Nucleus credits: privacy

Who we are. Nucleus credits is run by Fortifi Sdn Bhd, Malaysia. Questions or requests: ceo@ark.tg.

The short version. Your ideas live on your Mac. When you use Nucleus credits, the AI step you ask for is sent to us, passed to the AI provider, and the answer is sent back. We keep a record of what the step cost, never what it said.

What we keep

• Your email address, to sign you in and send your codes.
• A random id for each Mac you sign in from (stored only as a one-way hash), so free credits are given once per person and once per Mac.
• Sign-in tokens, stored only as one-way hashes.
• A line for each step: what kind of step it was (for example "read a link"), which model ran it, how many tokens it used, what it cost and how many credits it took, and when.
• Top-ups (the Stripe payment reference, amount and currency) and voucher codes you used.

What we never keep: your prompts, ideas, files, pictures or the AI's replies. They pass through to the AI provider and back, and are not written to our database or logs.

Who else handles it

• Anthropic (Claude) runs the AI steps; OpenAI paints cover pictures; TypeSafe (Jev) estimates how you would answer a suggestion card or a new brief, whether a Dictionary draft's formula says what its ideas say, and whether two related ideas belong together, and only after you say yes in Nucleus. Each receives only the step it is answering, under its own API terms, which do not use API data to train models by default.
• What Jev sees. Nothing goes to Jev until you say yes in Nucleus, which first lists what it sends. You can turn Jev off any time in Settings. After that yes: for a suggestion card, the card's question, reasons and choices, the title, description and summary of the ideas it names, your active principles, what you told the Suggestions panel and how you answered recent cards. For a Dictionary draft, its name, formula and reading, the names and meanings of its symbols, and the title, description, summary and quoted words of the ideas it came from. For two related ideas, the title, description and summary of each. For a new brief, only the words you have typed and the names and descriptions of the matching templates. Never your files, sources, wiki pages or About you, or where anything is on your computer. A card or draft is Claude's own words, so it can mention what Claude read. Jev only suggests: nothing is approved, rejected or blended without your click.
• Stripe takes card payments. We never see your card number.
• Resend sends the sign-in emails.
• Vercel hosts the service and Neon holds the database, both in Singapore.

Using your own Claude instead. In Settings, AI, you can choose your own Claude. Then no step is sent to us at all.

Nucleus Cloud. If you use Nucleus in the browser at nucleus.oeru.com instead of on a Mac, your ideas live with us, not on your Mac:

• Each account gets its own small computer with its own encrypted disk, run by Fly.io in Singapore. It holds your ideas, sources, pictures, Dictionary and settings. Only your signed-in account can reach it.
• We keep a sign-in cookie in your browser for up to 30 days, and the number of your computer next to a one-way hash of your email.
• Links you drop are fetched by your computer, from our servers.
• AI steps go through Nucleus credits exactly as above. Everything else stays on your computer's disk.
• We do not read your ideas. We reach your computer only to run, update, repair or delete it.
• Fly.io keeps short-lived daily snapshots of each disk, so a failed disk can be restored.
• Deleting your account deletes your computer, its disk and its snapshots. You can ask for a copy of your ideas first.

How long we keep it. Your account and its ledger stay while your account is open, and payment records for as long as tax law requires (seven years in Malaysia).

Your rights. Under Malaysia's Personal Data Protection Act 2010 you can ask to see, correct or delete your data. Email ceo@ark.tg from the address you sign in with. Deleting your account removes your email, tokens and device records; payment records we are required to keep stay, without your email on them.