Privacy Policy

1. Scope and defaults

This policy covers work discovery, video playback, account-based progress, interest feedback, and notifications. You can browse public works and play public videos without signing in. Declining optional playback analytics does not block playback.

2. Data we handle

NU Portal does not store video-file contents in its database. Rights-cleared media is delivered from object storage through limited-lifetime URLs.

• When you connect an account: Firebase user ID, email and its hash, display name, sign-in provider, and authentication state.
• When you use the service: anonymous session and installation IDs, work and episode views, searches, saved items, progress and completion, interest feedback, and survey answers.
• With optional analytics consent: playback starts, pauses and completions, playback position, event time, and campaign or variant attribution.
• With notification permission: push token, platform, app/runtime version, language, time zone, and permission state.
• For operations: coarse region inferred from IP, request times, security/error logs, and device or browser information.

3. Why we use it

• Authentication, cross-device progress, saved items, and preferences.
• Rights-, age-, and region-aware delivery of published media.
• Playback quality and experience measurement only when you choose analytics.
• Reviewing one possible next experience for a work based on aggregated interest.
• Notifications you request, abuse prevention, incident response, and legal compliance.

4. Service providers and international processing

We may use Google Firebase for authentication, Supabase/PostgreSQL for service data, Cloudflare R2 for media, Expo/Apple/Google for push and distribution, and Vercel for web hosting. Processing locations may differ by provider. We use contractual, access-control, and encryption safeguards appropriate to the service.

5. Retention and deletion

Account, progress, and preference records are kept while your account is active. When deletion is requested, active watch history, saved items, preferences, notification credentials, and account links are deleted or anonymized. Minimal records strictly required for legal, security, incident, or duplicate-prevention purposes are restricted and deleted when that purpose or required period ends.

6. Your choices

• Accept or decline optional analytics from the playback screen.
• Manage notifications in Profile and withdraw OS permission at any time.
• Export data, change consent, or request deletion from your account.
• Review the account-deletion instructions for the deletion scope and steps.

7. Children and content ratings

NU Portal is not designed for children. Follow the content rating and minimum-age requirements in your region. Where parental consent is required, do not create an account or provide personal data without it.

8. Security and contact

We use encrypted transport, role separation, idempotency controls, audit history, and limited-lifetime media URLs. Contact privacy@newunivers.ai for access, correction, deletion, or policy questions.

9. Changes

When data purposes, categories, or providers materially change, we will post the effective date and changes here before they take effect and request additional consent where required.