# Nubi privacy

Last updated: September 21, 2026

Nubi processes account details, user-provided bot content, connection information, and technical records needed to operate and secure the service. Content comes from what you enter, upload, record, or authorize your bots to access. Nubi does not sell personal information or use Nubi content for third-party advertising.

Google sign-in provides your account identifier, name, email address, verification status, and profile picture when available. Nubi stores account records and authentication tokens to identify and sign in users. Signing in does not grant access to Gmail, Google Drive, or Google Calendar. Separately authorized connections may access mail and attachments, file content and metadata, or calendar events and attendees to carry out requested tasks. Relevant content can be retained in your Space and processed by the configured services for those tasks.

Nubi follows the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including Limited Use requirements. Google user data is not sold, used for advertising, or used to train generalized AI models. Disconnect apps in Nubi or revoke access through [Google Account permissions](https://myaccount.google.com/connections). Revoking access does not erase copies already retained in Nubi; delete that content or request account deletion. Contact support if you cannot delete an account through the app, including if you sign in with Google without a Nubi password.

Before submitting content or starting AI work, the Nubi mobile app names the configured recipients, explains the data and purpose, and asks permission. Messages, relevant history, instructions, memories, attachments, screenshots, and connected-app content may be sent to model services for responses and tasks, including scheduled tasks. Recorded audio may be sent for transcription and text for speech generation. Conversation summaries, memories, queries, and bot and Space identifiers may be sent to a configured memory service.

Supported connections include OpenAI, Anthropic, Google, OpenRouter, Vercel AI Gateway, Cursor, custom model servers, ElevenLabs, Cartesia, Fish Audio, and Supermemory. The mobile disclosure identifies the configured services. Gateways forward requests to model providers according to their routing settings and provider agreements. The mobile permission flow does not modify provider routing or promise zero retention.

Permission records include the recipient, Space, disclosure version, and time. Choose Not now to decline, or withdraw permission in Account → AI data sharing for new mobile actions. Stop existing runs and disable routines separately. Withdrawal cannot recall data already sent. Web, desktop, and self-hosted server workflows do not use this mobile permission flow.

Services we select must provide protection equal to or greater than the safeguards in our complete policy, including limited processing purposes, security, retention, and deletion protections. We review provider terms and safeguards before enabling a provider. Self-hosted operators are responsible for the services they select and their agreements. Provider terms govern processing and retention after receipt; provider policy links are available in AI data sharing and in the complete policy.

Hosted users can delete their account and associated personal Space data from Account. In self-hosted deployments, the server operator controls information sent to that deployment. For privacy requests, email [hello@madewise.ae](mailto:hello@madewise.ae).

Read the [complete privacy policy](https://nubi.ae/privacy/) for account information, other service providers, retention, deletion, security, international transfers, children, and your rights.