Privacy Policy
NurViewer is a local-first file viewer, reader, conversion, recognition, and study application published by NURSOVA LLC ("NURSOVA", "we", "us"). This policy explains the information processed by the NurViewer apps for Windows and Android and by their account, licensing, and purchase services.
1. Local document processing
NurViewer is designed so that ordinary viewing, local search/indexing, OCR, conversion, annotation, media study, and similar file-processing workflows operate on the user's device. The NurViewer authentication and licensing service does not require document contents, filenames, local file paths, OCR text, thumbnails, annotation contents, media contents, or the local full-text index in order to provide account or licence services.
Opening a file in NurViewer is not, by itself, an upload of that file to NURSOVA. A format, operating-system component, external link, or third-party service explicitly chosen by the user may have its own behavior and terms.
If you choose Search on text you have selected, NurViewer opens your default web browser at the search engine you picked (by default Bing, Google, Baidu or Zdic, or one you added in Settings), with the selected text in the address. That text is then handled by the search engine under its own terms. Nothing is sent unless you choose Search, and NURSOVA does not receive the text.
On Android, NurViewer reads a file you choose in the system file picker, or send to it from another app, through the access Android grants for that file; it does not ask for broad access to your storage. A working copy may be kept temporarily in the app's private storage so that its viewer can read it. It stays on your device.
2. Information we process
Account and sign-in information
If you sign in with Google or Microsoft, we process the provider identity needed to create and secure your NurViewer account. Depending on what the provider supplies, this can include a provider-specific subject identifier, email address, email-verification state, and display name. We do not receive or store your Google or Microsoft account password.
Device-key sign-in and adding an email
You may choose to sign in using a Windows Hello or Android device key. The private key stays on your device, and the operating system verifies your fingerprint, face, PIN or screen-lock credential where supported. NurViewer and our servers do not receive or store your biometric data, PIN, lock pattern or private key. Our servers store the public key used to verify signatures, its identifier, platform, device label, creation time and last-use time.
You may verify and add an email through Google or Microsoft from within your current account. If the verified identity already belongs to another account, we show a merge proposal and transfer sign-in identities, device keys, purchases and related usage records only after your confirmation. Canceling does not merge accounts. Device keys do not themselves provide cross-device synchronization. Losing a device or key without another usable sign-in identity may prevent self-service recovery.
Session and security information
Our service processes session identifiers, hashed access/refresh-token values, login outcome and timestamps, and privacy-reduced network/security signals such as hashed IP-address and user-agent values. These records are used to authenticate requests, rotate sessions, investigate abuse, and protect accounts and licences.
Device, licence, and quota information
NurViewer may process a pseudonymous installation hash, platform (Windows or Android), optional device label, app version, licence/plan status, device activation state, last-seen times, and feature quota counters. Quota records can include a pseudonymous resource key used to prevent duplicate counting; they are not intended to contain the source filename or local path. On Android, the key that identifies an installation is created and kept in the Android Keystore on the device, and the licence lease and sign-in tokens are stored encrypted in the app's private storage.
Purchase and entitlement information
Windows and the independently distributed Android APK. When you purchase a paid NurViewer plan through the Nursova website and an external payment provider, we process the account and entitlement information needed to determine your NurViewer plan, such as provider/customer/transaction identifiers, plan or price identifiers, entitlement status, purchase time, and refund/revocation state. Payment-card details are handled by the payment provider and are not required by the NurViewer authentication/licensing service.
Google Play edition on Android. Paid plans in the Google Play edition are bought through Google Play Billing. Google processes the payment and handles your payment details under its own terms; we do not receive them. After a purchase, the app sends Google Play's purchase token and product identifier to our licensing service, which checks them with the Google Play Developer API and, if they are valid, records the entitlement against your NurViewer account (using an obfuscated account identifier given to Google Play), together with the product, purchase time, and purchase status.
Network use and permissions on Android
On Android, NurViewer uses the Internet for sign-in, licensing and purchase checks, and to retrieve external resources when you request them, for example pictures pasted from a web page into a reading note. Viewer pages served from the device's own address (127.0.0.1) are local traffic. Camera access is requested when you choose camera scanning; captures and document processing stay on your device. System biometric access is used for device-key sign-in without sending biometric data to us. Foreground media playback and wake-lock permissions support reading aloud and media playback in the background. If you choose to transfer learning cards to AnkiDroid, the app requests access to the local AnkiDroid collection. The Google Play edition declares Google Play billing permission. NurViewer does not request contacts, location or microphone access; access to files or folders is selected by you through Android's file picker.
