Nostos Privacy Policy
Effective September 1, 2026
Nostos helps you save, understand, and rediscover content you choose. We follow local-first and data-minimization principles and process only the data needed to provide the service.
Data We Process
- On-device content: Text, links, images, audio, video, and documents you save, plus text, OCR, transcripts, and indexes created on your device. This content stays on your device unless you enable cloud features.
- Account information: When you use Sign in with Apple, we receive the account identifier and any name or email address you choose to share.
- Cloud content: Content and required metadata are uploaded over encrypted connections only when you enable sync, sharing, or cloud AI features.
- Purchase information: Apple processes subscriptions. We receive the product, transaction status, and expiration data needed to verify access, but not your full payment-card details.
- Operational information: Our servers process request times, status codes, and minimized error details needed for security and reliability. Apple MetricKit diagnostics may include crash stacks, hangs, abnormal exits, app and build versions, operating-system versions, and a random Diagnostic ID shown in Settings. They do not include personal-memory content or source addresses.
How We Use Data
We use this data to provide saving, parsing, search, answers, sync, sharing, subscription verification, security, and recovery. We do not sell personal data or use personal memories for advertising profiles. We do not use your content to train general-purpose AI models without separate, explicit consent.
AI and Service Providers
When you choose a cloud AI feature, content required to complete the request is sent to contracted cloud infrastructure and model providers. You can continue using on-device saving, OCR, transcription, indexing, and keyword search without cloud AI.
Retention and Deletion
You control on-device content and can delete individual memories or clear local data. Account holders can request account deletion directly in Settings. This revokes cloud access and deletes or anonymizes account-related data. Diagnostic reports expire after 90 days. Minimal records required by law, security, or abuse prevention may be retained for a limited period.
Security
Local files use iOS Data Protection, account credentials are stored in Keychain, network traffic uses TLS, and cloud data is protected in transit and at rest. Because cloud retrieval and AI features require server-side processing, we do not claim end-to-end encryption.
Children
Nostos is not designed for children. We do not knowingly collect personal information from children below the applicable age of digital consent.
Contact Us
For privacy questions, email support@dsysonshi.com.