Privacy Policy

Last updated: October 4, 2026

This Privacy Policy explains how United Dream Homes LLC ("we," "us," or "our"), which operates the NuralNest AI service, collects, uses, and protects information when you use the NuralNest AI application, website, and related services (the "Service").

1. Information we collect

Account information

When you create an account, we collect your email address, full name (if provided), and any phone number you choose to add for verification or reminders.

Content you upload to your vault

Documents, photos, audio, video, and any file you upload to your NuralNest AI vault. We refer to all of this as your "Vault Content." You decide what goes in.

Chat messages

Messages you send to the NuralNest AI AI assistant and the AI's responses, so the assistant can answer follow-up questions and remember relevant facts you have shared.

Information derived from your content

To make your Vault Content searchable and useful, the Service automatically creates derived data:

• Extracted text (from PDFs, images via OCR, audio via transcription)
• Short AI-generated summaries and titles for each document
• Numeric "embeddings" used for semantic search
• Facts you have mentioned in chat (e.g., "policy expires in May") so the assistant can remember them

Device and usage information

Standard service logs: IP address, app version, device type, timestamps of requests, and quotas (e.g., how many chats you have sent today).

Approximate location from your IP address. When you create an account and each time you sign in, we record the IP address the request came from and the approximate city, region, ZIP code, and country that IP address maps to. This location is determined by our cloud hosting provider as part of handling the request, so your IP address is not sent to any additional company for this. It is approximate, never your precise location. We use it to secure your account (for example, to spot a sign-in from somewhere unusual), to prevent abuse, and to understand in aggregate where our users are.

Apart from this, and from features you explicitly turn on (such as trip logging, below), we do not collect your location. We do not collect contact lists, or microphone audio outside of features you explicitly use.

Location (optional trip logging)

If you turn on "Log trips to saved places" in Settings, NuralNest reads your location on your device while you are using the app, and only to compare it with places you saved so it can suggest a mileage entry. Saved places and their coordinates stay on your phone; only the suggested trip (place names, miles, purpose, date) is sent to your Nest's books, and only after you keep it. Other members of your Nest never see your location. The feature is off by default and you can turn it off at any time.

You can also save a place by typing its address instead of standing in it. As you type, suggestions come from Photon, a free open-source search service over OpenStreetMap data operated by komoot. What is sent to it is the text you type, plus your country as a two-letter code so the results are local — that country comes from your device's time zone setting (and the region you can set in Settings), never from your location. The place you choose is then resolved into a pin by your phone's own map service — Apple's on iPhone, Google's on Android — and each of these handles what it receives under its own privacy terms. NuralNest never receives the address or the coordinates; both stay on your phone with your other saved places. If the suggestion service is unavailable, typing the full address still works.

2. How we use information

To provide the Service:

• Store your Vault Content so you can access it from your devices
• Process your AI chats and produce responses
• Extract, classify, summarize, and embed your documents so search and Q&A work
• Send notifications you have asked for (reminders, suggestions)
• Authenticate you, protect your account (including noticing sign-ins from an unusual location), prevent abuse, and operate the Service securely

What we do NOT do with your information:

• We do not sell or rent your personal information.
• We do not use your Vault Content or chat messages to train AI models, ours or anyone else's.
• We do not show advertising in NuralNest AI, and we do not share data with ad networks.
• Our team does not browse your Vault Content. Internal analytics are limited to log data (request counts, error rates) and never contain document text or chat content.

3. Who we share information with

Service providers (subprocessors)

We use a small number of third-party services to run NuralNest AI. Each is bound by a written agreement that restricts use of your data to providing service to us.

