Privacy Policy

Who we are

Sage AI is a voice life coach run by Nubri GmbH, Liebenowzeile 22, 12167 Berlin, Germany (info@nubri.co). Nubri GmbH is the controller for the data described here.

What we store

• Account: your email address, name, time zone, plan and sign-in details. Sign-in (email and password, or Google) runs on Supabase, which keeps your login record and a hashed password.
• Coaching data: your preferences from onboarding, the text of your conversations with Sage, goals and habit logs, nudges, insights, action drafts, and the memories Sage keeps about you (with a numeric summary of each, used to find relevant ones).
• Voice: when you speak, the recording is sent to Deepgram for transcription and is not stored by us; only the text is kept. Sage's spoken replies are made by ElevenLabs from the reply text with a stock voice.
• Free use: a one-way hash of your email inbox, so the trial and the free daily session are given once per inbox, even after an account is deleted.
• Payments: Stripe handles card details; we store your Stripe customer number and subscription status.
• Visits: a random visitor ID and where you came from (stored in your browser) and the pages you open on our site. If you give us your email on the landing page, we store it with that context.

Why, and on what basis

We use this data to provide the coaching you signed up for (Art. 6(1)(b) GDPR), and to keep the service secure, prevent abuse of free use, and understand which pages bring visitors (Art. 6(1)(f) GDPR). Health or other sensitive details you choose to tell Sage are used only to coach you, on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you can withdraw by deleting them or your account.

AI processing

Your messages, the relevant memories and your preferences are sent to Anthropic's Claude models on Amazon Bedrock (AWS) to write Sage's replies, briefs, nudges and insights, and to Amazon Titan on Bedrock to summarise memories. AWS does not use this data to train models.

Who processes data for us

• Amazon Web Services (hosting, AI models, email)
• Supabase (database and sign-in)
• Deepgram (speech to text)
• ElevenLabs (text to speech)
• Stripe (payments)
• Google, only if you sign in with Google

Some of them are in the United States; transfers rely on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. We do not sell your data.

Retention and deletion

We keep your data while you have an account. You can delete single memories and goals in the dashboard, and delete your whole account in Settings: this cancels any subscription first and then removes your account and all coaching data at once. Your sign-in record at Supabase is removed when you ask us at info@nubri.co. Invoices are kept as tax law requires (up to 10 years).

Cookies and storage

We use only what the site needs: sign-in cookies set by Supabase, and the visitor ID and first-visit details in your browser's local storage. No advertising or third-party tracking cookies.

Server logs

Our web server logs each request: IP address, time, the address requested, the response, and your browser's user agent. We use the logs to keep the service running and secure (Art. 6(1)(f) GDPR); they are deleted automatically after at most 8 days.

Your rights

You can ask for access to, correction, deletion, restriction or export of your data, and object to processing based on legitimate interests: email info@nubri.co. You can also complain to a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.