Diagnostics and support
NurViewer creates privacy-reduced local diagnostic breadcrumbs with stable support references such as NV-... and, on Windows, a short record when the program closes unexpectedly. These records are stored on your device and are not uploaded to NURSOVA unless you choose to send them. After a crash the app asks once whether the record may be sent (you can answer "send this time", "always send after a crash", or "don't send"); Settings has a button to send the records now and, on Windows, a switch for automatic sending that you can turn off at any time.
What is sent is the kind of error, where in the program it happened, the type of file that was being opened (such as pdf, never its name), the faulting module and position of a crash, the program and Windows versions, and the dates of the entries. It does not include your documents, file names, account details, or passwords. The local records hold error types rather than messages or file paths, and the service removes any file paths, email addresses, and web-address details again when it receives a record. A record is sent without signing in and is not linked to your account, licence, or device; the record itself carries no IP address or account identifier. The first time a kind of failure is reported, a short notice with the start of the record is e-mailed to our support mailbox so that we can look at it promptly; the full record stays in the service. We use it only to find and fix the fault. If you prefer, you can instead copy the records from Settings and paste them into a message to support; in that case we process what you voluntarily provide for troubleshooting.
3. What we do not use your files for
- We do not sell your private document contents.
- We do not use your private document contents for behavioral advertising.
- We do not require document contents to train a NURSOVA generative model as part of the current NurViewer account/licensing service.
- We do not ask you to email passwords, OAuth tokens, payment-provider API/webhook secrets, licence tokens, or signing keys for support.
4. Why we process information
We process the information above to provide sign-in and account security, validate purchases and licences, enforce registered-device and online-concurrency limits, apply plan quotas, restore entitlements, prevent duplicate billing/usage operations, investigate service abuse, and provide requested support.
5. Service providers and disclosures
NurViewer uses service providers where necessary to operate the product. Current first-release dependencies include Cloudflare for the NurViewer authentication/licensing service and database, Google and Microsoft for sign-in, Microsoft Store for Windows distribution/updates, the external payment provider Paddle for paid checkout on Windows and in the independently distributed Android APK, and Google Play for Android distribution, updates, and in-app purchases (Google Play Billing and the Google Play Developer API). Those providers may process information under their own terms and privacy policies.
We may also disclose information when reasonably necessary to comply with law, protect users or the service, investigate fraud or abuse, or complete a corporate transaction subject to appropriate protections.
6. Retention
We retain account, licence, transaction, security, and operational records for as long as reasonably necessary to provide the product, maintain licence and purchase history, secure accounts, resolve disputes, comply with legal obligations, and prevent fraud. Different record types can have different retention periods. Failure records that you choose to send are deleted 90 days after the last report of the same failure. Expiration of a session or licence does not necessarily mean the corresponding historical record is deleted immediately.
7. Your choices and requests
You can stop using NurViewer without uploading your local files to NURSOVA. You can ask us to delete your NurViewer account and its associated records at nursova.com/nurviewer/account-deletion, which also explains what is deleted and what may be kept; the page can be used after uninstalling the app. For questions, correction requests, or account/privacy requests, contact legal@nursova.com or support@nursova.com. We may need to verify the requester before acting on an account-related request. Some transaction, fraud-prevention, tax, security, or legal records may need to be retained even after an account request.
You may also delete your account in the app after confirming the action and verifying your identity again. We revoke sign-in sessions, device authorizations and licences, and remove sign-in identities and device public keys from our servers. Purchase, refund and necessary security records may be retained as required for applicable legal obligations, disputes and abuse prevention; retained records do not authorize the deleted account to sign in or use paid features. Deletion does not automatically refund purchases or remove files, reading notes or other local material from your device. Payment providers continue to handle their own purchase and refund records under their policies.
8. Security
We use measures intended to reduce unnecessary exposure of authentication and licensing data, including hashed bearer-token storage, signed licence leases, scoped device identifiers, secret storage outside the distributed app, and privacy-reduced diagnostics. No system can guarantee absolute security, and users remain responsible for the security of their device and third-party accounts.
9. Children
NurViewer is a general-purpose productivity application and is not directed to children under 13, and on Google Play it is offered to users aged 18 and over. If you believe a child has provided personal information to us in circumstances requiring deletion, contact us using the details below.
10. Changes to this policy
We may update this policy when the product, law, or service providers change. The effective date and policy-version marker at the top identify the version published for the current product. Material changes will be reflected on the public NurViewer policy page before or when they take effect as appropriate.
11. Contact
NURSOVA LLC
30 N Gould St Ste N
Sheridan, WY 82801, USA
Product support: support@nursova.com
Security reports: security@nursova.com
Legal/privacy: legal@nursova.com