Privacy Policy

Last Updated: December 12, 2025

1. Introduction

NextGenMe ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered coaching platform.

This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us:

• Account Information: Name, email address, password (encrypted)
• Profile Data: Communication preferences, coaching settings, goals, and priorities
• Subscription Information: Billing details, payment information (processed securely through Stripe)
• Communication Data: Messages, conversations, voice recordings, and uploaded documents

2.2 YouTube Integration Data

YouTube API Services: When you connect your YouTube account, we only access:

• Your YouTube subscriptions list
• Video metadata (titles, descriptions, channel information, thumbnails)

We do not access, import, or store watch history, liked videos, private playlists, or any video/audio content.

We use this data solely to provide personalized AI coaching based on your content interests. We do not store your YouTube credentials or use your data for any purpose other than enhancing your NextGenMe experience.

2.3 Automatically Collected Information

• Usage Data: Features used, interaction patterns, session duration
• Device Information: Browser type, operating system, IP address
• Cookies: Authentication tokens, preference settings

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: Provide AI coaching, chat responses, and personalized recommendations
• YouTube Integration: Analyze your subscribed content to provide context-aware coaching
• Account Management: Create and maintain your account, process payments
• Communication: Send service updates, respond to inquiries, provide support
• Improvement: Enhance our AI models, features, and user experience
• Security: Detect fraud, abuse, and security threats
• Legal Compliance: Meet regulatory requirements and enforce our Terms of Service

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your data based on:

• Contract Performance: Processing necessary to provide our services
• Consent: You consent to YouTube data access and optional features
• Legitimate Interests: Improving services, security, and fraud prevention
• Legal Obligations: Compliance with applicable laws

5. Data Sharing and Disclosure

5.1 Service Providers

We share data with trusted third-party service providers:

• Cloudflare: Hosting and content delivery (Workers, Pages, R2, D1)
• Stripe: Payment processing
• OpenAI/Groq: AI model processing (anonymized where possible)
• Google: YouTube API access (with your explicit consent)

5.2 YouTube Data Sharing

5.3 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights and safety.

6. Data Retention

We retain your data for as long as:

• Your account is active
• Needed to provide our services
• Required by law or for legitimate business purposes

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Revoke consent at any time (e.g., YouTube access)
• Lodge a Complaint: File a complaint with your data protection authority

To exercise these rights, contact us at privacy@nextgenme.ai.

8. Data Security

We implement industry-standard security measures:

• Encryption in transit (HTTPS/TLS) and at rest
• Password hashing with bcrypt
• Secure authentication tokens (JWT)
• Regular security audits and updates
• Access controls and monitoring

However, no system is 100% secure. We cannot guarantee absolute security of your data.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure adequate safeguards through:

• Standard Contractual Clauses (SCCs)
• Service providers with strong privacy commitments
• Compliance with GDPR and applicable data protection laws

10. Children's Privacy

NextGenMe is not intended for users under 16 years of age. We do not knowingly collect data from children. If we learn we have collected data from a child, we will delete it promptly.

11. Cookies and Tracking

We use cookies for:

• Authentication: Keep you logged in
• Preferences: Remember your settings
• Analytics: Understand usage patterns (anonymized)

You can control cookies through your browser settings, but this may limit functionality.

12. Third-Party Links

Our service may contain links to third-party websites (e.g., YouTube videos). We are not responsible for their privacy practices. Please review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through our service. Your continued use after changes constitutes acceptance.

14. Contact Us

15. Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer at dpo@nextgenme.ai.

© 2025 NextGenMe. All rights reserved.