How we handleyour data.

Who and what this policy covers

Nejma is the product brand and software supplier operating nejma.app. This policy applies to the Nejma website, Nejma ID accounts, product licensing and activation, product delivery, support, analytics and other services that link to this policy.

Paddle is the Merchant of Record for purchases completed through Paddle. Paddle processes payment, billing, tax, fraud-prevention and receipt information under Paddle's own terms and privacy notices. Nejma does not receive or store full payment-card details from Paddle.

Information we collect

• Account information, including email address, display or username information, verification state, internal account identifiers and account preferences.
• Authentication and security information, including server-side session records, request metadata, rate-limit signals and security events needed to protect accounts and services.
• Licensing information, including product entitlements, license status, activation history, device name and platform, and pseudonymous Device Identity v2 signals used to enforce device and trial rules. Device identity signals are protected before persistence; the activation website does not expose the underlying device values.
• Purchase information returned by Paddle, such as transaction identifiers, purchased product, price/currency, tax and total information, customer/subscription identifiers when applicable, receipt or invoice metadata, and refund status.
• Technical and usage information, including browser/app type, operating system, product version, diagnostics, performance information and feature interactions when those measurements are enabled.
• Messages, support requests, contact-form submissions and newsletter details that you choose to provide.

How we use information

• Create and secure Nejma IDs, authenticate sessions and recover accounts.
• Provide trials, paid licenses, product delivery, updates, device management and activation.
• Process and reconcile purchases, refunds and entitlements with Paddle.
• Prevent fraud, abuse, license circumvention and unauthorized access.
• Operate support and contact workflows and send product communications you requested.
• Measure reliability, traffic and product usage when optional analytics consent is active.
• Comply with legal obligations and establish, exercise or defend legal rights where necessary.

Analytics

Nejma uses Google Analytics 4 as an optional measurement service. Nejma does not load Google Analytics until analytics consent is granted through the site's cookie controls where that consent flow applies.

Guests are measured without a Nejma account identifier. When a visitor is signed in and analytics consent is active, Nejma may send only the account's internal Nejma ID as Google Analytics User-ID. Nejma does not send account email addresses, names, usernames, passwords, verification codes or license keys to Google Analytics as identity fields.

Advertising storage, ad user-data and ad-personalization are disabled in Nejma's current analytics-only configuration. Analytics consent can be changed later through Cookie settings in the footer.

When information is shared

Nejma does not sell personal information. Limited information may be processed by infrastructure, hosting, email, analytics, support, security and payment providers that help operate the service, subject to their applicable agreements and safeguards.

For Paddle purchases, Paddle acts as Merchant of Record. Nejma exchanges the minimum transaction and entitlement metadata needed to create checkout, fulfill the purchase, issue or revoke access, reconcile refunds and provide support.

Information may also be disclosed when required by law or when reasonably necessary to protect users, Nejma, the service or the public from fraud, abuse, security threats or unlawful activity.

Retention

Information is kept only for as long as reasonably necessary for the purpose for which it was collected, account and product security, license enforcement, transaction records, legal obligations, dispute resolution and backup/recovery needs. Different data categories may have different retention periods.

Deleting or closing an account does not necessarily require immediate deletion of transaction, anti-fraud, security or other records that must be retained for legal or legitimate operational reasons.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, export, object to, or restrict certain uses of personal information. Requests can be sent through the Nejma Contact page. Identity verification may be required before a request is completed.

Optional analytics can be refused or changed through Cookie settings. Transactional account, security, purchase and license communications may still be required to provide a requested service.

Security

Nejma uses technical and organizational measures intended to protect account, licensing and service data, including HTTPS, server-side sessions, controlled infrastructure access, revocable sessions and licenses, rate limits and recoverable database backups. No internet service can guarantee absolute security.

International processing

Nejma and its service providers may process information in countries other than the one where you live. Where required, appropriate contractual, organizational or legal safeguards are used for international transfers.

Children

Nejma is not designed as a children's service. If local law requires parental or guardian consent for a minor to use a paid digital service, that consent must be obtained before purchase or account use.

Privacy contact and changes

Privacy questions and rights requests can be sent through https://nejma.app/contact. Product-support matters should use https://nejma.app/support.

This policy may be updated as Nejma products, providers or legal requirements change. Material updates are identified by the Last Updated date and, when appropriate, additional notice.