Nusync App Privacy Policy
Effective date: 26 October 2026
Version: 1.0
This Privacy Policy explains how Caliber Brands FZCO ("Caliber Brands", "we", "us", "our") collects, uses, shares and protects personal data when you use the Nusync mobile application ("Nusync" or the "App") on iOS and Android. Nusync is used to set up, control and monitor Nuwey air purifiers.
This Policy applies to the Nusync App only. Purchases and browsing on nutricookworld.com are covered by our website Privacy Policy, available at nutricookworld.com/pages/privacy-policy.
1. Who we are
The data controller responsible for your personal data is:
Caliber Brands FZCO
FZJOB2004, Jebel Ali Free Zone, P.O. Box 283785
Dubai, United Arab Emirates
Email: privacy@nutricookworld.com
The App was developed by VisionFit FZ LLC on behalf of Caliber Brands FZCO.
2. Personal data we collect
Depending on how you use the App, we collect the following categories of data. "Linked" means the data is associated with your account or identity.
| Category | What it includes | Linked to you |
|---|---|---|
| Account & profile | Email address, unique user ID, and optional profile details you choose to add: name, age range, household type, usage goal and profile photo (selected from your photo library through the system photo picker). | Yes |
| Device information | Registered appliance identifiers, device names, home and room assignments, device settings, device status and purifier data (for example air quality readings and filter status). | Yes |
| Connectivity information | Bluetooth device information and Wi-Fi network details, including the network name (SSID) and password used to connect your appliance during pairing. Processed through the Tuya SDK. The Wi-Fi password is held only temporarily while you pair an appliance or change its Wi-Fi network, and is passed through the Tuya SDK to your purifier so it can connect. It is not stored in the App or in our database. Tuya's handling of this information is described in its SDK Privacy Policy (see Section 4). | Yes |
| Notifications & identifiers | Push notification tokens, notification preferences and related identifiers used to deliver alerts and manage your connected devices. | Yes |
| Usage & diagnostics | Purifier interactions, operational activity and device logs associated with appliances registered to your account. | Yes |
| Location | Precise and approximate location may be accessed through the Tuya SDK during device pairing only, because some operating systems require location permission to read Wi-Fi network information during setup. The App does not use your location after pairing and does not track your location. When a home is created on the Tuya platform, the App sends placeholder coordinates rather than your actual location. | Yes |
| Other content you add | Names you give to your purifiers, homes and rooms. | Yes |
| Customer support | Emails you send to our support team, together with app version, build and device model information included to help us resolve your request. | Yes |
| Crash data | Crash reports and technical diagnostics collected through Firebase Crashlytics, which are not linked to your account. | No |
We do not collect health, fitness, financial or payment data through the App, and we do not use the App to track you across other companies' apps or websites. The App does not contain Firebase Analytics or any advertising or attribution SDKs.
3. How we use your data
- App functionality – to create and manage your account, pair and control your appliances, show device status, deliver alerts and notifications, and respond to support requests. Uses: account and profile data, device information, connectivity information, location (during pairing only), notification identifiers, usage data, other content you add, customer support data, crash data.
- Analytics and diagnostics – to understand how the App performs, identify and fix crashes, and improve reliability. Uses: crash data, usage and diagnostic data.
- Promotional notifications – if you turn on the Product Updates setting in the App, we send you push notifications about Nusync app features, offers and Nuwey devices. Uses: push notification token and notification preferences. You can turn this off at any time in the App settings or your device settings (see Section 9).
- Legal and security – to comply with applicable law, enforce our terms, and protect the security of the App and our users.
Where applicable data protection law requires a legal basis, we rely on: performance of our contract with you (providing the App, including pairing and controlling your appliances, which requires Bluetooth, local network and location access); your consent (promotional notifications and optional profile details); our legitimate interests (security, diagnostics and service improvement); and compliance with legal obligations.
4. Who we share data with
We do not sell or rent your personal data and do not share it for advertising. We share it only with the service providers below, who process it on our behalf subject to contractual obligations of confidentiality and security, or where required by law.
| Provider | Purpose | Data processed |
|---|---|---|
| Google Firebase / Google Cloud (Google LLC) | Authentication, database, file storage, backend functions, push notification delivery, crash reporting | Email, credentials and user ID (Authentication); user profiles, device records, preferences and push tokens (Cloud Firestore); profile photos (Cloud Storage); backend communication with Tuya for account creation and deletion (Cloud Functions); push notifications (Cloud Messaging); crash reports and diagnostics (Crashlytics) |
| Hangzhou Tuya Information Technology Co., Ltd. (Tuya App SDK / Tuya Cloud) | Connected-device platform that pairs, controls and monitors your appliances | Account and session information, registered appliances and home information, device status and activity logs, Bluetooth/Wi-Fi pairing information, location during pairing, push registration data |
| Apple Inc. (Apple Push Notification service) | Push notification delivery on iOS | Push notification tokens and notification content |
| VisionFit FZ LLC | App development | Access to the above systems where needed to develop the App |
| Microsoft Corporation (Microsoft 365) | Receiving and managing support emails | Support emails, email address, app version, build and device model |
Tuya's own data collection, security and retention practices are described in its SDK Privacy Policy: https://developerapp.tuyaeu.com/protocol/160a1ca463001023?lang=en
We may also disclose personal data to courts, regulators or law enforcement authorities where required by law, or in connection with a merger, acquisition or sale of our business, in which case we will require the recipient to protect your personal data in line with this Policy.
