Security built in from day one
NutQuest is built on the most secure cloud providers available — including Google Cloud — and we continuously evaluate improvements to deliver the best in terms of availability, performance and data protection. Security is not an afterthought: it is part of the design from the very beginning.
Encryption and access control
All documents and personal data are transmitted over TLS 1.3 and stored encrypted at rest. Access to each user's data is segmented by unique identifier; no internal process can read one user's material by accessing another user's context.
Authentication credentials follow the OAuth 2.0 standard with short-lived tokens and automatic renewal. The session cookie is HttpOnly and Secure, inaccessible from client-side JavaScript.
Privacy by design
NutQuest applies the privacy by design principle: the minimum amount of data required for the service, retained for the minimum time necessary. LLMs only receive the text fragments needed to generate the specific exercise; they have no access to the full document or the user's profile.
You can request the deletion of your account and all your data at any time from the app settings. Deletion is complete and irreversible.