Last Updated: October 28, 2026
This Privacy Policy explains what personal data Nimbzo ('we', 'us') collects from users of the Nimbzo mobile application ('App'), how and why we use it, who we share it with, your rights under applicable data protection laws including Bangladesh data protection legislation, and how to contact us. Effective date: January 24, 2026.
Nimbzo is the data controller. We are located in Bangladesh. For privacy inquiries, contact us at: nimbzohelp@gmail.com. This policy covers the Nimbzo App on iOS and Android platforms and the Nimbzo website at https://www.nimbzo.com/, with the website's own practices described in Section 1A. Our support page at /support is hosted as a static page without third-party scripts, tracking pixels, or external embeds; any contact numbers or resources provided are processed entirely on your device, and regional ordering is determined temporarily in-memory from your browser's runtime timezone without logging, transmitting, or storing your location.
The Nimbzo website provides free tools that run entirely in your browser. When you use a tool, your file is processed on your device and is never uploaded to us or to any third party. You do not need an account, and we do not ask for your name, email address or phone number to use a tool.
Some pages store small amounts of data in your browser's localStorage so that a draft survives a page reload (the invoice generator does this) or to remember that an introduction has been shown. That data stays on your device; it is removed when you clear the draft in the tool or clear your browser storage, and we never receive it.
The website is served by Cloudflare, which processes technical request data such as your IP address, browser type and the page requested in order to deliver the site and protect it against abuse. We do not operate a database of website visitors and we do not store your files.
Some older pages, including this policy page and the app landing page, load the Outfit typeface from Google Fonts. When your browser requests that font, Google receives your IP address and user agent. This is a font request, not an advertising request.
We collect: (a) Account data: name, email, password (hashed), phone number (if provided). (b) Profile data: profile picture, bio, education, location (city/country). (c) Device identifiers: device type, OS version, IP address, advertising ID (IDFA/AAID). (d) Location data: precise (GPS) and coarse location (if you grant permission). (e) User Content: posts, photos, videos, messages, comments. (f) Usage data: pages visited, features used, interactions, crashes (via analytics). (g) Contacts: if you grant permission to find friends. Data is collected directly from you, automatically via analytics SDKs, and from third parties (e.g., social login providers).
We process your data for: (a) Providing and maintaining the App (contractual necessity). (b) Authentication and account security (contractual necessity). (c) Personalizing content and recommendations (legitimate interest). (d) Analytics, crash reporting, app improvement (legitimate interest). (e) Marketing and promotions (consent, which you can withdraw). (f) Fraud prevention and legal compliance (legal obligation and legitimate interest). (g) Responding to lawful government requests (legal obligation). Under Bangladesh data protection ordinances, we obtain consent where required and honor your data subject rights.
We share data with: (a) Service providers: cloud hosting (e.g., Firebase, AWS), analytics (Google Analytics, Firebase Analytics), payment processors, customer support tools. (b) Legal authorities: when required by Bangladesh law, court order, or to prevent harm. (c) Business transfers: in case of merger or acquisition. We do not sell your personal data. Some data may be stored or processed outside Bangladesh (e.g., cloud servers in the US/EU). We use standard contractual clauses and encryption to safeguard cross-border transfers in compliance with Bangladesh regulations.
We retain account data for the duration of your account plus 90 days after deletion (to honor legal/audit requirements). Analytics and logs are retained for 24 months. User content is deleted when you delete it or your account. We use encryption in transit (TLS/SSL) and at rest, access controls, and regular security audits. However, no system is 100% secure; you are responsible for keeping your password confidential.
You have the right to: (a) Access your data (download a copy). (b) Correct inaccurate data. (c) Delete your account and data (right to be forgotten). (d) Object to processing for direct marketing. (e) Withdraw consent (e.g., location, contacts). (f) Data portability. To exercise these rights, go to Settings > Delete Account or contact nimbzohelp@gmail.com. We will respond within 30 days. You may also file a complaint with the relevant Bangladesh data protection authority.
The App is intended for users aged 13 and above. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us immediately and we will delete it. Parents of users under 18 should supervise their child's use.
We use third-party SDKs for analytics (Firebase, Google Analytics), ads (AdMob), and crash reporting. These may collect device identifiers and usage data. You can opt out of personalized ads via device settings (iOS: Limit Ad Tracking; Android: Opt out of Ads Personalization). Each third-party SDK is governed by its own provider's privacy policy.
The Nimbzo website is supported by advertising. When advertising is enabled on a tool or guide page, ads are served by Google AdSense and its partners. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
You can opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalized advertising at aboutads.info. For information about how Google uses data from sites that use its services, see How Google uses data when you use our partners' sites or apps.
If you are in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent through a Google-certified consent management platform before ads that use cookies are shown, and you can change your choice at any time. Our Cookie Policy explains the cookies involved.
We may update this policy to reflect legal requirements or feature changes. We will notify you via in-app notice or email at least 7 days before material changes take effect. Continued use after notice constitutes acceptance. Check the 'Last Updated' date at the top.
We are committed to following Bangladesh's Digital Security Act and protecting your data rights. We do not collect or share sensitive personal data (like religion or political views) without your explicit permission. We work with local authorities when required by law and have steps in place to handle any data security issues.