Privacy Policy

Who we are

Nuvo (“we”, “us”) is a single-user life management application. This policy explains what we collect, why, and how Google user data is handled when you connect Google Calendar. Questions: hello@nuvo.day.

Account & planning data

When you create an account we store your email and authentication credentials via our provider (Supabase Auth). Inside the app we store the planning data you create: domains, initiatives, projects, tasks, time blocks, labels, week commitments, settings, and related notes. That data is yours. It is stored in a private database with row-level security so only your signed-in account can read or write it.

Google Calendar

If you choose to connect Google Calendar, Nuvo requests these OAuth scopes:

• https://www.googleapis.com/auth/calendar — read and write calendar events so Nuvo can sync your calendars, show them on the planning surface, and write scheduled tasks back (including a dedicated “Nuvo” mirror calendar).
• https://www.googleapis.com/auth/userinfo.email — identify which Google account you connected.

We store OAuth refresh tokens in a secured vault (not in plain application tables), plus calendar list metadata and mirrored event data needed to keep your schedule in sync. Google Calendar data is used solely to provide Nuvo’s calendar sync and scheduling features to you.

Nuvo’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data. We do not use it for advertising. We do not allow humans to read it except with your consent, for security, to comply with law, or as part of providing the service you requested (e.g. support you initiate).

Microsoft 365, Apple Calendar & ICS

Optional connections work the same spirit: credentials are stored in a secured vault; event data is synced only to power your planning surface.

• Microsoft 365 — calendar read access (events appear in Nuvo; Nuvo does not write back to M365).
• Apple / iCloud Calendar — you connect with Apple ID + an app-specific password for two-way CalDAV sync.
• ICS subscriptions — read-only feeds; the feed URL is stored so we can refresh events.

Assistant & AI features

When you use Nuvo’s assistant, prompts and the planning context needed to answer (tasks, calendar snippets, project structure) may be sent to our language-model provider to generate proposals. That processing is in service of features you invoke. We do not use your Google Calendar content to train generalized AI models.

Device-local preferences

Appearance (skins / themes), some timezone preferences, and similar UI settings may be stored on your device (e.g. localStorage). They are not required for core sync.

Retention & deletion

We retain your account and planning data while your account is active. You can disconnect Google (or other calendars) in Settings at any time — that revokes further API access and we stop syncing that account. To delete your Nuvo account and associated data, email hello@nuvo.day. We will delete or anonymize personal data within a reasonable period, except where we must retain records for legal or security reasons.

Sharing

We do not sell personal data. We use infrastructure processors (hosting, auth, database, email delivery if applicable, AI inference for assistant features) solely to run Nuvo. They process data under our instructions.

Security

Access tokens and calendar credentials are stored in a vault. Application data is protected with authentication and row-level security. No method of transmission or storage is perfectly secure; we work to protect your data with industry-standard practices.

Children

Nuvo is not directed at children under 13. We do not knowingly collect personal information from children.

Changes

We may update this policy as Nuvo evolves. The “Last updated” date above will change when we do. Material changes that affect Google user data use will be called out clearly.

Contact

Privacy requests and questions: hello@nuvo.day.