This Privacy Policy explains how Spatium Nexum ("Spatium Nexum", "we", "us", or "our") collects, uses, shares, and protects your personal information when you use the Spatium Nexum mobile app, visit spatiumnexum.com, or otherwise communicate with us (together, the "Services").
Spatium Nexum is a wellness and human-optimization app built around nutrition, biomarker awareness, health archetypes, and an AI wellness assistant ("Nexa").
In this policy, "you" and "your" mean you as a user of the Services. Please read it carefully. If you do not agree with it, please do not use the Services.
The short version
- We collect the health and wellness information you give us — quiz answers, biomarkers, goals, and what you tell Nexa — and use it to personalize the app for you.
- Nexa is powered by OpenAI, L.L.C., a third-party AI service in the United States. We ask your permission before anything is sent to OpenAI, we tell you exactly what is sent, and you can withdraw that permission at any time in Settings → AI Data Sharing. If you decline, Nexa is unavailable and everything else in the app keeps working.
- We do not sell your personal information. We do not use your health information for advertising, and we do not let anyone use it to train AI models.
- Your identity and your health data are stored in two separate databases. The health database holds no name or email address, and our developers work only with that one. The two are linked by an internal bridge code that only authorized administrators can use.
- You can permanently delete your account and all of its data from inside the app, at Settings → Delete Account.
The sections below say all of this in full. This summary is for convenience and does not replace them.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. When we do, we will post the revised policy, update the "Last updated" date above and, where required, notify you in the app.
Information We Collect
What we collect depends on how you use the Services.
Account & Identity Information
- Your name and email address, which you provide when you create an account, or which we receive from Sign in with Apple or Sign in with Google if you use those options.
- A securely hashed password if you register with email and password. We never store your password in plain text.
- Your date of birth, which you provide during onboarding.
- A unique internal account identifier we assign to your profile.
Health & Wellness Information You Provide
We treat the following as sensitive information:
- Your onboarding quiz responses, which we use to determine your health archetype and operating frequency.
- Biomarker selections and related wellness inputs you choose to track in the app.
- Nutrition and pantry information you log, such as meals, foods, and goals.
- The content of your conversations with Nexa, including any health details you choose to include in them.
We use this information to operate the personalization features you asked for. We do not use it for advertising, and we do not sell it.
AI Assistant (Nexa) Conversations
Nexa, our in-app AI assistant, is powered by a third-party AI service operated by OpenAI, L.L.C. ("OpenAI"), a company based in the United States.
We ask for your explicit permission before anything is sent to OpenAI, and nothing is sent unless and until you agree. The first time you open Nexa, a disclosure screen names OpenAI as the recipient, lists what will be sent, and asks you to agree or decline. If you decline, Nexa is unavailable and the rest of the app is unaffected.
Once you have given that permission, the following is transmitted to OpenAI:
- The messages you write to Nexa, including any health, nutrition, symptom, or personal details you choose to include, and the earlier messages in the same conversation so the assistant can follow the thread.
- Your wellness profile context — your first name, health archetype and operating frequency, and the goals and biomarker selections you track in the app — so that responses are relevant to you.
- Your approximate location, only if you have granted location permission and only when you ask Nexa about nearby food sources, so that results can be ranked by proximity to you.
- If you use voice with Nexa and grant the separate voice permission: the audio captured by your microphone while voice mode is switched on, which OpenAI converts to text, and the text of Nexa's reply, which OpenAI converts into a synthetic spoken voice. Voice is asked for separately from typed chat, and the microphone is never opened before you agree.
We do not send your email address, password, date of birth, or any payment information to OpenAI.
OpenAI processes this information solely as our service provider, for the single purpose of generating the response you asked for. Under our agreement with OpenAI:
- your data is not used to train OpenAI's models;
- it is not used for advertising and is not sold;
- OpenAI processes it only on our documented instructions; and
- OpenAI is contractually required to protect your information with safeguards that are the same as or equal to the protections described in this Privacy Policy.
Because OpenAI operates in the United States, this information may be processed there.
You can withdraw your permission at any time in Settings → AI Data Sharing. Once withdrawn, nothing further is sent to OpenAI. Please do not share information you would not want processed by an AI service, and do not use Nexa to obtain a medical diagnosis or treatment.
Device, Usage & Location Information
- Basic technical and usage information needed to operate the app, such as app version and general diagnostics.
- If you grant permission, your approximate or precise location, used only to show nearby restaurants, grocery stores, and food sources relevant to your nutrition plan. You can deny or revoke this permission at any time in your device settings.
- If you grant microphone permission, audio, used only when you choose to speak to Nexa. We do not record audio in the background, and recording stops when you switch voice mode off.
Subscription & Payment Information
Premium subscriptions are processed by the Apple App Store and our subscription provider, RevenueCat. Spatium Nexum does not collect or store your credit card or payment card details. We receive confirmation of your subscription status — for example, whether it is active, and its plan and expiry date — so that we can unlock premium features.
Website & Online Store Information
If you visit spatiumnexum.com, we collect basic usage information about your visit, such as your device and browser type, IP address, and the pages you view, using cookies and similar technologies. You can remove or reject cookies through your browser controls; some parts of the site may not work correctly if you do.
If you make a purchase through our online store, our e-commerce and payment providers collect the contact, billing, shipping, and payment information needed to process and fulfil your order. Those providers handle payment card details directly; we do not store them.
