Privacy Policy

Welcome to Norbu.ai ("Norbu.ai", "we", "our", or "us").

Norbu.ai is an AI-powered gemstone identification application that helps users identify natural gemstones, synthetic gemstones, simulants, and gem characteristics using artificial intelligence, images, and gemological observations.

Your privacy is important to us. This Privacy Policy explains how we collect, use, store, protect, and disclose your information when you use the Norbu.ai mobile application, website, and related services.

We are committed to collecting only the minimum amount of personal information necessary to provide our services while maintaining appropriate standards of privacy and security.

By using Norbu.ai, you acknowledge the practices described in this Privacy Policy.

Norbu.ai is the data controller responsible for your personal information.

For questions regarding this Privacy Policy or your personal information, please contact us:

Email: norbuaigem@gmail.com

We collect only information necessary to provide, secure, and improve Norbu.ai.

We use information to:

• Create and maintain your account
• Authenticate users
• Provide AI-powered gemstone identification
• Improve AI-powered services
• Improve application performance
• Personalize user experience
• Provide customer support
• Manage purchases and subscriptions
• Detect fraud and misuse
• Maintain security
• Analyze application usage
• Comply with applicable laws
• Send important service notifications

We do not sell your personal information.

Where GDPR applies, we process your personal information based on one or more applicable lawful bases, including:

• Your consent
• Performance of a contract
• Compliance with legal obligations
• Our legitimate interests in operating, securing, and improving Norbu.ai
• Protection of vital interests where applicable

Norbu.ai uses trusted third-party service providers to operate, host, secure, analyze, and improve our services. Depending on the features you use, information may be processed by one or more of the following:

• Google Gemini – AI-powered gemstone analysis
• OpenAI – AI processing and language services
• Amazon Web Services (AWS) – Cloud hosting, storage, and infrastructure
• Google Cloud Platform (GCP) – Cloud infrastructure, computing, and AI services
• Google Analytics for Firebase – Application analytics, crash reporting, diagnostics, and performance monitoring
• Apple App Store – Payment and subscription processing for applicable iOS purchases
• Google Play – Payment and subscription processing for applicable Android purchases

These providers may process information as necessary to provide their respective services and in accordance with their applicable terms and privacy practices.

Norbu.ai uses artificial intelligence to analyze gemstone images and gemological observations.

Submitted images and gemstone information may be processed using AI technologies, including third-party AI services, to generate identification results.

Norbu.ai does not sell user-submitted gemstone images for advertising or marketing purposes.

Users may request deletion of their account and associated personal information, subject to applicable legal and operational retention requirements.

AI-generated gemstone identifications are provided for educational and informational purposes only and should not be considered professional gemological certification.

For accurate identification, authenticity, treatment, origin, or valuation, users should submit the gemstone to an accredited gemological laboratory for professional testing.

Norbu.ai may offer subscriptions, in-app purchases, or premium features.

Payments made through the mobile application are processed through the applicable platform, including the Apple App Store or Google Play.

Norbu.ai does not directly collect or store your full credit card, debit card, or payment-card details.

Norbu.ai may receive limited information necessary to confirm and manage purchases, subscriptions, entitlements, renewals, cancellations, and customer support.

Limited subscription and transaction records may be retained for account management, billing support, legal, accounting, fraud-prevention, and customer-service purposes.

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect information, including:

• Encryption during transmission
• Secure cloud infrastructure
• Access controls
• Authentication mechanisms
• Monitoring and security practices

No electronic transmission or storage system can be guaranteed to be completely secure.

We retain personal information only for as long as reasonably necessary to:

• Provide our services
• Improve application and AI-powered services
• Maintain account functionality
• Manage subscription and transaction records
• Provide customer support
• Meet legal, accounting, or regulatory obligations
• Resolve disputes
• Enforce agreements

Users may request deletion of their account and associated personal information, subject to applicable legal and operational retention requirements.

Depending on your jurisdiction, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Restrict processing
• Object to certain processing
• Request data portability where applicable
• Withdraw consent where processing is based on consent
• Lodge a complaint with an applicable data protection authority

To exercise these rights, contact: norbuaigem@gmail.com

Norbu.ai is not intended for children under the age of 13 or the minimum age required by applicable law.

We do not knowingly collect personal information from children in violation of applicable law. If we become aware that such information has been collected improperly, we will take reasonable steps to delete it.

Your information may be processed or stored in countries other than your country of residence, including through our technology and cloud service providers.

Where required by applicable law, appropriate safeguards will be used to protect personal information transferred internationally.

California residents may have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including rights to:

• Know what personal information we collect
• Request access to personal information
• Request correction of inaccurate personal information
• Request deletion of eligible personal information
• Receive information regarding how personal information is used or disclosed
• Limit certain uses of sensitive personal information where applicable
• Not be discriminated against for exercising applicable privacy rights

Norbu.ai does not sell personal information or share personal information for cross-context behavioral advertising.

Privacy requests may be submitted to: norbuaigem@gmail.com

Norbu.ai may collect or process:

• Email address
• User-submitted gemstone images and gemstone information
• App activity
• Device or technical information
• Diagnostics
• Limited purchase and subscription information

This information may be used for:

• User authentication
• AI-powered gemstone identification
• Application functionality
• Purchase and subscription management
• Security
• Analytics
• Customer support
• Performance improvements

Payments made through Google Play are processed by Google Play. Norbu.ai does not directly collect or store users' full payment-card credentials.

Norbu.ai does not sell user data.

Where supported, user data is encrypted during transmission and protected using appropriate security practices.

Norbu.ai may collect or process:

• Contact Information – Email address
• User Content – Gemstone images and identification requests
• Usage Data – Application interactions
• Diagnostics – Crash and performance information
• Device Information – Limited technical information
• Purchase Information – Limited subscription and purchase-related information

This information may be used for:

• Account management
• AI gemstone identification
• Application functionality
• Purchase and subscription management
• Customer support
• Analytics
• Security
• Performance improvements

Payments made through the Apple App Store are processed by Apple. Norbu.ai does not directly collect or store users' full payment-card credentials.

Norbu.ai does not track users across third-party apps or websites for advertising purposes.

Subscriptions purchased through the Apple App Store or Google Play are managed through the user's applicable Apple or Google account.

Subscriptions may automatically renew unless cancelled according to the terms presented at purchase.

Users can manage or cancel subscriptions through their Apple App Store or Google Play subscription settings.

Cancellation generally prevents future renewal and does not automatically provide a refund for the current subscription period.

Refund requests for purchases processed by Apple or Google are subject to the applicable platform's policies and applicable law.

Additional subscription and cancellation terms may be provided in the Norbu.ai Terms of Service and at the time of purchase.

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or business practices.

When material changes are made, we will update the Effective Date and post the revised Privacy Policy within the application or on our website.

Where required, we may provide additional notice regarding material changes.

If you have questions about this Privacy Policy, your personal information, or our privacy practices, please contact: