Nova Security Privacy Notice

Last updated: May 2026

1. Introduction

This document is the Nova Security privacy notice, which describes what information we collect from you when you use the Nova Security mobile application (the “App”) and how we use that information. It is important that you read this notice along with the Nova Security Terms of Service because both apply to your use of the App. Any information collected from you by Nova other than through use of the App will be subject to a different privacy notice.

This notice may be revised to keep pace with changes in our products and services and laws applicable to Nova and you. If we make material changes to this notice, we will notify you. If you do not wish your information to be subject to the revised notice, you will need to close your account.

This notice can be accessed from the App login screen, from the settings in the App, and from our website at nova-security.app.

2. Information we collect

Nova offers multiple tiers within the App. Each tier offers increased access to Nova security features. Information required to provide these services may vary and is listed in this document to help you understand what information we collect directly from you, from your device, and how we use this information.

a. Categories of information

Nova, or Nova’s partners, may collect the following categories of information from you in the course of using the App:

• Registration data, including an email address and password (or anonymous account identifier if you sign in without an email).
• Device data, such as device type and manufacturer, operating system type and version, wireless carrier/operator, network type, country of origin, Wi‑Fi network SSID, IP address, and the dates and times of your requests.
• Application data, including metadata about applications installed on your device (names and versions). In limited cases, we may collect a copy of part of an application file if we encounter an application we have not previously analyzed. This data is pseudonymized and held in aggregate so that an individual cannot be identified from other customers. We may also collect information about how applications behave on your device (for example, whether an application is sending premium‑rate text messages) and the network services with which those applications communicate.
• Network & Wi‑Fi scan data, including SSID, BSSID, signal strength, encryption type, and DHCP information about networks you scan, used only to identify whether a network is unsafe. Nova does not collect or transmit passwords for Wi‑Fi networks.
• Web content data, including URLs and domains for malicious content and content that requires additional analysis (for example, suspected phishing or malware). Nova does not collect your general browsing history.
• QR code data, including the destination URL embedded in scanned QR codes, used solely to check the destination against our threat database.
• Data breach lookup data, including a hashed (one‑way) representation of any email address you submit to the breach‑check feature, used to compare against known breach corpora.
• Payment data. If you subscribe to a paid plan, payment is processed by Apple App Store or Google Play. Your credit card or bank information remains with the app store and is not shared with us.
• Analytics data, including anonymized usage metrics collected via third‑party analytics tools (such as Firebase Analytics and Firebase Crashlytics) to help us understand product usage and stability.

b. Information Nova collects for the free tier

To use the free version of the App, you may create an account; if you do, you must provide an email address and a password (or use an anonymous identifier). When you use the App, our servers record certain information about your mobile device as described in section 2a above. We also collect application metadata so we can flag malicious applications.

Nova does not collect data you enter into other applications on your phone. Nova does not collect, read, review, or scan your emails or text messages. Nova does not collect your photos or videos, although it may scan such files locally on your device to protect you from certain threats that hide inside media files.

c. Information Nova collects for paid plans (Weekly, Monthly, Yearly)

Nova collects the same information as for the free tier. In addition, our payment processor (Apple App Store or Google Play, depending on platform) will collect payment data directly from you to enable access to premium features. We receive only confirmation of your purchase and the subscription product identifier — we do not receive your credit card number, bank details, or billing address.

d. Information Nova collects from third‑party sources

We receive analytics data from third‑party services as described above. We may also receive crash reports from Firebase Crashlytics to help us diagnose and fix issues with the App.

3. How we use your information

When we collect your information, we store it and associate it with your account unless otherwise noted. Please note that we need certain types of information to provide the services to you. If you do not provide us with such information, or ask us to delete it, you may no longer be able to access the services. We take your privacy seriously and only use and disclose this information for the business and commercial purposes described in this notice.

a. Application data

We use this data to provide our services by analyzing application files to determine if any applications are behaving maliciously. We pseudonymize and aggregate the information to produce popularity metrics by region and to perform mobile threat analysis. Threat‑analysis data remains pseudonymized.

b. Device data

Automatic scans of your device may occur periodically to collect details about applications, devices, and operating‑system files. Nova will gather the results of scans performed by our services and the most current security disposition of the device. Regular updates of threat definitions will be performed. These activities allow the App to detect and address threats on your device.

c. Network & Wi‑Fi scan data

We use this data only to determine if a Wi‑Fi network is unsafe (for example, open networks, weak encryption, or known rogue access points) and to warn you before you connect.

d. Registration data

We may use your email address to send you information about product announcements and notices. If you email Nova for support, we may retain that information in order to provide you with support and to improve our services. We may use your email address to communicate with you about the services, including sending privacy or security notices and notifying you of major service changes.

e. Web content data

The threat‑shield feature is designed to identify and warn you of unsafe URLs so that you can choose to avoid loading them. URLs visited are pseudonymized and sent to Nova to perform security scans. We use the record of unsafe URLs you visit to provide you with notice that the URL you attempted to reach is unsafe.

f. QR & breach lookup data

We use QR destinations and hashed email breach lookups only to perform the requested check. We do not store the email address in plain text, and we do not use it for marketing.

