Privacy Policy
1. Who We Are
NyxCodex is operated by Nyx Collective LLC. "We," "our," or "us" refers to Nyx Collective LLC.
2. Information We Collect
Account Information. Organization name, administrator email, and billing information (processed by Stripe).
User Information. Staff display name and email address for authentication.
Training Activity Data. Module completions, scores, and session timestamps stored in Firebase, isolated per organization.
Usage Data. Aggregated feature usage to improve the Platform. Not linked to individuals.
3. What We Do Not Collect
- Protected Health Information (PHI) as defined by HIPAA.
- Patient records, insurance information, or Social Security numbers.
4. How We Use Your Information
- To operate and improve the Platform.
- To manage subscriptions and process billing via Stripe.
- To send transactional communications (receipts, support).
- To enforce our Terms of Service.
5. Third-Party Services
- Firebase (Google) — Authentication and data storage. Privacy Policy
- Stripe — Payment processing. Privacy Policy
- Google Gemini API — AI coaching. Terms
6. Security
Data is stored in Firebase with organization-scoped access control, encrypted transport (HTTPS), and authentication-gated access. No passwords are stored in plaintext.
7. Data Retention
Training data is retained for your subscription term plus 90 days post-cancellation for export. After that it may be permanently deleted. Contact us to request early deletion.
8. Your Rights
You may request access, correction, or deletion of your data by contacting info@nyxcollectivellc.com. We respond within 30 days.
9. Children's Privacy
NyxCodex is intended for healthcare professionals 18 and older. We do not knowingly collect information from children under 13.
10. Changes
Material updates will be communicated by updating the date above and emailing account administrators.