⚖️ Official Compliance

Privacy Policy

Nimda AI — Veterinary First-Aid & Animal Health Triage Assistant

Application: Nimda AI
Package Name: com.nimda.nimda_ai
Effective Date: September 30, 2026
Last Updated: September 30, 2026
Official Contact: support@nimda-ai.web.app
Public Deletion Portal: Data Deletion Portal

Critical Veterinary Exclusivity Notice

Nimda AI is designed 100% EXCLUSIVELY for animal health, pet first aid, and veterinary clinical triage. The application DOES NOT provide human healthcare, human medical diagnosis, or human treatment guidance under any circumstances. All guidance provided is strictly informational and supportive physical first aid; it DOES NOT replace in-person examination, diagnosis, or prescription care by a licensed, certified veterinary doctor.

1. Introduction & Scope

Nimda AI ("we", "our", or "us") is dedicated to protecting your privacy and handling user information with the utmost transparency, clinical integrity, and security. This Privacy Policy applies to the Nimda AI mobile application (Package: com.nimda.nimda_ai) and its official companion website.

By installing, accessing, or using Nimda AI, you acknowledge and agree to the practices described in this Privacy Policy.

2. Information We Collect

We collect only the minimum data strictly necessary to provide authentic, responsive veterinary triage, account management, and clinic location services.

A. Account & Profile Information (Firebase Authentication)

When you create an account or sign in to Nimda AI, we collect:

  • Email Address: Used as your unique account identifier, for authentication, and for account recovery/password reset.
  • Password: When creating an email/password account, your password is encrypted and hashed by Google Firebase Authentication. We never have access to your plaintext password.
  • Google Sign-In Data: If you authenticate using Google Sign-In, we receive your public Google profile information (Display Name, Email Address, Profile Photo URL, and OAuth authorization tokens).
  • Account Metadata: Firebase User Identification (UID), account creation timestamp, and last sign-in timestamp.
  • Custom Display Name: An optional pet parent / owner name that you can edit inside the Settings screen.

B. Just-In-Time Device Permissions & Hardware Data

Nimda AI requests device permissions strictly Just-In-Time (JIT) at the exact moment you activate a related feature. Permissions are NEVER requested on initial app launch:

  • Camera Access (android.permission.CAMERA): Requested only when you tap to take a real-time photo of an animal's injury, wound, or affected anatomical area.
  • Photo Gallery / Storage Access (android.permission.READ_MEDIA_IMAGES / READ_EXTERNAL_STORAGE): Requested only when you choose to select an existing animal photo from your device gallery.
  • Microphone Access (android.permission.RECORD_AUDIO): Requested only when you initiate a live two-way spoken consultation with Dr. Nimda AI.
  • Location Coordinates (android.permission.ACCESS_FINE_LOCATION & ACCESS_COARSE_LOCATION): Requested only when you tap "Find Clinics" or consent to 10 km clinic discovery.

C. Ephemeral Consultation & Multimodal AI Data

  • Animal Photos: Images uploaded for visual symptom analysis are transmitted securely via HTTPS to the Google Gemini Multimodal AI API for species verification and visible symptom inspection. Photos are processed ephemerally in volatile memory during your active session; they are NEVER stored on permanent remote databases, NEVER sold, and NEVER used for advertising.
  • Spoken Audio: During live voice consultations, microphone input is transcribed in real-time using on-device speech recognition (SpeechToText). We do NOT record or store permanent voice audio files on remote servers.
  • Clinical Intake Responses: Answers provided to triage questions (e.g., animal age, timeline of injury, pain signs, appetite) are stored in volatile device RAM during your consultation to formulate the clinical report. When you exit the consultation or sign out, this in-memory chat session is cleared.

D. App Preferences

  • Language Preference: Your selected app consultation language code (e.g., 'en', 'hi', 'es') is saved locally on your device via SharedPreferences to maintain your language choice across app restarts.

3. Information We Do NOT Collect

In compliance with Google Play Developer Policies and data minimization principles:

  • NO Advertising Identifiers: We do NOT collect or track Google Advertising ID (AAID) or device ad IDs.
  • NO Third-Party Trackers or Analytics SDKs: We do NOT embed Google Analytics, Firebase Analytics, Facebook Pixel, AppsFlyer, Adjust, or data brokers.
  • NO Financial or Payment Data: Nimda AI is free to download and does not collect credit card numbers, bank details, or in-app payment credentials.
  • NO Background Location Tracking: Location is NEVER accessed when the app is in the background or closed (ACCESS_BACKGROUND_LOCATION is not declared).
  • NO Telephony or Hardware Identifiers: We do not collect IMEI, MAC addresses, SIM serial numbers, or phone call logs.
  • NO Human Health Data: All queries are strictly confined to animal care.

4. How We Use Your Information

We use the collected information solely for the following legitimate purposes:

  1. Account Authentication: Authenticating your identity, maintaining your signed-in session, and sending password reset links upon request.
  2. Clinical AI Triage: Transmitting user-provided animal symptoms and images to the Google Gemini API to identify species, assess visible trauma, and provide immediate non-medicinal physical first-aid recommendations.
  3. Spoken Voice Consultation: Converting your spoken inquiries into text for Dr. Nimda AI, and vocalizing triage advice back to you hands-free.
  4. 10 km Clinic Radar: Utilizing your temporary coordinates to query the OpenStreetMap / Nominatim API to locate licensed veterinary clinics and animal hospitals within a 10 km radius.
  5. Navigation & Dialing: Generating one-tap external links to Google Maps for turn-by-turn navigation and launching your phone dialer for clinic emergency calls.

