Privacy Policy

MrNut ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and how we comply with the GDPR (EU), ePrivacy rules, and Dutch law.

1. Who We Are

NUT Consultancy
Website: https://mrnut.org
Email: legal@mrnut.org
Jurisdiction: The Netherlands (EU GDPR applies)

2. What This Policy Covers

This policy applies to all tools under the MrNut / NutTools brand, including but not limited to:

• NutCut – Background removal
• NutUpscale – Image upscaling
• NutResize – Image resizing
• Additional tools under development

3. No Personal Data Processing (Client-Side Only)

We:

• Do not upload your images to our servers
• Do not store your images
• Do not inspect or view your images
• Do not store your API key → It is used only inside your own browser session for the purpose of calling the AI model directly.

Your processed images never leave your device except when you choose to use a third-party API with your own API key.

4. What We Do Collect (Minimal)

We only collect anonymous usage analytics through Umami, a privacy-friendly analytics platform.

Umami does not:

• Set cookies
• Track individuals
• Use fingerprints
• Store IP addresses
• Create user profiles

We collect only:

• Page views
• Tool usage counts
• Referrers
• Device type (anonymous)

These analytics help us understand tool performance and improve the service.

5. API Keys

When using third-party AI features (e.g., Gemini API, OpenAI API), your API key:

• Is stored locally in your browser
• Is never transmitted to our servers
• Is never logged
• Remains under your full control

You can delete the key at any time through the app settings or your browser storage.

6. Legal Basis for Processing

Under the GDPR, our legal bases are:

• Art. 6(1)(b) – Necessary for the performance of the service (client-side processing)
• Art. 6(1)(f) – Legitimate interest (anonymous usage analytics)

No personal data is collected that would require consent.

7. Children's Privacy

Our tools are not intended for children under 13. We do not knowingly collect personal data from minors.

8. Your Rights

Because we do not store identifiable data, most GDPR rights (access, erasure, rectification) do not apply.

If you have questions, contact: legal@mrnut.org

9. Data Security

• We do not store user images or keys
• Processing happens entirely on-device
• HTTPS encryption is enforced
• Analytics are anonymous

10. Third-Party Services Used

• Umami Analytics (self-hosted or EU-hosted privacy-friendly instance)
• AI Model Providers (only when you choose to connect your API key)

We do not control or accept liability for third-party provider policies. Users must ensure they have rights to upload and process the images they use.

11. Changes to This Policy

We may update this policy to reflect improvements in our tools or changes in applicable law. The most recent version is always available on our website.

12. Contact

For legal, privacy, or compliance questions: legal@mrnut.org