GDPR & Data Protection

NexusMix — EU Compliance Statement

Last updated: May 28, 2026

🏢 Data Controller

Shostak & Stawicki Sp. z o.o.

Pl. Jana Kilińskiego 3, 71-414 Szczecin, Poland

KRS: 0000915173 | NIP: 8513262790 | REGON: 389616142

✅ Our Core Principle GDPR

NexusMix does not collect, store, or process any personal data on our servers. All data you create (mixes, notes, photos) is stored exclusively on your device using iOS local storage. We have no access to your data.

📊 What Data is Processed

Data stored locally on your device only:

Hookah mix recipes you create
Session notes and timer data
Your name (optional, onboarding only)
App language preference
Photos attached to mixes

Third-party services (minimal data):

Anthropic Claude API — your AI mix request (mood, flavors) is sent when using the generator. Not stored by us.
OpenWeatherMap — your GPS coordinates for weather recommendations. Not stored by us.

⚖️ Legal Basis for Processing

Contract performance — providing app functionality (Art. 6(1)(b) GDPR)
Legitimate interest — app improvement and security (Art. 6(1)(f) GDPR)
Consent — location access for weather feature (Art. 6(1)(a) GDPR)

🔒 Your Rights Under GDPR

Right of access — all your data is on your device, accessible anytime
Right to erasure — delete the app to remove all data instantly
Right to portability — your data is in standard iOS format
Right to object — you can disable location in iOS Settings anytime
Right to restrict processing — use app offline to avoid any network requests

Since we don't store your data on our servers, most GDPR rights are automatically fulfilled by deleting the app from your device.

🌍 Data Transfers

When using the AI Generator, your request is sent to Anthropic (USA). This transfer is covered by Anthropic's Standard Contractual Clauses (SCCs) and their compliance with GDPR.

Weather data is processed by OpenWeatherMap (EU servers).

🍪 Cookies & Tracking

NexusMix does not use cookies, tracking pixels, or analytics SDKs. We do not track your behavior across apps or websites.

👶 Children's Data

NexusMix is for users 18+. We do not knowingly collect data from minors. If you believe a minor is using the app, contact us at privacy@nexusmix.app.

📅 Retention Period

Data retention is controlled entirely by you. Data exists on your device as long as you keep the app installed. Deleting the app permanently removes all data.

Data Protection Contact

For GDPR requests or questions:

privacy@nexusmix.app

Response within 30 days as required by GDPR