NYROX Privacy
Policy

NYROX is the data controller responsible for your personal data in connection with the NYROX application ("NYROX", "the Service"). If you have questions about this Privacy Policy, contact us at Info@nyroxapp.com.

Trading name

NYROX

Trading status

Sole trader based in the United Kingdom

Contact

Info@nyroxapp.com

We process your personal data under the following lawful bases under the UK GDPR: (a) performance of a contract (Article 6(1)(b)) — to provide the Service you requested; (b) legal obligation (Article 6(1)(c)) — where we are required to retain records (e.g. payment records); (c) legitimate interests (Article 6(1)(f)) — for service improvement and security; (d) consent (Article 6(1)(a)) — for anonymous analytics, which you can withdraw at any time.

Account data: your email address, role, and authentication token. Encrypted household records: bills, contracts, assets, family members, income, ICE breadcrumbs, birthdays, and life events — all encrypted on your device before transmission. We store only ciphertext and cannot read the contents. Payment metadata: transaction status processed by Stripe; we do not store your card details. Encryption key material: a per-user salt and a wrapped (encrypted) Data Encryption Key — neither of which allows us to decrypt your records without your password. Anonymous analytics: aggregate, non-identifiable usage statistics. Partnership enquiries: your name, organisation, email address, website (if supplied), and message when you contact us about a partnership. Support tickets: your name, email address, the subject and description you submit, and the messages exchanged with us when you raise a support ticket. Referral metadata: if you participate in the referral scheme, your referral code (stored as a SHA-256 hash), the email and user ID of users you refer, and credit balances are processed as billing metadata. This relationship exists only in the billing layer — no encrypted vault data, household records, or encryption keys are shared between referrer and referred user.

NYROX uses client-side end-to-end encryption across all user data:

Personal Vault: Your personal Data Encryption Key (DEK) is generated on your device and wrapped using a Key Encryption Key (KEK) derived from your password via PBKDF2. The wrapped DEK and salt are stored on our servers; the live DEK exists only in your device's memory for the active session. We do not hold your password, your KEK, or your plaintext DEK.

Shared Family Vault: If you use the Family Plan, a separate 256-bit AES-GCM Family DEK is generated locally on your device. To link accounts without exposing keys to our servers, the Family DEK is wrapped using an ephemeral key derived from a random, single-use invite code. The secondary family member decrypts this wrapped key on their device and re-wraps it with their own personal password-derived KEK. We store only ciphertext and wrapped keys — we never have access to either member's plaintext keys or unencrypted records.

When a Family Plan ends: the member's wrapped Family Key is deliberately left on their account after the plan's end date — for 14 days where the plan was cancelled, or 90 days where it ended because payment failed — so that they can re-encrypt records they had shared under their own personal key and retain their own readable copy (see Terms Section 7(c)). That re-encryption happens entirely on their device. A record reclaimed this way leaves the shared vault and is no longer readable by the other household member. At the end of that window the wrapped Family Key is deleted from the member's account. Because we hold no plaintext key, we cannot restore access to any record left shared after that point — for anyone, including at the request of either household member.

We use your data to: provide and maintain the Service; process payments via Stripe; communicate with you about your account; respond to partnership enquiries you submit; and improve the Service through anonymous analytics.

NYROX Audit: nothing is sent for an Audit until you press Run. When you do, the records you include are decrypted on your device, and names, account and reference numbers, addresses, phone numbers and other identifiers are stripped on your device before anything leaves it. Only the figures the review needs — amounts, dates, contract terms and categories — are sent to the AI provider that performs it. The result is shown to you and is not stored by NYROX; the only record we keep of an Audit is the number of items reviewed and the date it was run. Nothing sent for an Audit, and none of your records, is ever used to train AI models.

We do not sell or rent your data. We share data with the following processors: Stripe — payment processing (Stripe receives your email and payment details under its own terms); LLM providers — receive only sanitised, PII-stripped data when you run a NYROX Audit, never your encrypted records; Hosting infrastructure — our cloud platform provider stores ciphertext and account data in a UK data centre and supplies the servers, databases and logging the Service runs on. We may disclose data to authorities where required by law, subject to the limitation that we can only disclose ciphertext we cannot read.

Your NYROX app data is stored in the UK. Supporting services — payment processing, email delivery, AI features you initiate, and platform logging — may involve processors outside the UK/EEA, and we rely on appropriate safeguards (such as the UK International Data Transfer Addendum and Standard Contractual Clauses) for those transfers. Because your household records are encrypted end-to-end, those transfers never expose the plaintext contents of your vault.

Encrypted household records are retained for as long as your account is active. When you delete your account, all associated encrypted data is permanently removed from our servers. Payment records are retained for the period required by applicable tax and accounting law. Partnership enquiries are retained only while they are needed to assess and manage the proposed relationship. Support tickets are retained while they are open or in progress; once a ticket is resolved or closed it is deleted automatically 90 days after it was last updated, and only a count of tickets deleted is kept in our system log. Anonymous analytics are retained in aggregate form indefinitely.

Under the UK GDPR, you have the right to: access your personal data; rectify inaccurate data; erase your personal data (note: encrypted records can be deleted, but not decrypted by us); restrict processing; data portability; object to processing; and withdraw consent for consent-based processing. To exercise these rights, contact Info@nyroxapp.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

NYROX uses essential technical storage (authentication tokens) necessary for the Service to function. Your encryption keys exist only in volatile device memory during an active unlocked session — they are never written to sessionStorage, localStorage, or persistent storage, meaning a page refresh or app restart requires re-entering your password to decrypt your vault. We do not use third-party advertising or tracking cookies.

NYROX is not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will communicate material changes via email or in-app notification. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at Info@nyroxapp.com.