4. How we disclose your information

a. Third‑party service providers and partners

We may share your information with third‑party service providers integrated with our software who need to know your information to fulfill your product or service requests, support our products and services, analyze data for performance, and improve our products. Examples include Firebase (analytics, crash reporting, authentication, hosting, and cloud functions provided by Google) and RevenueCat (subscription management).

b. Third‑party payment partners

Apple App Store and Google Play process payments directly. They may share confirmation of your purchase with us but will not share credit card or full billing information.

c. To comply with law

We may disclose your information consistent with the law to: (i) comply with a law, regulation, or legal process; (ii) protect the safety or security of any person, entity, or facility; (iii) address potential violations of our notice; (iv) investigate fraud, security, or technical issues; or (v) protect Nova’s or a third party’s rights or property. Before we disclose your information in response to a law enforcement request, we will notify you at the email address listed in your account, unless (a) we are prohibited from doing so or (b) notice could create a risk of injury or death.

d. During a change to Nova’s business

We may disclose your information to an actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger, or acquisition of any part of our business, provided that we inform the buyer it must use your information only for the purposes disclosed in this notice.

e. Pseudonymized and aggregated data

For data analysis, we pseudonymize, aggregate, and summarize data that may include some of your data. We may share reports resulting from this data analysis publicly, in order to help others understand mobile threats and gain insights into particular mobile application behavior.

f. With consent

We may also disclose your information to third parties when we have your consent to do so.

5. Your choices

a. Access and update settings

You may update the settings of your Nova Security account via the “Settings” page in the mobile application to modify what data is shared with us. To protect your privacy and security, we require your username and password in order to verify your identity before granting you access or making changes to your account.

b. Email opt‑outs

You may opt out of receiving promotional communications from Nova by using the unsubscribe link within each email. Even after you opt out, you will continue to receive transactional and product‑related messages from us regarding Nova services.

6. Data retention

Nova will retain your information, including your personal data (as defined by the GDPR), only as long as reasonably necessary to provide our products and services to you or as otherwise required for legal compliance.

7. Security

a. Nova’s responsibilities

Nova is a security company, and securing your data is important to us. Nova uses commercially reasonable physical, managerial, and technical safeguards to ensure appropriate technical and organizational measures appropriate to the risk of processing your information. We use a combination of firewalls, authentication, physical security, and other safeguards to protect your account and your data. When you enter sensitive information within the App, we encrypt that information in transit and at rest using TLS.

Because no method of transmission over the Internet or method of electronic storage is 100% secure, we cannot ensure or warrant the security of any information, data, or content that Nova receives. All such receipt or transmission of your information is provided under your own free will and at your own risk. If Nova learns of a security breach that may affect you, we will attempt to notify you electronically so you can take appropriate protective steps.

b. Your responsibilities

You are responsible for maintaining the secrecy of your password at all times. We recommend a strong password that you do not use with other services. If you believe your password has been compromised, please change it immediately. You are responsible for ensuring that the email address associated with your account is accurate.

8. Users under 16

Nova does not knowingly collect or store any personal data about children under the age of 16. If you believe a child is using this service without parental consent, please contact us at info@pera.software.

9. International data transfers

Personal data collected from users outside your country of residence may be transferred to, stored, and processed in countries where our servers are located and our databases are operated. We rely on appropriate safeguards (including Standard Contractual Clauses) where required by applicable data protection law.

10. Additional terms for California & other U.S. residents

a. Personal information

In accordance with the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act, and the equivalent laws of Colorado, Connecticut, Utah, and Virginia (collectively, “Applicable State Laws”), the categories of Personal Information we collect, the sources of that information, the commercial purpose, and the categories of third parties with whom we share that information are described in section 2 above. The information is accurate for the preceding 12 months.

b. Your rights

Subject to exceptions, residents of certain states have the following rights:

• Access. You may request that Nova disclose and deliver the categories of personal information we have collected about you, or the specific pieces of personal information we have collected about you.
• Deletion. You may request deletion of your personal information in certain situations, subject to exceptions outlined in the law.
• Correction. You may correct or amend the personal information we hold about you.
• Non‑discrimination. You may not be discriminated against for exercising any of your rights.
• Opt‑out. Nova does not sell or share your personal information; this right is not applicable to you.
• Limit use of sensitive personal information. Nova does not process your sensitive personal information for any purposes beyond those permitted in Section 7027(m) of the CCPA regulations.

You may exercise your rights by contacting us at info@pera.software. To protect your privacy, we may need to verify your identity before granting your request.

11. Additional terms for EEA, UK & Swiss residents

a. Legal basis for processing

If you are a visitor from the EEA, UK, or Switzerland, Nova is the data controller of your personal data (as defined in the GDPR). The legal basis for collecting and using your personal data will normally be one of: (a) performance of a contract with you; (b) our legitimate interests (operating, securing, and improving the App); or (c) your consent.

b. Data transfers

To provide this service, Nova may store and process personal data in countries outside your country of residence. Where we transfer personal data which originates in the EEA, Switzerland, or the UK to a country that has not been found to provide an adequate level of protection under applicable data protection laws, we rely on the UK International Data Transfer Agreement/Addendum or EU Standard Contractual Clauses to safeguard the transfer.

12. Data subject rights

If you are a resident of the United Kingdom, EEA, Switzerland, or another jurisdiction with an applicable data protection law (such as Virginia, Colorado, Connecticut, and Utah), you may have certain rights in relation to your Personal Data. These may include:

• Access. Request a copy of the personal data we are processing about you.
• Rectification. Require correction of any mistake in the personal data we hold about you.
• Deletion. Require erasure of personal data concerning you in certain situations.
• Portability. Receive the personal data you have provided to us in a structured, commonly used, machine‑readable format.
• Objection. Object at any time to processing of your personal data for direct marketing purposes.
• Restriction. Request restriction of our processing in certain circumstances.
• Automated decision‑making and profiling. Not be subject to a decision based solely on automated processing that produces legal effects.
• Withdrawal of consent. Withdraw consent at any time where we rely on consent.
• Lodge a complaint. Lodge a complaint with your local data supervisory authority.

To exercise any of these rights, contact us at info@pera.software.

13. Contact us

Please contact us at info@pera.software with any questions or comments about this notice.

← Back to home · Terms of Service →