Who handles your information
Oliver Song operates Nexary as an individual in Chicago, Illinois, and is responsible for the personal information described here. For privacy questions or requests, email [email protected].
This notice covers the Nexary website and learning beta. It does not cover a separate employer, a website you visit through a link, or the independent privacy practices of your browser or sign-in provider.
Beta accounts are currently available only to United States residents aged 16 or older. International account access is deferred. Users under 18 must have parent or guardian permission.
What we collect
We collect information you provide and technical information needed to run the service:
- Account details: your name, email, verification status, password hash, account dates and any optional profile details you choose to add. We do not store your password in readable form.
- Learning activity: your onboarding choices, progress, quiz answers and results, notes, saved quiz and practice drafts, practice settings and conversation text.
- Support and feedback: messages you send, any context you attach, the page and browser information, and your reply address if you allow a reply.
- Security information: session identifiers, IP address, browser information and operational logs. If you use an available external sign-in provider, we receive the account details needed to link your sign-in.
- A record that you confirmed United States residency, the age requirement and any required parent or guardian permission, and accepted the terms, including the version and date. These are declarations; we do not ask for your full birth date or identity documents.
Why we use it
We use account and learning information to provide the service you request: signing you in, saving your work, showing feedback, and managing your account.
When you are signed in, saved drafts sync to your account database and a device cache. Not every unfinished field is saved; some text stays only in the current screen until you submit it.
We use limited security, support and aggregate learning information to prevent abuse, diagnose problems, answer requests and improve the beta. We also use information to meet legal obligations when they apply.
Optional permissions, such as browser microphone access, are separate from accepting the terms. You can revoke microphone access in your browser. We do not use your learning activity for advertising profiles.
Who can see your work
Your notes, answers and practice history are not public profiles and are not automatically sent to businesses. The operator may access stored information to provide support, maintain security or investigate a problem. The founder dashboard also shows aggregate course activity.
The current business directory contains examples, not an active application or hiring service. We will explain any future sharing feature before you use it. Completing a lesson or receiving an automated score does not make an employment decision.
Please do not enter customer lists, confidential employer information, identity documents, payment information or sensitive personal details in practice replies or feedback. Use information you have permission to share.
Service providers
Nexary uses Railway for hosting and storage, Cloudflare for delivery and security, and Resend for account emails and configured feedback delivery. These providers process information needed for their services. Privacy correspondence sent to our contact address is handled through Gmail.
When product analytics is enabled, PostHog US receives page categories, static course identifiers and events such as account verification, onboarding completion and submitted checks. A random identifier connects these events. Names, emails, answers, notes, practice text, full URLs, IP addresses and recordings are excluded. This helps us find where people leave the learning flow. See Cookies for the browser opt-out.
External sign-in providers process information under their own policies when you choose them. Browser dictation is optional: your browser or its provider may process microphone audio, while Nexary receives and saves the resulting text. Nexary does not need microphone permission for typed practice.
The paid AI voice-call service is not active in this beta. We do not sell personal information or share it for cross-context behavioural advertising. We may disclose information where required by law or necessary to protect people, investigate abuse or defend legal rights.
Where information is processed
This is a United States-only account beta. Our service providers may still process information in the United States and other countries as part of hosting, security and email delivery.
Limiting account eligibility to United States residents does not mean every provider stores data only in the United States. Contact [email protected] with questions about processing locations. We will review requirements and update the notices before opening accounts internationally.
Keeping and deleting information
The local analytics delivery queue is kept for up to 30 days. PostHog may retain product events for up to one year. Account deletion removes the local analytics link and queue; contact us before deleting your account if you also want previously delivered analytics events removed, so we can locate them using the random identifier.
We keep your account and saved learning work while your account is active so you can return to it. Session cookies can last up to 30 days; the short session cache lasts up to five minutes. Verification codes expire after ten minutes. The Cookies notice explains device storage.
You can delete your account in Settings. This removes the account, its sessions, saved learning state and feedback linked to it from the active database. Any usage ledger is kept without its account link. Copies already delivered by email, operational logs and restricted backups may remain separately until removed or replaced; deletion is not an immediate erasure of every backup or email copy.
There is not yet a fixed automatic deletion schedule for all logs, feedback or backups. If you request deletion, we review these remaining copies and any limited information needed for security, a legal obligation or a dispute, and explain any lawful exception. We do not treat indefinite retention as permission to reuse deleted account data.
Your choices and rights
Use Settings to edit your profile, manage sessions, export available account data or delete your account. You can also email [email protected] for a copy, correction or deletion, or to ask about other privacy rights available under applicable law.
We may ask for proportionate information to verify that a request concerns your account. Do not email a password or verification code. We will follow applicable response deadlines and explain any lawful exception.
Your state may provide additional rights depending on the law and whether it applies to Nexary. This notice does not claim certification under any state privacy law. You can contact the relevant regulator about a concern, and exercising an applicable privacy right does not result in a penalty.
Users aged 16 and 17
Nexary beta accounts are for United States residents aged 16 or older. If you are 16 or 17, obtain parent or guardian permission before creating or continuing an account. A declaration is not verified parental consent. Learning access does not establish that you can enter an employment or commercial contract.
Learning work stays private by default. We do not sell young users’ data, use advertising profiles or require a public profile. If you believe a person under 16 has an account, contact us so we can investigate and remove it where appropriate.
Changes and contact
We will update this notice when our practices change and provide notice of material changes before they take effect where required. Questions, security reports and privacy requests can be sent to [email protected].