separate parental consent.

9. How long we keep things

This schedule is our written data retention and deletion policy: we keep personal information only as long as reasonably needed for the purpose it was collected for, then delete or de-identify it. Where we de-identify data and keep it, we maintain and use it in de-identified form only, we take reasonable measures to prevent it being re-linked to anyone, and we require anyone we give it to do the same.

10. Security

We use encryption in transit and at rest, access controls that limit staff to what their job needs, signature-verified server notifications from the app stores, and audit logging on every consent event, all under a written information security program. Because we never receive payment card data, there is no card data on our servers to protect.

No system is perfectly secure, and we won’t pretend otherwise. If a breach affects your personal information, we’ll notify you and the regulators within the timeframes California and other applicable law require.

11. Where your data lives

Nuj is operated from the United States and your information is stored and processed here.

12. Changes

If we make a material change, we’ll email you and post the new version with a new effective date before it takes effect. Every version you’ve accepted is logged. Material changes affecting under-13 data require fresh parental consent.

13. Reach us

Nuj App LLC

1484 Pollard Rd #3032, Los Gatos, CA 95032

Phone: [ADD PHONE NUMBER]

Privacy: legal@trynuj.com

Support: customersupport@trynuj.com

California residents can also contact us at legal@trynuj.com to exercise any right in Section 7. If you’re unhappy with how we handled it, you can complain to the California Privacy Protection Agency or the California Attorney General.

Nuj Privacy Policy v1.5 · Last Update: 8/12/2026