Privacy Policy — Nuqra
Last updated: 15 November 2026 · Version 1.0 · This is a translation; if it differs from the Arabic text, the Arabic text prevails.
1. Introduction and who we are
This policy explains how the Nuqra app, its website and its server handle your data. Nuqra is a desktop app that runs on your computer, and most of your work (stories, narration, voices, images, videos, editing and research results) stays on your computer and never reaches us.
Data controller: the owner of Nuqra, Jordan. For anything about privacy, contact support@nuqra.app.
Read this policy together with the Terms of Use. By using the app or the website you confirm that you have read it.
2. Data we collect
What reaches our server:
- Your e-mail address, and your name if you enter it: to create your account, sign you in and send service messages.
- The temporary sign-in code: sent to your e-mail to confirm it is yours, and stored hashed until it is used or 15 minutes pass.
- Device ID, subscription status and app version: to check your licence and deliver updates. The device ID is stored hashed.
- Usage counters: how many studies and updates you have used from your plan, without their content.
- IP address and connection time: for security and abuse prevention. We do not store your address itself in our database, only a hashed fingerprint of it used to count requests.
- Support messages and log files: only if you send them to us yourself.
What stays on your computer and never reaches us:
- All your work, in the folder you choose.
- Your own AI keys, kept in the Windows Credential Manager.
- YouTube search results and channel studies (see section 5).
- Your settings and styles.
Payment data: processed by Dodo Payments as the Merchant of Record. We never see or store your card number; we receive only what is needed to activate your subscription (e-mail, plan and payment status).
This website: uses no cookies and no analytics or tracking tools, and loads no fonts or files from third parties. Connections to it pass through Cloudflare, which processes IP addresses to deliver and protect the pages.
3. What we do not collect
- We do not look at your stories, scripts or files, and we do not upload them to our server.
- We do not see or store your AI keys.
- We use no advertising cookies or tracking tools, in the app or on the website.
- We do not sell or rent your data, and we do not use it for targeted advertising.
- We do not use your content to train AI models.
- We do not access your YouTube or Google account; the research features use public YouTube data only and never ask you to link an account.
4. How we use your data, and the legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Running your account and signing in | E-mail, sign-in code | Performance of contract, and your consent at sign-up |
| Licence checks, plan limits and updates | Device ID, subscription status, counters | Performance of contract |
| Billing | Payment data held by Dodo Payments | Performance of contract, and legal obligation |
| Security and abuse prevention | IP fingerprint, connection time | Legitimate interest |
| Answering support requests | What you send us | Legitimate interest |
| Service messages (sign-in code, invoices, important changes) | Performance of contract |
We process your account data only for the purposes and periods stated here, and we will not change the purpose or add new data without your fresh consent, in line with Jordan's Personal Data Protection Law No. 24 of 2023. We send marketing messages only with your consent, which you can withdraw at any time.
5. YouTube API Services
Nuqra's research, channel-study and channel-tracking features use YouTube API Services. By using these features you agree to the YouTube Terms of Service, and Google's processing of data is governed by the Google Privacy Policy.
- What we request from YouTube: public data only, such as public channel data and video titles, durations and public view counts.
- We do not access your account: we never ask you to link your YouTube or Google account and we see none of its private data. If you ever grant us any permission in future, you can revoke it on Google's security settings page.
- Where it is kept: requests pass through our server so the results reach your computer, without the server storing them; our server stores only the number of requests, to count your plan's limits. The results themselves are stored only on your computer.
- Storage on your computer: the app keeps this data in local files on your computer to show your earlier studies. It is refreshed or deleted within 30 days at most.
- Deletion: you can delete any study or tracked channel from inside the app at any time, or delete the app's data folder. This does not affect any data held by YouTube itself.
- Computed figures: some indicators shown in the app are calculated by Nuqra from public data and are not figures issued by YouTube.
6. Third parties we rely on
We share your data only with providers needed to run the service, and only as much as needed:
| Provider | Role | What it receives |
|---|---|---|
| Cloudflare | Hosting the server and website, with the database inside the European Union | Account, licence and log data |
| Resend | Sending service e-mail | Your e-mail and the message text (such as the sign-in code) |
| Dodo Payments | Merchant of Record, payment and tax processing | The payment details you enter with them directly |
| GitHub | Storing a daily backup of the accounts database | An encrypted copy (AES-256) they cannot read |
| Google (YouTube) | Public YouTube data for the research features | The channel and video IDs you request |
| Google (Gemini) | Generating text and speech, and checking images you choose | Sent from your computer directly with your own key; never passes through our server |
| Google Flow | Producing images and video through the Nuqra Flow tool | Used with your own Google account; its data never reaches us |
Some of these providers are outside Jordan. We choose providers with a level of protection no lower than Jordanian law, and we ask for your explicit consent to this transfer at sign-up.
What you send directly to Google Gemini or Google Flow is governed by Google's terms and privacy policy, not by this policy.
We may disclose data if the law requires it, or to protect our rights or users' safety. If ownership of the service changes, we will tell you before your data is transferred.
7. Retention
| Data | Period |
|---|---|
| Account data (e-mail, name) | While the account exists + 30 days |
| Temporary sign-in code | Until used, or 15 minutes |
| Device ID, subscription status and counters | While the account exists |
| IP fingerprint for counting requests | Up to 30 days |
| Server logs at the hosting provider | Up to 7 days |
| Encrypted backup | 30 days |
| Billing data | As long as the law requires |
| Support messages | 12 months |
| YouTube data on your computer | Refreshed or deleted within 30 days at most |
| Your work and files on your computer | Until you delete them |
8. Your rights and deleting your account
Under Jordan's Personal Data Protection Law No. 24 of 2023, the GDPR and similar laws, you have the right to:
- Access your data and receive a copy in a portable format.
- Correct anything inaccurate.
- Have it deleted.
- Restrict or object to its processing.
- Withdraw your consent where consent is the basis.
- Complain to the data protection authority in your country; in Jordan, the Personal Data Protection Unit at the Ministry of Digital Economy and Entrepreneurship.
To use any of these rights, write to support@nuqra.app from your account's e-mail address. We will reply within 30 days.
Deleting your account: on request we delete your account data from our server within 30 days, and it leaves the backups within a further 30 days, except what the law requires us to keep (such as billing records). Data on your computer is yours to delete, by removing the app and its data folder, and your work folder if you wish.
9. Security, children, changes and contact
Security: we use encrypted connections (HTTPS), store sign-in codes and device IDs hashed, sign app licences digitally, encrypt backups, and keep credentials on your computer in the Windows Credential Manager. No system is completely secure. If a breach could cause you serious harm, we will tell you within 24 hours of discovering it, with steps to limit its impact, and notify the competent authority within 72 hours as the law requires.
Children: the service is for adults aged 18 or over (which is also Google's requirement for using the Gemini API), and we do not knowingly collect data from anyone younger. If we learn of it, we delete it.
Changes: we may update this policy. We will tell you about any material change by e-mail or inside the app 15 days before it takes effect, and ask for your consent again if the type of data or the purpose of processing changes. The date of the last update appears at the top of this page.
Contact: Nuqra, Jordan, support@nuqra.app.