Nexo

Política de privacidad

Actualizada el 2026-11-08

Qué datos trata Nexo, quién los trata, para qué, con qué base legal, cuánto tiempo y qué derechos tienes. Cumple el Reglamento General de Protección de Datos (RGPD) y la Ley Orgánica 3/2018 (LOPDGDD).

Responsable del tratamiento

Titular y responsable del tratamiento: Daniel Gómez. Sitio web: worldnexo.com.

Contacto para todo lo relacionado con tus datos: support.pyou@gmail.com.

Qué datos tratamos

Para qué y con qué base legal

Quién puede ver tus datos

Proveedores (encargados del tratamiento)

Transferencias fuera de la UE

Cloudflare, Vercel y Google pueden tratar algunos datos técnicos fuera de la Unión Europea (por ejemplo, en Estados Unidos). Lo hacen al amparo del Marco de Privacidad de Datos UE-EE. UU. y de cláusulas contractuales tipo aprobadas por la Comisión Europea.

Cuánto tiempo los guardamos

Tus derechos

Tienes derecho de acceso, rectificación, supresión, oposición, limitación del tratamiento y portabilidad, y a retirar tu consentimiento cuando quieras.

Si crees que no hemos tratado bien tus datos, puedes reclamar ante la Agencia Española de Protección de Datos (www.aepd.es).

Menores

Nexo es para mayores de 14 años (art. 7 LOPDGDD), o de la edad mínima que fije la ley de tu país si es mayor. Si no la tienes, no puedes crear una cuenta. Si sabemos que una cuenta es de alguien por debajo de esa edad, la borraremos.

Seguridad

La comunicación va cifrada (HTTPS, TLS 1.2 o superior), las contraseñas se guardan cifradas, cada cuenta solo puede acceder a sus propios datos y las fotos de perfil se redibujan al subirlas, lo que borra los datos ocultos del archivo (como la ubicación GPS). Si detectamos una brecha de seguridad que afecte a tus datos, lo comunicaremos a la AEPD y, cuando corresponda, a ti.

Cambios

Si esta política cambia, la versión nueva estará aquí con su fecha de actualización y, si el cambio es importante, te avisaremos en la app.

Contacto: support.pyou@gmail.com

Privacy policy

Updated 2026-11-08

What data Nexo processes, who processes it, why, on what legal basis, for how long and what your rights are. It complies with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Data controller

Owner and data controller: Daniel Gómez. Website: worldnexo.com.

Contact for anything about your data: support.pyou@gmail.com.

What data we process

  • Account: your email address and password. The password is handled by the sign-in system (Supabase Auth), which only keeps a hashed version; Nexo never sees it. If you sign in with Google, Google gives us your name and email (never your Google password).
  • Profile: your display name, language, time zone, profile photo if you upload one, and your answers to the first questions (whether you study, study and screen time, topics you prefer to avoid and areas you want to improve).
  • Your game: habits, goals and activities, missions, streaks, quizzes, XP, in-game coins, league, achievements, collections, decorations, your city and how you customised Nexo.
  • What you write: diary and agenda entries (if you set a diary password, only a hash of it is kept, never the password) and your messages in your clan chat.
  • If you switch them on: your browser’s notification subscription, with your time zone, language and a small summary (streak, last active day and, for habits with a time, their name, time, days and whether you did them today) so the notifications say true things and remind you of each habit on time. You can turn habit reminders off in Settings › Notifications.
  • If you turn on real weather for your city: the place you choose (a city you search for or your approximate position, rounded to about 1–11 km; never your exact location). It is saved in your game.
  • Essential technical data: IP address and browser data received by the servers when serving the site.

Why, and on what legal basis

  • Creating your account, saving your progress and providing the service (game, league, clans, chat): performance of the contract you accept when signing up (Art. 6(1)(b) GDPR).
  • Adapting missions and questions to your answers and preparing your weekly summary: performance of the contract.
  • Notifications, real weather and analytics cookies: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time without affecting the rest of the service.
  • Security, abuse prevention and handling reports about content: legitimate interest and legal obligations (Art. 6(1)(c) and (f) GDPR).
  • We do not sell your data, show advertising, make automated decisions with legal effects on you or build commercial profiles.

Who can see your data

  • Nobody but you can read your game, diary or agenda: the database itself enforces it (row-level security).
  • Weekly league: your display name and your XP of the week are seen by the players in your league group.
  • Clan: your clan’s members see your chat messages, your display name, your public profile (photo only if you choose to show it, frame, titles, 3 statues, your Nexo’s look and your levels) and, if you allow it in Settings, your city.
  • We never show your email to other players.

Providers (processors)

  • Supabase (database, sign-in and server functions). Data is stored in the European Union (Paris, France).
  • Cloudflare (hosting and delivery of the website).
  • Vercel (alternative hosting of the website, so it keeps working when Cloudflare is unavailable).
  • Google: Google sign-in (only if you choose it) and Google Analytics (only if you accept it, with a random browser identifier; never your email, name or game). Fonts are served from our own website, not from Google.
  • Open-Meteo (Switzerland), only if you turn on real weather: it receives the approximate place you chose and, as with any website, the IP address of the request. Switzerland has an adequacy decision from the European Commission.
  • Your browser’s push services (Google, Mozilla, Apple or Microsoft, depending on the browser), only if you switch notifications on.

Transfers outside the EU

Cloudflare, Vercel and Google may process some technical data outside the European Union (for example, in the United States), under the EU-US Data Privacy Framework and standard contractual clauses approved by the European Commission.

How long we keep it

  • Your account and game data: while you have the account. Deleting it removes it from the database at once; the provider’s automatic backups roll over within a few days.
  • Your clan chat messages: while the clan exists; if you delete your account, they stay without your name (shown as «Someone»).
  • Google Analytics statistics: up to 14 months.

Your rights

You have the right of access, rectification, erasure, objection, restriction of processing and portability, and to withdraw your consent at any time.

  • Download all your data: Settings → Your data → Download my data.
  • Delete your account and all its data: Settings → Your data → Delete my account.
  • Correct your profile and preferences: in Profile and Settings.
  • Any other request: write to support.pyou@gmail.com from your account’s email. We will reply within one month at the latest.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Minors

Nexo is for people aged 14 and over (Art. 7 LOPDGDD), or the minimum age set by the law of your country if it is higher. If you are younger, you may not create an account. If we learn that an account belongs to someone under that age, we will delete it.

Security

Communication is encrypted (HTTPS, TLS 1.2 or higher), passwords are stored encrypted, each account can only access its own data and profile photos are redrawn when uploaded, which removes the file’s hidden data (such as the GPS location). If we detect a security breach affecting your data, we will notify the Spanish Data Protection Agency and, where appropriate, you.

Changes

If this policy changes, the new version will be here with its update date and, if the change is important, we will let you know in the app.

Contact: support.pyou@gmail.com

Ir a Nexo