Privacy Policy

Effective date: September 13, 2026 · Nexum

1. Who We Are

Prompt Secure is operated by Nexum (Nexum Grzegorz Łopatka), a sole proprietorship registered in Poland (NIP: PL7262529449), hereinafter referred to as "we," "us," or "the Company." Contact: [email protected]

2. Scope of This Policy

This Privacy Policy applies to the Prompt Secure Android application, the Chrome Extension, and the website at promptsecure.app.

3. What Stays on Your Device

These never reach our servers under any circumstances:

• Your AI provider API keys (OpenAI, Anthropic, or others)
• Your prompt history and AI conversation history, including token counts and costs
• Content you enter into the Notepad
• Your clipboard history

These stay on your device unless you turn on an optional feature that moves them:

• Your prompts, templates, and their content — leave your device only if you enable Cloud Sync (4.1), publish a prompt to the community (4.5), or add it to a Team Vault (4.6).
• Your knowledge base documents — leave your device only if you enable Cloud Sync (4.1).

4. Data We Collect and Process

4.1 Account Data (Optional)

An account is optional — the app is fully functional without one. If you create one, we collect your email address, a hashed password, and account timestamps. Cloud Sync stores your prompts and knowledge base documents in a Supabase database hosted in the EU, protected by row-level security so that no other user can read them. Sync is the only way your prompt content reaches our infrastructure.

4.2 Purchase Data

Purchases are processed by Google Play. We receive only purchase confirmation and status (active, expired, refunded). We never receive your payment card details or billing address.

4.3 Website Analytics

Our website does not use cookies or third-party tracking scripts. Cloudflare may collect basic access logs for security purposes, governed by Cloudflare's privacy policy.

4.4 Support Communications

If you contact us, we retain your email and message content for the purpose of responding. We do not share this with third parties.

4.5 Prompts You Publish to the Community

Not active in this version. The community library is disabled in the current release, so nothing you write can become public. This section describes how it will work once the feature ships, and applies from that moment on.

If you choose to publish a prompt to the community library, its title, category and full content become publicly readable by anyone, including people without an account. We also store a counter of how many times it was copied. Your email address is never shown. Publishing is always an explicit action — nothing is published automatically. You can withdraw a published prompt at any time from the app, which removes it from the public library.

4.6 Team Vaults

If you create or join a Team Vault, prompts you add to it become readable by every member of that team for as long as they remain members. The team owner can remove any prompt from the shared library and can delete the entire team, which removes the shared library for everyone. Leaving a team ends your access to its content; prompts you had already copied into your own vault remain yours.

5. Local-First Architecture

• On-device storage: All prompts are stored in an encrypted local database on your device.
• BYOK model: Your AI requests go directly from your device to OpenAI or Anthropic — they do not pass through our servers.
• Offline-first: The application functions fully without an internet connection.
• No tracking: We do not include analytics SDKs, advertising SDKs, or behavioral tracking.

6. Third-Party Services

• OpenAI / Anthropic — when you send prompts using your API key. Their privacy policies govern this data.
• Supabase — cloud database, EU-hosted, for optional sync.
• Google Play / RevenueCat — for purchase processing.
• Cloudflare — website hosting and DNS.

7. Data Retention

• Local data: retained until you uninstall the app or delete it manually.
• Cloud account data: retained until you delete your account.
• Support emails: retained up to 2 years.
• Purchase records: retained as required by Polish law (5 years).

Deleting your account. You can delete your account and all associated cloud data at any time, directly in the mobile app: Settings → Account → Delete account. Deletion is immediate and irreversible; it removes your account, synced prompts, knowledge base documents, team memberships and subscription record from our database. Prompts stored locally on that device are erased as well. Instructions and an alternative request channel are available at promptsecure.app/delete-account. Deleting your account does not cancel a Google Play subscription — cancel it separately in Google Play.

8. Your Rights (GDPR)

If you are in the EEA, you have the right to access, rectify, erase, and port your data. The app provides a built-in JSON export for portability. To exercise any right, contact [email protected]. We respond within 30 days.

9. Data Security

• API keys held in Android's hardware-backed Keystore; in the Chrome extension, in extension-isolated local storage (see section 3)
• Cloud data encrypted in transit (TLS) and at rest
• Row-level security on all database tables
• Biometric authentication and PIN lock supported

10. Children's Privacy

Prompt Secure is intended for users aged 18 and over and is not directed at children. We do not knowingly collect data from anyone under 18. Contact us immediately at [email protected] if you believe a child has provided personal information.

11. Changes to This Policy

Material changes will be communicated via a notice in the application or on our website. The effective date above reflects the most recent revision.

12. Contact

Nexum
ul. Kolejowa 2C lok. 9, 95-050 Konstantynów Łódzki, Poland
Email: [email protected]