5. Where your data is stored and international transfers
- Google Firebase / Google Cloud: user profiles, device records, preferences, photos and backend functions are hosted in the me-central1 region (Doha, Qatar). Firebase Authentication data is processed in the United States. Daily database backups are retained for seven days in the same region (Doha, Qatar).
- Firebase Crashlytics and Firebase Cloud Messaging run on Google's global infrastructure and do not offer a choice of region. They may process data in the United States and other locations where Google or its agents maintain facilities.
- Tuya Cloud: our contract is with Hangzhou Tuya Information Technology Co., Ltd. (China). Your connected-device data is hosted in Tuya's Western Europe data centre (Google Cloud, Netherlands). Tuya maintains daily full backups and incremental backups, which, according to Tuya's published data residency policy, remain within that region.
Because these providers are located outside the United Arab Emirates and the Kingdom of Saudi Arabia, your personal data is transferred internationally. Where we do so, we put in place the safeguards required by applicable law, such as contractual data protection clauses with our providers, in line with the UAE Personal Data Protection Law (Federal Decree Law No. 45 of 2021), the KSA Personal Data Protection Law and other applicable data protection laws.
6. How long we keep your data
| Data | Retention period |
|---|---|
| Account and profile data, profile photo | For as long as your account is active, unless you update or remove it |
| Device records, settings, notification preferences, push tokens | While associated with an active account |
| Tuya Cloud account, device and connectivity data | For as long as your account is active, plus Tuya's seven day cancellation period after you delete your account |
| Tuya device logs | Up to seven days (Tuya's standard retention; we do not use extended log storage) |
| Sign-in (Authentication) records after account deletion | Removed from Google's live and backup systems within 180 days of deletion |
| Crash data (Firebase Crashlytics) | 90 days, after which removal from Google's live and backup systems begins |
| Database backups (Firestore) | Seven days (deleted records may remain in backups until they expire) |
| Customer support correspondence | 24 months after your request is closed |
| Records we are legally required to keep | As required by applicable accounting, tax, consumer protection or other laws |
When you delete your account, your data is removed as described in Section 8.
7. Device permissions
The App requests the following operating-system permissions. You can grant, deny or revoke each one at any time in your device settings; some features will not work without them.
- Bluetooth / Nearby devices – to discover and pair compatible Nuwey appliances.
- Local network – to discover and connect to appliances on the same Wi-Fi network.
- Location (while using the App) – to read Wi-Fi network information during device setup where the operating system requires it. Location is not used after pairing.
- Notifications – to deliver device alerts, badges and sounds, and promotional notifications if you turn on Product Updates.
Profile photos are selected through the system photo picker; the App does not request camera access or access to your full photo library.
8. Deleting your account
You can delete your Nusync account at any time from within the App: Settings → Support → Delete Account → Confirm. You can also request deletion by email to privacy@nutricookworld.com. Full details of what is deleted, what is retained and how long it takes are on our Nusync account deletion page at nutricookworld.com/pages/nusync-delete-account.
9. Your rights
Subject to applicable law, you have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate or incomplete data;
- delete your data (see Section 8);
- restrict or object to certain processing, including direct marketing;
- withdraw consent at any time, without affecting processing carried out before withdrawal;
- receive your data in a portable format;
- not be subject to decisions based solely on automated processing. Nusync does not make such decisions or profile you;
- lodge a complaint with the UAE Data Office, the Saudi Data & AI Authority (SDAIA) or another competent data protection authority.
To exercise any of these rights, email privacy@nutricookworld.com from the email address registered to your account. We will respond within 30 days. We may ask you to verify your identity before acting on a request.
To stop promotional notifications, turn off Product Updates in the App settings, turn off notifications for Nusync in your device settings, or contact us at the address above.
10. Security
We protect your data using measures including encryption in transit and at rest, access controls, authenticated backend services and regular backups. Our key service providers, Google and Tuya, maintain their own certified security programmes. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; if we become aware of a breach affecting your data, we will notify you and the relevant authorities as required by law.
11. Children
Nusync is rated 4+ and is suitable for use by all ages. However, a Nusync account must be created and managed by an adult aged 18 or over, such as a parent or guardian, who is responsible for use of the App within their household. Profile age ranges start at 18, and we do not knowingly collect personal data directly from anyone under 18. If you believe a person under 18 has provided us with personal data, contact us at privacy@nutricookworld.com and we will delete it.
12. Changes to this Policy
We may update this Policy from time to time. The current version is always available at nutricookworld.com/pages/nusync-privacy-policy. If we make material changes, we will notify you by email to the address registered to your account before they take effect. The effective date at the top of this page shows when it was last updated.
13. Contact us
Caliber Brands FZCO
FZJOB2004, Jebel Ali Free Zone, P.O. Box 283785
Dubai, United Arab Emirates
Email: privacy@nutricookworld.com