WritingProducts

Nexus Privacy Policy

Effective date: March 21, 2026

1. What Nexus Is

Nexus is a workout and nutrition tracking app that operates as a ChatGPT app. You interact with Nexus by chatting naturally in ChatGPT, and Nexus logs, retrieves, and manages your fitness and meal entries on your behalf. Nexus does not have a standalone frontend or mobile app — all interactions happen through ChatGPT.

2. Categories of Personal Data Collected

Nexus collects only the minimum data required to provide workout and nutrition tracking. We collect the following categories of personal data:

Account Information

  • User ID: A unique identifier from your authentication provider (Google via Supabase) used to associate your entries with your account.
  • Display name: Your name as provided by your Google account, shown to friends you connect with.
  • Email address: Provided during Google authentication, used for account identification.

Workout Data

  • Exercise names and identifiers
  • Sets, reps, and weight lifted
  • Duration and distance for cardio activities
  • Optional notes you provide
  • Date of the workout

Nutrition Data

  • Food item names and quantities
  • Macronutrient information (calories, protein, carbs, fat)
  • Meal type (breakfast, lunch, dinner, snack)
  • Optional notes you provide
  • Date of the meal

Social / Friends Data

  • A unique friend code (e.g., "NEXUS-R3M8") generated for your account
  • Friend connections you create (who you are friends with)

What We Do NOT Collect

  • No location or GPS data
  • No IP addresses or device identifiers
  • No conversation history or chat transcripts from ChatGPT
  • No biometric data
  • No financial or payment information
  • No behavioral profiling, surveillance, or cross-app tracking

3. Purposes of Use

We use the collected data strictly for the following purposes:

  • Providing the service: Storing, retrieving, updating, and deleting your workout and meal entries.
  • Account identification: Associating your entries with your account so only you (and friends you choose) can access them.
  • Social features: Enabling friend connections so you can view each other's workout and nutrition data.
  • Data integrity: Validating entries and computing nutritional totals server-side.

We do not use your data for advertising, marketing, behavioral profiling, or training AI models. We do not sell, rent, or trade your personal data.

4. Categories of Recipients

Your data may be shared with the following categories of recipients, solely to provide the service:

  • Supabase: Provides authentication (Google OAuth) and hosts our PostgreSQL database where your entries are stored. Supabase processes your user ID, email, and display name for authentication, and stores all entry data. Supabase Privacy Policy
  • Google Cloud: Our server runs on Google Cloud Run. Google Cloud processes requests as our infrastructure provider. Google Cloud Privacy Notice
  • OpenAI / ChatGPT: You interact with Nexus through ChatGPT. Your conversations with ChatGPT are governed by OpenAI's Privacy Policy. Nexus only receives structured tool calls from ChatGPT (not your full conversation).
  • Friends you connect with: If you add friends through Nexus, they can view your workout and nutrition entries. You control who you connect with.

We do not share your data with any other third parties, advertisers, or data brokers.

5. User Controls

You have the following controls over your data:

  • View your data: Use the history tool in ChatGPT to view all your logged entries at any time.
  • Update entries: Use the update tool to correct any entry.
  • Manage friends: Add, accept, reject, or remove friend connections at any time using the friends tool.
  • Disconnect: You can disconnect Nexus from ChatGPT at any time, which stops all data collection.
  • Data deletion: To request deletion of your account and all associated data, contact us at the email below. We will process deletion requests within 30 days.

6. Data Security

  • All data is transmitted over HTTPS.
  • Authentication uses industry-standard OAuth 2.0 with PKCE via Google and Supabase.
  • Your data is stored in a managed PostgreSQL database with access restricted to authenticated users.
  • Each user can only access their own data (or friend data, with mutual consent).

7. Data Retention

  • Your data is retained for as long as your account is active.
  • Upon account deletion request, all your entries, friend connections, and authentication tokens are permanently deleted within 30 days.
  • OAuth tokens expire automatically (access tokens after 1 hour, refresh tokens after 30 days).

8. Children's Privacy

Nexus is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. If we learn that we have collected data from a child under 13, we will promptly delete that data.

9. Contact

For privacy questions, data access requests, or deletion requests:

10. Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we will notify users. Continued use of Nexus after changes constitutes acceptance of the updated policy.

Last updated: March 21, 2026