Get started

Privacy policy

Last updated: September 21, 2026

This policy explains how Madewise (“Madewise,” “we,” or “us”) handles personal information when you use Nubii on the web, desktop, or mobile, a Nubii service that we host, or nubii.madewise.ae. Nubii is an AI workspace for conversations, tasks, files, and scheduled routines with agents that can use connected apps. A third party that operates a self-hosted Nubii deployment is responsible for its own privacy practices.

Information we collect

Depending on how you use Nubii, we collect:

  • Contact and account information, such as your name, email address, and authentication records.
  • Content you provide to the service, including bot instructions, messages, tasks, memories, files, routines, and support communications.
  • Connection information you choose to provide, such as encrypted credentials or tokens for model providers, connected applications, and browser sessions.
  • Technical information needed to operate and secure the service, such as IP address, user agent, session records, device push token, timestamps, and diagnostic information.

How we use information

We use this information to:

  • Provide, maintain, secure, and troubleshoot Nubii.
  • Authenticate you and synchronize your account across supported clients.
  • Run the bots, routines, connections, and notifications you request.
  • Respond to support requests and comply with legal obligations.

Google account and connected Google services

When you choose Sign in with Google, we receive your Google account identifier, name, email address, email verification status, and profile picture, when available. We use these details to create or identify your Nubii account, sign you in, and display your profile. We store account records and authentication tokens to support sign-in and account linking. We do not receive your Google password. Signing in does not give Nubii access to your Gmail messages, Google Drive files, or Google Calendar events.

Connecting a Google service to a bot is a separate, optional authorization. The permissions shown when you connect determine what Nubii can access. Depending on the connection and permissions you grant, this can include:

  • Gmail: message subjects and bodies, senders, recipients, labels, and attachments, to search or summarize mail, organize messages, and draft or send email for the tasks you request.
  • Google Drive: file names, metadata, and file contents, to find, summarize, create, or update documents for your tasks.
  • Google Calendar: calendars, event titles, descriptions, times, locations, and attendees, to check availability and read, create, or update events for your tasks.

We access connected data to carry out the work you request, including routines you schedule. Relevant content may be saved in conversations, task results, files, or memories in your Space and sent to the configured AI, memory, or connection services needed for that work, as described below. Access credentials are used to maintain the connection; they are not used to request unrelated Google data.

Nubii follows the Google API Services User Data Policy, including its Limited Use requirements, when using or transferring information received from Google APIs. We do not sell Google user data, use it for advertising, or use it to train generalized AI or machine-learning models. Transfers are limited to providing the features you authorize, security purposes, legal obligations, or a business transfer with your prior consent. People may access this data only with your permission to review specific content, when necessary for security or legal reasons, or as aggregated data for internal operations as permitted by that policy.

Service providers and AI processing

Before submitting content or starting AI work, the Nubii mobile app names configured recipients, explains the data and purpose, and asks you to allow sharing. Choosing Not now prevents the mobile action. Permission applies to the selected Space and recipient. Account → AI data sharing lets you withdraw permission for new mobile actions. Stop existing runs and disable routines separately; withdrawal cannot recall data already sent. Web, desktop, and self-hosted server workflows use the connections you configure without this mobile permission flow.

  • Models and agents: messages, relevant conversation history, bot instructions, memories, attachments and file content, screenshots, and content retrieved from connected apps are used to generate responses and perform your tasks, including scheduled tasks. Supported connections include OpenAI, Anthropic, Google, OpenRouter, Vercel AI Gateway, Cursor, and custom model servers. The mobile permission screen identifies the services configured for your Space; configuring a service does not by itself grant permission for new mobile actions.
  • AI gateways: OpenRouter and Vercel AI Gateway receive requests and forward them to model providers according to the connection's routing settings. The mobile disclosure names the configured gateway. Processing, retention, and routing depend on the gateway account settings and applicable provider agreements. Nubii's mobile permission flow does not change those settings or promise zero retention.
  • Voice: recorded audio is sent to your selected transcription service; text you choose to play, including bot responses, is sent for speech generation. Supported voice services include OpenAI, ElevenLabs, Cartesia, and Fish Audio. Microphone access and permission to share with an AI service are separate choices.
  • Memory: when Supermemory is configured, conversation summaries, saved memories, search queries, and bot and Space identifiers are sent to store and retrieve context. Self-hosted memory is processed by the server shown in your permission screen.

We collect this content from what you enter, upload, record, or authorize your bots to access. We store the recipient, Space, disclosure version, and time of your permission for the mobile app to remember your choices. We do not sell personal information or use Nubii content for third-party advertising.

Services we select to process personal information must provide protection equal to or greater than the safeguards described in this policy, including limited processing purposes, appropriate security, and retention and deletion protections. Before enabling a provider, we review its terms and safeguards against these requirements. A self-hosted operator is responsible for assessing the services it selects and its own agreements with those services.

Provider terms govern their processing and retention after receipt. You can review the applicable provider policy from AI data sharing. Policies for supported services: OpenAI, Anthropic, Google, OpenRouter, Vercel, Cursor, ElevenLabs, Cartesia, Fish Audio, and Supermemory.

Other services may host infrastructure, run sandboxes, deliver notifications, store data, or connect apps as needed for the work you request. Connected apps receive the content required for the actions you authorize. Their processing is governed by their applicable terms and privacy policies.

Cookies and device storage

Nubii uses session cookies or device-stored session tokens to keep you signed in. Local storage remembers preferences such as appearance, language, and the selected Space or server. Removing these records can sign you out or reset your preferences. The marketing website may also collect usage events, page visits, browser and device information, and referral information through analytics to understand how the site is used. These website analytics do not require access to your connected Google services.

Self-hosted deployments

The Nubii mobile app can connect to a server that you or another organization operates. In that case, the server operator, not Madewise, controls the information sent to that deployment. The app stores the selected server address and session token securely on your device.

Retention and deletion

We keep hosted account information and content while your account is active and as reasonably needed to provide the service. You can permanently delete your hosted account and associated personal Space data from the Account screen in the Nubii mobile app. You can also contact us to request deletion, including if you sign in with Google and do not have a Nubii password. We may retain limited information when required by law, to resolve disputes, or to enforce agreements. Information already sent to a third-party provider is subject to that provider’s retention practices.

You can disconnect an app in Nubii and revoke Google's authorization through your Google Account permissions. Revoking access stops future access through that authorization. It does not automatically erase content already copied into conversations, files, task results, or memories. Delete that content or request account deletion to remove retained Nubii data. Disconnecting an app does not delete your original messages, files, or events in Google.

Security and international transfers

We use reasonable technical and organizational safeguards designed to protect personal information. No system is completely secure. We and our service providers may process information in the United States and other countries, which may have different data-protection laws than your country.

Children

Nubii is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal information, or to object to certain processing. Contact us to make a request.

Changes to this policy

We update this page when our data practices change and revise the date above. If we propose to use Google user data for a new purpose, we will explain the change and obtain your consent before that use begins.

Contact us

Madewise
hello@madewise.ae