Privacy Policy
Last updated: July 16, 2026 • Effective: June 29, 2026
This Privacy Policy describes how Nucleus ("we," "our," or "us") collects, uses, and protects information about you when you use the Nucleus mobile application and web application (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.
1. Information We Collect
We collect information you provide directly when you create an account or use the Service:
- Account information: Your name, email address, and phone number.
- Profile information: Profile photo (either selected from our library or uploaded by you), job role, and online status.
- Work content: Projects, tasks, device schedules, change orders, RFIs, procurement records, program sheets, documents, and files you create or upload.
- Communications: Messages sent in the in-app chat, comments on tasks, and RFI responses.
- Device and usage data: Device type, operating system version, and general usage patterns (e.g., which features you use). We do not collect precise GPS location.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Service.
- Authenticate you and maintain your account security.
- Send you notifications about tasks, assignments, and project activity you have opted in to receive.
- Enable collaboration with other members of your organization within the Service.
- Respond to your support requests.
- Comply with legal obligations.
We do not sell, rent, or share your personal information with third parties for their own marketing purposes.
3. Information Shared Within Your Organization
Nucleus is a team collaboration tool. Information you enter — including your name, job role, profile photo, task assignments, and comments — is visible to other authenticated members of your organization within the Service. Administrators and Project Managers in your organization may have access to activity logs and audit trails.
4. Third-Party Service Providers
We use the following third-party services to operate the Service:
- Supabase (database and file storage) — Your data is stored on Supabase's infrastructure, which is hosted on Amazon Web Services (AWS) in the United States. Supabase is subject to its own Privacy Policy.
- Vercel (web hosting and content delivery) — The Nucleus web application is served through Vercel's global network. Vercel is subject to its own Privacy Policy.
- Resend (transactional email) — Account invites, sign-in links, and support/early-access notifications are sent through Resend. Resend is subject to its own Privacy Policy.
- Google Gemini (AI data extraction) — If you use the packing-slip scan feature, the photo you take is sent to Google's Gemini API to extract line items and quantities. Google processes this image solely to return the extracted data to the Service and is subject to its own Gemini API Additional Terms of Service.
We do not share your data with these providers beyond what is necessary to operate the Service. We do not currently process payments; no billing or payment information is collected through the Service.
5. Data Stored on Your Device
The Nucleus app stores the following information locally on your device using browser storage (localStorage):
- Your session token (to keep you logged in).
- Your most recently used account information (name and email) to simplify future logins on the same device.
- UI preferences such as your selected project and dark/light mode setting.
This data is stored on your device only and is not transmitted to any party other than Supabase for authentication purposes. You can clear this data at any time by logging out or clearing your browser/app data.
6. File Uploads and Storage
Files you upload to the Service (task attachments, drawings, profile photos) are stored in Supabase Storage and are accessible only to authenticated members of your organization. Files are served via time-limited signed URLs and are not publicly accessible. Profile photos stored in the "avatars" bucket are accessible to authenticated users within your workspace.
7. Push Notifications
With your permission, the Service may send push notifications to your device for task assignments, mentions, and project updates. You can disable notifications at any time through your device settings or within the app.
8. Camera and Photo Library Access
The Nucleus app may request access to your device camera and photo library to allow you to take and upload photos for task documentation. This access is only used when you actively initiate a photo upload. We do not access your camera or photo library in the background.
If you use the packing-slip scan feature specifically, the photo you take is sent to Google's Gemini AI service to automatically extract line items and quantities for your review — see Section 4 above. This only happens when you actively initiate a scan; no photo is sent to Google as part of ordinary task-attachment uploads.
9. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. You can delete your own account at any time from within the app (Profile → Danger Zone → Delete My Account), which revokes your login and removes your personally-identifying information (name, email, phone number, avatar). Some historical records you're attributed to — tasks, audit-log entries, chat messages — remain in your organization's workspace after deletion, since removing them would corrupt other people's project history. If you'd prefer we handle this for you, or have other data-removal questions, contact us at the email address below. Note that some information may be retained in audit logs for a limited period for security and compliance purposes.
10. Security
We take reasonable measures to protect your information, including encrypted data transmission (HTTPS/TLS), row-level security policies on our database to prevent unauthorized cross-tenant data access, and time-limited signed URLs for file access. However, no system is completely secure, and we cannot guarantee absolute security.
11. Children's Privacy
The Service is intended for use by professionals 18 years of age or older. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that a person under 18 has provided us with personal information, we will delete it.
12. Your Rights
Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, or delete your data. To exercise any of these rights, please contact us at the email address below. We will respond to your request within 30 days.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
14. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
- Email: hello@getnucleusapp.com