Privacy Policy

Your privacy matters.

This Privacy Policy explains how Engynn Technologies Ltd. collects, uses, discloses, and protects personal information when you visit or use Nryl.

Effective date: October 19, 2026 · Version 2.0

Read our Terms of Service

Who we are

Nryl is operated by Engynn Technologies Ltd., a company based in Edmonton, Alberta, Canada. In this policy, “Nryl,” “we,” “us,” and “our” refer to Engynn Technologies Ltd.

This policy covers nryl.io, app.nryl.io, and our related account, course-creation, billing, and support services. For account administration, website inquiries, security, and billing, we determine how personal information is used. When an organization supplies personal information in its training content, we process that content to provide the service on its behalf; the organization remains responsible for its own notices, permissions, and lawful instructions.

Information we collect

We may collect the following types of information:

  • Account and contact information: your name, email address, organization, account credentials stored in protected form, verification and invitation records, support requests, and contact or waitlist submissions.
  • Billing information: subscription plan, credit usage, invoices, payment status, and identifiers supplied by Stripe. Payment-card details are collected by Stripe, not entered into or stored in our application as full card numbers.
  • Usage and technical information: IP address, browser and device information, request and error logs, referring pages, pages visited, and interactions such as signup clicks, registration, and use of production features.
  • Customer content: source files, images, webpage material you provide or ask us to retrieve, course topics, prompts, chat history, training profiles, scripts, assessment content, generated media, feedback, and related version and production records. These materials may contain personal information you include.

We receive information directly from you, from your organization’s authorized users, from your browser, and from service providers such as Stripe. Do not submit information about others unless you have the necessary permission or other lawful basis. Do not upload highly sensitive or regulated personal information without first agreeing suitable protections with us.

How we use information

We use personal information to:

  • provide, operate, maintain, and improve Nryl;
  • create and secure accounts, verify email addresses, recover access, and administer organization invitations and signup approval;
  • process the source material and instructions you provide to generate, edit, store, preview, and export course content;
  • administer subscriptions, payments, credits, plan limits, and billing records;
  • respond to inquiries, provide support, and communicate about beta access or service updates;
  • understand service usage, troubleshoot problems, and protect against fraud, abuse, and security threats; and
  • comply with legal obligations and enforce our agreements.

We do not sell personal information.

AI processing and generated content

When you request AI-assisted work, relevant prompts, source excerpts, course context, scripts, or media instructions are sent to the provider needed for that feature. Current integrations include OpenAI and Anthropic for text or content processing, ElevenLabs for narration, and xAI for optional image generation. Not every provider receives every file or every request.

These providers process information under their applicable service terms and data-handling arrangements. Provider retention, safety monitoring, and model-improvement practices depend on the provider, product, and account settings; this policy does not promise zero provider retention or a universal exclusion from model training. Contact us before submitting material that requires a specific restriction, a data processing agreement, or a particular processing location. You can choose not to use AI features, but those features cannot produce output without the required processing.

How we share information

Information is disclosed as needed to providers supporting hosting and storage, security, AI production, email, analytics, and payment processing. In addition to the AI providers above, these include Stripe for payments, SendGrid for account emails, and Google Analytics for website and registration analytics. Providers receive information relevant to their role, subject to their applicable terms and our arrangements with them; payment providers may also have their own legal responsibilities.

Authorized members of your organization may access shared workspace materials. Billing owners administer billing and invitations. Nryl operators may access records as reasonably needed to review signup access, provide requested support, investigate failures, or protect the service. We do not publish private course content merely because you generate it; content you export, share, or give to another person is then subject to your chosen recipient’s handling.

We may disclose information with your authorization, to meet legal requirements, protect rights and safety, investigate fraud, or in a merger, financing, acquisition, or sale subject to appropriate confidentiality and applicable privacy obligations. Links to third parties, including LinkedIn, do not place those services under this policy. Their own privacy notices apply when you visit or provide information directly to them.

Cookies and Google Analytics

Essential cookies support sessions, sign-in, security, and form submission. Disabling them can prevent account features from working. Google Analytics is also loaded on the public website and application authentication pages to measure traffic and interactions. It can use cookies and identifiers to process device, browser, page, referral, and event information. Current signup event payloads do not intentionally include names, email addresses, passwords, or organization names; this does not make all analytics data anonymous.

You can block or delete cookies in your browser and use Google’s Analytics opt-out browser add-on where supported. See Google’s Privacy Policy for its processing practices. Our current pages do not provide an on-site analytics consent-preference panel. Browser controls do not replace consent we must obtain under applicable law. This policy is a disclosure, not permission to use non-essential tracking where separate consent is required.

Communications and choices

We send account verification, password recovery, invitations, billing, security, and other service-related communications. If we send optional marketing communications, you can unsubscribe using the provided method or contact us. Opting out of marketing does not stop necessary account or transaction messages. A contact or waitlist submission is not blanket consent to unrelated marketing.

Data retention

We retain personal information only for as long as reasonably necessary to provide Nryl, fulfill the purposes described in this policy, meet legal and accounting requirements, resolve disputes, and enforce agreements. Retention periods vary depending on the type of information and why it was collected.

Course content and earlier versions may remain in your workspace so you can continue editing or restore prior work. Archiving content, canceling billing, or moving to a free plan is not the same as requesting erasure. Contact us to request account or content deletion. Some records must be retained for billing, fraud prevention, legal obligations, or disputes, and deleted information may remain in restricted backups until they are cycled out. We do not promise immediate removal from every provider or backup.

Security and international processing

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We do not provide a Canada-only data-residency commitment. Service providers, including the US-based providers named above, may process or store information in the United States and other countries in which they or their service providers operate. Information processed abroad may be accessible to courts, law enforcement, and public authorities under local law.

For written information about our policies and practices concerning service providers outside Canada, including processing countries and purposes relevant to your use, contact Privacy inquiries, Engynn Technologies Ltd. at support@engynn.com. If a confirmed country restriction is necessary for your organization, obtain written agreement before uploading the affected information.

If a security incident occurs, we will assess it and provide notifications to affected individuals, customers, or regulators when required by applicable law. No claim of a particular security certification or regulatory certification is made by this policy.

Your choices and rights

Depending on the law that applies to you, you may request access, correction, deletion, information about disclosures, withdrawal of consent, or other applicable privacy rights. Withdrawal does not invalidate earlier lawful processing and may prevent us from providing a feature that needs the information. Rights are subject to applicable exceptions and retention obligations; we will explain any restriction on a request where required.

To make a privacy request or complaint, email support@engynn.com with the subject “Privacy inquiry.” We may need to verify your identity. Where information is controlled by your employer or another customer organization, contact that organization first; we can help it respond to lawful requests. We will respond within applicable legal time limits. You may also complain to the Office of the Information and Privacy Commissioner of Alberta, the Office of the Privacy Commissioner of Canada, or another competent privacy authority.

Children’s privacy

Nryl accounts are intended for adults and organizational users, not children. We do not knowingly offer accounts to children under 18. Do not submit children’s personal information without appropriate legal authority and a prior agreement with us about suitable handling. If you believe a child has provided personal information improperly, please contact us so we can investigate and take appropriate action.

Changes to this policy

We may update this Privacy Policy and will post the revised version and effective date here. For material changes, we will give additional notice and obtain consent where applicable law requires it. Posting a change alone does not authorize a materially new use that requires your consent.

Contact us

If you have questions or concerns about this Privacy Policy or our privacy practices, contact:

Privacy inquiries — Engynn Technologies Ltd.
Edmonton, Alberta, Canada
support@engynn.com
Contact Nryl