Privacy Policy

What we store about you

• Your account: your email address and display name, and your password — stored only as a salted hash, never in readable form. If you change your email, the new address is held as pending until you confirm it.
• The language and time zone you use, so the interface, streaks and reminders follow your day.
• When you accepted the terms, and which version you accepted.
• Your learning: the missions and exercises you attempt, whether each answer was right and your scores (not the answers themselves), concept mastery, your XP and coin history, streak days, quests, badges, cosmetics, your avatar, and your progress through the guided tours.
• Your conversations with the Navigator (the AI tutor), if you use it.
• Your answers to the in-game feedback survey, if you fill it in.
• For each sign-in: when it happened, when it was last used, your browser's user-agent string, and a keyed hash of your IP address.
• Security and audit logs: records of account actions, such as sign-in attempts counted per hashed IP, email changes, account deletion, and changes an administrator makes to an account.
• If you subscribe: your plan, its status and renewal date, the billing email, and your Stripe customer and subscription identifiers. You enter card details on Stripe's own checkout page; they never reach NabuX.

IP addresses

The app itself does not store your raw IP address with your account. It stores a keyed hash of it (a fingerprint made with a secret key), used to slow down repeated sign-in attempts and to spot abuse. The rate-limit counters that carry this hash are deleted after 7 days.

The web server in front of NabuX (nginx) keeps standard access logs, and those logs do contain raw IP addresses.

If an administrator blocks an address because of abuse, that address is stored in the block list.

Who else handles your data

• OVH — hosts the server NabuX runs on, in France, together with its database and daily backups; an encrypted copy of each backup is kept in OVH object storage.
• Enkiz (RaDev) — the AI tutor provider, when the tutor is switched on. When you ask the Navigator something, it receives the text of your question and the last few turns of that conversation (up to six). When a written answer is graded or you ask for a hint, it receives your answer and the exercise text. It never receives your name or email address.
• Resend — delivers NabuX's emails: email verification, password reset, email-change notices and streak reminders. It receives your email address, your display name and the message itself.
• Stripe — processes payments, only when paid plans are switched on and only if you subscribe. It receives your email address and, if you are signed in, your NabuX account id, and handles your card details itself.
• Country.is — the first time you visit (and whenever your browser has no saved language choice), our server sends your IP address to Country.is to learn which country you are in and pick Arabic, French or English. The answer is not stored; only the language choice is saved, in a cookie on your device.

Cookies and browser storage

• nabux_session — keeps you signed in. The site needs it to work.
• nabux_lang — remembers your language.
• Your browser's local storage holds guest progress before you sign up, guided-tour state for guests, and your sound on/off setting. It stays on your device.
• NabuX uses no advertising or tracking cookies and loads no analytics scripts.

How long we keep it

Your account data stays for as long as your account exists.

A sign-in lasts at most 30 days; after that you sign in again. The record of each sign-in stays with your account until you delete it.

Email verification links expire after 24 hours and password-reset links after one hour.

The database is backed up every day, on the server and as an encrypted copy in OVH object storage. Both are deleted after 14 days.

Deleting your account

You can delete your account yourself from your profile page, after confirming your password. We then erase your email address, display name and password; delete your sign-in records, pending email links, Navigator conversations and the written answers from your feedback survey; remove your billing email; and remove your email and name from our audit logs.

Your learning statistics (XP, coins, missions, streaks, badges) stay, but only attached to an anonymous account id that no longer leads to you, so totals stay correct. The record of a past subscription (plan, status and the Stripe identifiers) stays without your email, for accounting.

Existing backups are not edited; your data disappears from them as they expire, as described above.

Deleting your account does not reach copies of Navigator questions that the tutor provider may keep on its side.

The address you used is freed, so you can register with it again later.

Your rights and choices

• Download: "Download my data" on your profile page gives you a JSON file of everything above that belongs to your account.
• Correct: you can change your email address from your profile page; for anything else you can't change yourself, write to us.
• Delete: from your profile page, at any time.
• Contact: support@nabux.org for any question about your data, or any request you can't carry out yourself.

Actual practice, not compliance badges

We don't claim formal certification under any particular data-protection framework. The description above is what the software does today, and we will update this page when that changes.