Skip to main content

Privacy Policy

Effective date: June 4, 2026

This Privacy Policy explains how Nimble Dragon Media, Inc., doing business as Nimble Dragon Studios (“Nimble Dragon,” “we,” “us,” or “our”), collects, uses, and shares information in connection with:

  • the website at wyvernhq.app (the “Site”); and
  • the Wyvern HQ application for macOS and iOS (the “App”).

The Site and the App are referred to together as the “Services.” By using the Services, you agree to this Policy. If you do not agree, please do not use the Services.

Plain-language summary: Wyvern HQ is an app you run yourself. The information you put into it (clients, projects, branding, notes) is stored on your own device and synced through your own Apple iCloud account. We do not store your Wyvern HQ business data on our servers. When you connect a service such as Google Analytics or a Facebook Page, the data we retrieve is shown to you and stored the same way — on your device and your iCloud. The Site collects the usual things a website collects (contact form details, purchase information, basic analytics).

1. Who We Are

Nimble Dragon Media, Inc. (operating as Nimble Dragon Studios) is the publisher of Wyvern HQ and the operator of the Site. You can reach us using the details in the Contact Us section below.

2. Information We Collect

2.1 Information you provide on the Site

When you contact us, request support, subscribe to updates, or purchase a license, you may provide:

  • Name and email address
  • Company or agency name
  • Messages or support requests you submit
  • Billing details and purchase history (see Payments below)

2.2 Information collected automatically on the Site

Like most websites, the Site may automatically collect limited technical information, such as IP address, browser type, device information, pages viewed, and referring URLs, through server logs, cookies, and similar technologies. See the Cookies section.

2.3 Information in the Wyvern HQ App

Wyvern HQ stores the information you enter — including clients, contacts, projects, deals, brand assets, notes, and settings — locally on your device and, if you have Apple iCloud enabled, syncs it through your own iCloud accountusing Apple’s CloudKit. We do not receive, access, or store this content on our servers. Its handling within Apple’s infrastructure is governed by Apple’s Privacy Policy.

2.4 Connected-service credentials and AI keys

When you connect a third-party service or add an AI provider key, the associated access tokens and keys are stored in the device Keychain on your own device. They are not transmitted to or stored by us.

2.5 License activation data

To activate and validate your license, the App communicates with our licensing system on wyvernhq.app. This may transmit your license key and basic activation details (for example, an installation or device identifier and license status) so we can confirm and manage your license.

3. Connected Services (Google, Meta, and others)

Wyvern HQ lets you connect third-party accounts — such as Google Analytics, Google Search Console, YouTube, Facebook Pages, and Instagram — so the App can display analytics and reporting for accounts you own or manage.

  • We access these services using the authorization or credentials you provide (for example, by signing in to Google or by supplying a Meta Business access token).
  • Data retrieved from these services is used to show you reports and metrics inside the App, and is stored like other App data — on your device and your iCloud.
  • Access is read-only for analytics and insights purposes. We do not post, modify, or delete content on your connected accounts.
  • This data is not sent to or stored on Nimble Dragon servers.

Your use of each connected service also remains subject to that provider’s own terms and privacy policy.

4. Google API Services User Data Policy

Wyvern HQ’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data obtained through Google APIs is:

  • used only to provide and display the analytics and reporting features you request within the App;
  • not sold;
  • not used for advertising;
  • not used to train generalized or non-personalized artificial intelligence or machine-learning models; and
  • not transferred to others except as necessary to provide the features you have requested, to comply with applicable law, or as part of a merger or acquisition, consistent with the Limited Use requirements.

5. AI Features (Bring Your Own Key)

Wyvern HQ includes optional AI-assisted features. These features are off unless you enable them and require you to supply your own API key for a third-party AI provider, which is stored in your device Keychain.

If you use these features, the content you choose to process — which may include information you have entered into the App or data retrieved from connected services — is sent to the AI provider you have configured, under your own account with that provider, in order to return the result to you. That provider’s handling of the data is governed by its own terms and privacy policy. We do not store this content on our servers.

6. How We Use Information

We use the information described above to:

  • provide, operate, and maintain the Services;
  • process purchases and validate licenses;
  • respond to your inquiries and provide support;
  • send you administrative messages and, where permitted, updates about the Services;
  • maintain the security and integrity of the Services; and
  • comply with legal obligations.

7. How We Share Information

We do not sell your personal information. We share information only as follows:

  • Service providers. With vendors who help us operate the Services (for example, website hosting, email/CRM, support tooling, and payment processing), under obligations to protect the information.
  • Payment processing. Purchases are handled through a third-party payment provider; we do not store full payment card numbers.
  • Legal and safety. When required by law, legal process, or to protect rights, safety, and the integrity of the Services.
  • Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

8. Payments

Purchases made on the Site are processed by a third-party payment processor. Your payment details are provided directly to that processor and are subject to its privacy policy. We receive confirmation of your purchase and related billing information (such as name, email, and purchase amount) but do not store complete payment card details.

9. Data Storage, Security, and Retention

  • App data stays on your device and, if enabled, your iCloud account. You control it, and you can delete it at any time from within the App or your iCloud account.
  • Credentials and AI keys are stored in your device Keychain and removed when you disconnect a service or delete the App’s data for it.
  • Site and license data is retained only as long as needed to provide the Services, meet legal and accounting obligations, and resolve disputes.

We use reasonable technical and organizational measures to protect information under our control. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Cookies

The Site may use cookies and similar technologies for essential functionality, to remember preferences, and to understand how the Site is used. You can control cookies through your browser settings; disabling some cookies may affect Site functionality.

11. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, including the right to access, correct, delete, or port it, and to object to or restrict certain processing.

  • EEA / UK (GDPR): You may exercise the rights above and lodge a complaint with your local supervisory authority. Our legal bases for processing include performance of a contract, our legitimate interests, your consent, and compliance with legal obligations.
  • California (CCPA/CPRA): You may request access to, deletion of, and details about the personal information we collect, and you have the right not to be discriminated against for exercising these rights. We do not sell or “share” personal information as those terms are defined under California law.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before responding.

12. International Users

We are based in the United States, and the Services are operated from the United States. If you access the Services from outside the United States, your information may be processed in the United States, where data protection laws may differ from those in your country.

13. Children’s Privacy

The Services are intended for business use by adults and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will take appropriate steps to delete it.

14. Third-Party Links

The Services may link to third-party websites or services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices.

15. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Effective date” above and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised Policy.

16. Contact Us

If you have questions about this Policy or our privacy practices, contact us at:

Nimble Dragon Media, Inc. (Nimble Dragon Studios)

Email: support@nimbledragonstudios.com

Mailing address: 518 Broadway, Suite 1, Monticello, NY 12701