Effective July 20, 2026
Nexus is a desktop application made by Novaya ("we", "us"). This policy explains what data Nexus handles and how. The short version is unusual for a software product, and it is the whole point of how Nexus is built:
Nexus is local-first and bring-your-own-key. Your code, your prompts, your conversations, and your project memory live on your device. When you use an AI model, your requests go directly from your machine to the AI provider you choose (such as Groq, Anthropic, or OpenAI) using your own API key. We do not operate servers that receive, store, or process the contents of your prompts, code, or files.
The following are stored locally on your computer, under your operating system's application-data folder, and are never uploaded to us:
Because Nexus uses your own key, your prompts and code are sent to, and processed by, the AI provider you select — not by us. Your use of that provider is governed by that provider's own terms and privacy policy. We recommend reviewing them. We have no access to the data you exchange with your provider.
If you sign in with Google, we receive your name, email address, and profile picture from Google, solely to create and secure your account. If you use a local profile instead, only the name/email you type is stored, on your device. We use a session cookie to keep you signed in. We do not use your account information for advertising, and we do not sell it.
If you connect a third-party service (for example GitHub or Gmail), you authorize it yourself, its credentials are stored encrypted on your device, and Nexus talks to that service directly from your machine. We do not receive those credentials or the data those services return.
Our website (trynovaya.com) may collect standard, non-identifying
server logs (such as IP address and browser type) from your hosting provider for
security and reliability. Marketing pages may load a small number of assets; we
keep third-party tracking to a minimum.
Because your Nexus data lives on your device, you control it directly — you can view, export, or delete it by managing the app's local files, or by uninstalling the app. To delete the account information tied to Google sign-in, or to ask a question about this policy, contact us (below). Depending on where you live, you may have rights under laws such as the GDPR or CCPA; we honor valid requests to access or delete the limited account data we hold.
Nexus is not directed to children under 16, and we do not knowingly collect their personal information.
We may update this policy as Nexus evolves. Material changes will be reflected by the effective date above and, where appropriate, noted in the app or on this page.
Questions about privacy: shourya@trynovaya.com.
Novaya is an independent software project (not a registered company).