Information collected through the website is kept separate from the health and wellness information in the app, and we do not combine the two.
How We Use Your Information
We use the personal information we collect to:
- Create and manage your account, and authenticate you when you sign in.
- Provide the core Services, including your health archetype, biomarker awareness, nutrition and pantry tools, and the Nexa AI assistant.
- Personalize your experience based on your archetype, operating frequency, and the inputs you provide.
- Process and manage your subscription and unlock premium features.
- Communicate with you about your account, security, and important service changes.
- Operate our website and, where applicable, process and fulfil store orders.
- Maintain the security, integrity, and reliability of the Services, detect and prevent fraud or abuse, and comply with our legal obligations.
Where the law requires a legal basis for processing, we rely on: your consent (for AI processing, microphone, location, and any marketing email you opt into); the performance of our contract with you (to provide the Services and your subscription); our legitimate interests (to secure, support, and improve the Services); and compliance with legal obligations.
What we never do
- We do not sell your personal information.
- We do not share your personal information for cross-context behavioural or targeted advertising.
- We do not use your health or wellness information for advertising of any kind.
- We do not allow any third party, including OpenAI, to use your information to train AI models.
How We Share Your Information
We share personal information only as needed to run the Services:
- OpenAI, L.L.C. (United States) — our AI provider, solely to generate responses in the Nexa assistant, and only after you have given explicit permission. Exactly what is sent is listed under "AI Assistant (Nexa) Conversations" above.
- Hosting and infrastructure providers who host and operate our servers and databases and process data on our behalf.
- Apple and RevenueCat, to process and validate in-app purchases and manage subscription status.
- Apple and Google identity services, if you choose Sign in with Apple or Sign in with Google, solely to authenticate you.
- E-commerce and payment providers, for orders placed through our online store.
- Authorities or others, where required by law, or to protect the rights, safety, and security of our users, the public, or Spatium Nexum.
- A successor entity, in connection with a merger, acquisition, or similar transaction, subject to this policy continuing to apply to your information.
Every third party we share personal information with is bound by contract to protect it with safeguards that are the same as or equal to the protections described in this Privacy Policy, to use it only for the purpose we engaged them for, and to process it only on our instructions.
Data Retention
We retain your personal information for as long as your account is active, or as long as needed to provide the Services, and for a reasonable period afterward to comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete the associated data as described below.
Your Choices & Rights
You have control over your information:
- Account deletion. You can permanently delete your account and its personal data at any time from Settings → Delete Account in the app. This is a permanent deletion, not a temporary deactivation: it removes your profile, health inputs, archetype data, goals, and conversation history from our systems, and your login stops working.
- AI consent. You can decline AI data processing, and you can withdraw it later at Settings → AI Data Sharing. While it is off, nothing is sent to OpenAI and the AI assistant is unavailable; the rest of the app is unaffected.
- Device permissions. You can grant or revoke location and microphone access at any time in your device settings.
- Access, correction, and portability. You can update your profile information in the app, and you can ask us for a copy of the personal information we hold about you, or ask us to correct it.
- Withdrawing consent. Where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect processing that already happened before you withdrew it.
To make a privacy request, email our Information Officer at info@spatiumnexum.com. Where we handle a deletion request received by email, we securely destroy the associated data within 90 days. We do not discriminate against you for exercising any of these rights.
Complaints
If you have a complaint about how we handle your personal information, please contact us first at info@spatiumnexum.com. If you are not satisfied with our response, you may have the right to appeal, or to lodge a complaint with your local data protection authority.
How We Protect Your Information
We use industry-standard safeguards, including AES-256 encryption for data at rest and TLS encryption for data in transit between your device and our servers. Authentication credentials are held in the device's secure storage. We limit access to personal information to authorized personnel who need it to operate and support the Services. No method of transmission or storage is completely secure, but we work continuously to protect your information.
We Keep Your Identity Separate from Your Health Data
We deliberately store your information in two separate databases:
- An identity database, holding your account and contact details — your name, email address, date of birth, and login credentials. Access to it is restricted to a small number of authorized administrators.
- A wellness database, holding your quiz responses, health archetype and operating frequency, biomarker selections, goals, and conversation history. It contains no name, no email address, and no other directly identifying details.
The two are connected only by an identity bridge code — an internal identifier that is meaningless on its own and is the single point at which the two databases can be matched. Our engineering and development staff work only with the wellness database, so the health information they can see is not attached to your name or contact details. Re-linking a wellness record to the person it belongs to requires the identity database, which only authorized administrators can reach.
Because that bridge code makes re-linking possible for those administrators, we describe the wellness data as pseudonymized rather than fully anonymous. We would only call it anonymous if the link were destroyed and the data could never be traced back to you.
Children's Privacy
The Services are intended for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us so that we can remove it.
International Users
Spatium Nexum is operated from the United States. If you use the Services from outside the United States, your information may be processed and stored in the United States and other countries whose data-protection laws may differ from those of your own jurisdiction. Where required, we put appropriate safeguards in place for those transfers.
Medical Disclaimer
Spatium Nexum is a wellness and educational tool. It does not provide medical advice, diagnosis, or treatment, and the information it provides — including biomarker awareness and AI responses — is not a substitute for professional medical care. Always consult a qualified healthcare provider regarding your health.
Contact Us
If you have questions about this Privacy Policy or how we handle your information, contact us at info@spatiumnexum.com.
Spatium Nexum
developers@spatiumnexum.com