• Amazon Web Services (AWS) — hosting, storage (Amazon S3), authentication (Amazon Cognito), AI inference (Amazon Bedrock, including foundation models from Anthropic and Amazon), text extraction (Amazon Textract), audio transcription (Amazon Transcribe), and key management (AWS KMS). All NuralNest AI data is stored in AWS data centers in the United States.
• Stripe — payment processing and subscription billing. If you subscribe, Stripe receives your payment details and billing contact information (we never store full card numbers) and acts as merchant of record for web payments, including applicable taxes.
• Apple and Google — optional "Sign in with Apple" and "Sign in with Google," and, where offered, in-app purchase billing through the App Store or Google Play. They receive only what is needed to authenticate you or process a purchase.
• Tavily — web search, used only when the assistant needs current information to answer you. It receives the search query for that request (limited to the public topic of your question) and never your documents or personal identifiers.
• WeatherAPI — used only when you ask about the weather. It receives your approximate location for that request.
• Expo — delivery of push notifications to your device, which Expo passes to Apple (iPhone) or Google (Android) for the final step. For each notification it receives your device push token and the short notification text: the name of the person involved (for example, who shared something with you or replied) or the email address of someone you sent a share link to, the title of a shared document or a document request, the email domain of a sender waiting for your approval, or a product you are watching for a price drop. Notifications never include the details of a medical document — when one is involved, the notification only says, for example, “2 documents”. They never include your documents themselves or the content of messages. Expo states that it does not store notification content and handles it only for as long as it takes to deliver it. You can turn notifications off at any time in your phone’s settings.

As the Service grows, we may add or change subprocessors; any material change will be reflected in an updated version of this policy, and we use only providers bound by written agreements that restrict their use of your data to serving NuralNest AI.

Legal disclosures

We may disclose information if required by valid legal process (subpoena, court order) or to protect rights, safety, or security. We will challenge overbroad demands and notify you when legally permitted to do so.

Business transfers

If NuralNest AI is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the commitments in this policy.

4. Security

• All data is encrypted in transit using TLS.
• Data at rest in AWS S3 is encrypted using AWS-managed keys, with customer-managed KMS keys protecting metadata in production.
• Each household has its own isolated storage area; access is controlled by per-user authentication and tenant-scoped access policies.
• We follow the principle of least privilege internally — engineers do not have routine access to customer data, only to operational logs that exclude document and message content.

No system is perfectly secure. If we ever experience a breach involving your personal information, we will notify you promptly as required by applicable law.

5. How long we keep information

• While your account is active, we retain your Vault Content and derived data so the Service can use it.
• You can delete individual documents, facts, and chats at any time from within the app. Deletion is permanent and removes the content from active storage within hours.
• When your account is closed, we delete your Vault Content and derived data within 30 days, except where retention is required by law.
• Operational logs, including sign-in records with IP address and approximate location, never contain document or chat text. In our production service they are retained for up to six years, which supports security investigations and records that may be subject to HIPAA. In our development and test environments they are retained for 90 days, except basic sign-up records (the sign-up date and the onboarding answers you give, without IP address or location), which are kept for up to six years.

6. Your rights and choices

• Access — you can see what NuralNest AI remembers about you from Settings → Memory in the app.
• Correction / deletion of facts — tap "Forget" on any remembered fact and it is removed.
• Delete individual documents — at any time from the Vault.
• Account export and account deletion — we are building self-service controls for these. Until they ship, email privacy@nuralnest.com and we will export or delete your data within 30 days.

California residents

If you reside in California, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to request disclosure of information collected, the right to delete personal information, and the right to opt out of the sale or sharing of personal information (we do not sell or share personal information for advertising). To exercise these rights, email privacy@nuralnest.com.

EU and UK residents

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the GDPR and UK GDPR including access, rectification, erasure, restriction, portability, and objection. Our legal basis for processing is performance of the contract you accept when you use the Service, plus legitimate interest in operating it securely.

7. Children

NuralNest AI is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. Households on the family plan may store records about minor family members; the account holder is responsible for that content.

8. International transfers

NuralNest AI data is stored in the United States. If you access the Service from outside the U.S., you understand that your information will be transferred to and processed in the U.S., where data-protection laws may differ from those in your jurisdiction.

9. Changes to this policy

We will update this Privacy Policy as the Service evolves. Material changes will be communicated through the app or by email at least 30 days before taking effect. The "Last updated" date at the top of this page reflects the current version.

10. Contact us

Privacy questions or requests: privacy@nuralnest.com

United Dream Homes LLC
2300 Olympia Dr. #271761
Flower Mound, TX 75027, USA