5. Third-Party Service Providers & Data Transfers

To deliver fast, resilient, and secure veterinary assistance, we partner with industry-leading infrastructure providers. All data transfers occur over encrypted HTTPS / TLS 1.3 channels:

  • Google Firebase Authentication (Google LLC):
    Purpose: Secure user account registration, password hashing, and Google Sign-In token verification.
    Privacy Policy: https://firebase.google.com/support/privacy
  • Google Play Services / Google Sign-In (Google LLC):
    Purpose: Providing seamless, single-tap OAuth authentication.
    Privacy Policy: https://policies.google.com/privacy
  • Google Gemini Multimodal AI API (Google LLC):
    Purpose: Real-time computer vision inference on animal wound photos and evidence-based clinical report generation.
    Privacy Policy: https://policies.google.com/privacy
    Notice: Data sent to the Gemini API is processed ephemerally for inferencing per Google Cloud Enterprise AI data terms.
  • OpenStreetMap / Nominatim API (OpenStreetMap Foundation):
    Purpose: Querying public geospatial nodes for veterinary clinics within 10 km.
    Data Transmitted: Ephemeral bounding box coordinates.
    Privacy Policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy
  • Google Maps Intent (Google LLC):
    Purpose: Launching turn-by-turn driving directions when user taps "Directions".
    Privacy Policy: https://maps.google.com/help/terms_maps/
WE DO NOT SELL, RENT, LEASE, OR TRADE YOUR PERSONAL INFORMATION TO THIRD PARTIES OR ADVERTISERS FOR ANY PURPOSE.

6. Data Storage, Encryption & Security Measures

  • Encryption in Transit: 100% of outbound network communications use Transport Layer Security (TLS 1.3 / HTTPS).
  • Strict Network Security Config: Android Network Security Configuration is enforced with cleartextTrafficPermitted="false". Unencrypted HTTP traffic is permanently blocked at the operating system level.
  • Obfuscated API Protection: Sensitive runtime API configurations utilize XOR byte-masking and dynamic Dart environment injection to prevent static secret scanning vulnerabilities.
  • Ephemeral Consultation Memory: Consultation messages, wound photos, and voice streams are processed in temporary device RAM and are NOT stored on remote persistent databases.

7. Account & Data Deletion Rights (Google Play Compliance)

Google Play's User Data policy guarantees users the right to delete their account and all associated data. Nimda AI provides two dedicated deletion mechanisms:

Method 1: In-App Instant Account Deletion (Recommended)

You can permanently delete your account and all associated profile data directly from within the mobile application at any time:

  1. Open the Nimda AI app.
  2. Tap "Settings & Profile" (from Home or Consultation screen).
  3. Scroll to "Account Actions" and tap "Delete Account".
  4. Re-authenticate for security:
    • For Email/Password accounts: Enter your current password.
    • For Google Sign-In accounts: Confirm via the Google re-authentication prompt.
  5. Tap "Confirm Deletion".

Result: Your Firebase Authentication account, UID, email, display name, and all associated credentials are PERMANENTLY and IMMEDIATELY purged from Google servers.

Method 2: Public Web Deletion Request Portal (For Uninstalled Apps)

If you have uninstalled the application or cannot access your device, Google Play requires a web-based path to request deletion:

  • Public URL: https://nimda.in/account_deletion.html
  • You can submit a deletion request through the web portal or by emailing support@nimda-ai.web.app with the subject ACCOUNT DELETION REQUEST from your registered account email address.
  • Verification & Timeline: Web-initiated account deletion requests are verified and permanently completed within 30 calendar days.

Data Purge Confirmation

Upon account deletion, all authentication tokens, credentials, and profile records are erased. Because consultations and uploaded images are never stored in remote persistent databases, zero residual personal data remains on our servers after deletion.

8. Permission Revocation & User Choices

You maintain complete control over device permissions and can revoke them at any time:

  • Android System Settings: Navigate to Settings > Apps > Nimda AI > Permissions, and toggle off Camera, Microphone, Photos, or Location.
  • Graceful Degradation: If you deny or revoke permissions, Nimda AI remains fully functional for text triage, browsing 70+ species guides, and manual city clinic lookups without crashing or blocking.

9. Children's Privacy (COPPA & GDPR-K Compliance)

Nimda AI is an animal healthcare utility intended for pet owners and animal caregivers. We do not knowingly collect, solicit, or maintain personal information from children under the age of 13 (or under 16 in the European Economic Area). If we learn that personal data of a child has been collected without verifiable parental consent, we will promptly delete that account and associated data.

10. International Users & Data Transfers

If you access Nimda AI from outside the United States, please be aware that your account information is processed and stored on secure Google Firebase / Google Cloud infrastructure in compliance with international privacy standards, including standard contractual clauses and strict encryption protocols.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, or Google Play legal guidelines. When changes occur, we will update the "Last Updated" date at the top of this document and provide notice through the mobile application.

12. Contact Information & Data Protection Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy, your personal data, or account deletion, please contact us: