Privacy Policy
Effective date: February 26, 2026
nuyu is designed to keep your data on your device. This is not a marketing position — it is the architecture. Most of what you interact with on nuyu never leaves your browser. This policy explains exactly what is collected, what is not, and where data goes when it does leave your device.
1. What We Collect (and What We Do Not)
Newsletter Signup
If you subscribe to our newsletter via the footer form, your email address is submitted through formsubmit.co and delivered to nuyu@reef.bio. We use your email solely to send project updates. We do not sell, share, or rent email addresses to third parties.
Survey Responses
If you complete a nuyu survey, your responses are submitted through formsubmit.co and stored in a Google Sheet accessible to the nuyu team. Survey data is used to inform product development. Surveys do not collect names or identifying information unless you voluntarily provide it in a free-text field.
Docs Progress
As you work through the curriculum, your progress (pages visited, interactive elements completed, theme preference) is stored in your browser's localStorage. This data never leaves your device. nuyu has no access to it. Clearing your browser data erases it.
Profile Suite Data
Your assessment results, goals, journal entries, routines, and all Profile Suite data are stored in your browser's IndexedDB via Dexie.js. All of this is client-side. Nothing is transmitted to any server. nuyu cannot see, access, or recover your Profile Suite data.
You can export your data as a JSON file from the Settings page at any time. You can import previously exported data on a new device. You can delete all data by clearing your browser storage or using the reset function in Settings.
What We Do Not Collect
nuyu does not use analytics services (no Google Analytics, no Mixpanel, no Plausible). We do not track page views, session duration, click events, or user behavior. We do not use tracking pixels, fingerprinting, or advertising identifiers. We do not have user accounts, passwords, or authentication systems.
2. Cookies
nuyu does not set cookies. None. Not functional cookies, not analytics cookies, not advertising cookies.
However, nuyu loads resources from third-party CDNs — Tailwind CSS, Google Fonts, Chart.js, and Dexie.js. These CDN providers may set their own cookies or collect their own usage data as part of serving those resources. nuyu does not control this behavior. If this concerns you, browser extensions like uBlock Origin can block third-party cookies while preserving site functionality.
3. Data Storage and Security
Your locally stored data (localStorage and IndexedDB) is not encrypted by nuyu. It relies on your browser's built-in security model. This means:
- Anyone with physical access to your device and browser can potentially access your nuyu data.
- If you use a shared or public computer, your data may be accessible to other users of that device.
- Browser extensions with broad permissions may be able to read localStorage and IndexedDB content.
We are transparent about this because you deserve to understand the actual security model rather than receiving vague assurances. For sensitive self-knowledge data, we recommend using nuyu on a personal device with screen lock enabled.
4. Data Sharing
nuyu does not sell, trade, rent, or share your personal information with third parties. The only external services that receive any data from your interactions with nuyu are:
- formsubmit.co — processes newsletter signups and survey submissions. Their privacy policy governs how they handle data in transit.
- Google Sheets — stores aggregated survey response data for product development purposes.
That is the complete list. There are no other data recipients.
5. Your Rights
Because most of your data lives on your device, you have direct control over it:
- Access: Your Profile Suite data is visible to you in the app at all times. You can export it as JSON from Settings.
- Deletion: Clear your browser's localStorage and IndexedDB for the nuyu domain, or use the reset function in Settings. This permanently removes all locally stored data.
- Portability: The JSON export contains all your data in a standard, readable format. You can import it into another browser or device.
- Newsletter unsubscribe: Reply to any newsletter email with "unsubscribe" and we will remove your email address.
If you want us to delete survey data you previously submitted, email nuyu@reef.bio with the details and we will remove it from the Google Sheet.
6. Children's Privacy
nuyu is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has submitted personal information through a nuyu form, please contact us at nuyu@reef.bio and we will delete it.
7. Changes to This Policy
We may update this Privacy Policy as the project evolves — particularly if nuyu introduces features that involve server-side data processing (such as cloud sync or push notifications). When that happens, we will revise the effective date at the top of this page and describe what changed.
Our commitment to minimal data collection and client-side architecture is a design principle, not a temporary limitation. Future changes will be measured against that principle.