App Privacy Policy

The App lets you (a "Consumer") view your purchase history, digital product "Passports", repair status, and saved jewellers across the independent jewellery businesses you deal with. Those businesses ("Jewellers") are separate data controllers of the records they create about you, such as invoices, repairs and passports. Nexpura hosts and displays that data but does not control how a Jeweller uses it. For questions about a Jeweller's own records, contact that Jeweller directly.

We collect: (a) account data you provide — your name, email, optional phone number, and password (stored hashed); (b) content you create — reviews, saved jewellers and wishlist items; (c) camera and photos, only when you invoke those features; (d) purchase and passport data surfaced from the Jewellers you are linked to; (e) device and technical data — device identifiers, app version, IP address, crash and diagnostic data, and push tokens if you enable notifications; and (f) authentication tokens stored securely on your device.

We use your information to create and secure your account; display your cross-Jeweller purchase history, passports and repair status; deliver the notifications you enable; provide support; detect fraud and abuse; maintain and improve the App; and comply with the law. We do not sell your personal information, do not use it for third-party advertising, and do not track you across other companies' apps or sites.

The camera and photo library are used only to capture or attach images to your records, and only when you use that feature. You can revoke these permissions at any time in your device settings, though some features will not work without them.

If you enable push notifications, we use them to send repair, order and status updates. You can manage or disable notifications at any time in your device settings.

We share your information only with the subprocessors that operate the App, and with the Jeweller(s) you interact with as needed to provide the service. We also disclose information where required by law. Each subprocessor maintains its own privacy and security commitments, and we limit what we share to what is reasonably required.

Supabase

Database, authentication and file storage.

Vercel

Hosting and edge delivery.

Expo / EAS

App delivery and over-the-air updates.

Resend

Transactional email.

Twilio

SMS notifications where enabled.

Stripe

Payments where applicable.

Anthropic

AI-assisted features where enabled.

OpenAI

AI-assisted features where enabled.

Some of our subprocessors process data outside Australia (for example, in the United States or the European Union). Where we disclose personal information overseas, we take reasonable steps to ensure it is handled in a manner consistent with the Australian Privacy Principles.

We use reasonable technical and organisational measures to protect your information, including encryption in transit, secure on-device storage of authentication tokens, access controls and monitoring. No system is perfectly secure, so we encourage you to use a strong, unique password.

We retain your account data while your account is active. Records that a Jeweller created about you are retained in line with that Jeweller's obligations and our legal duties (for example, tax and transaction records).

You can delete your account and Consumer data directly in the App (Account → Delete Account), by emailing support@nexpura.com, or via nexpura.com/account/delete. Deletion removes your login, profile, saved jewellers and wishlist. Records held by Jewellers — invoices, passports and repairs — are the Jeweller's business records and are not deleted by deleting your Consumer account; contact the Jeweller about those. Subject to applicable law, you may also access, correct, obtain a copy of, and withdraw consent for your personal information. If you are unhappy with how we have handled your data, you can complain to the Office of the Australian Information Commissioner (OAIC) or your local authority.

The App is not directed to anyone under 16, and we do not knowingly collect the personal information of children. If you believe a child has provided personal information through the App, please contact us at hello@nexpura.com so we can take appropriate action.

We may update this policy from time to time. Where changes are material, we will give reasonable notice in-app or by email. The date at the top of this page reflects the current version.

The Nexpura consumer app is operated by NEXPURA PTY LTD (ACN 696 370 171 · ABN 93 696 370 171), registered in New South Wales, Australia. For questions about this policy or to exercise your privacy rights, contact us at hello@nexpura.com.