Nostos Privacy Policy
Effective September 24, 2026
Nostos helps you save, understand, and rediscover content you choose. We follow local-first and data-minimization principles and process only the data needed to provide the service.
Data We Process
- On-device content: Text, links, images, audio, video, and documents you save, plus text, OCR, transcripts, and indexes created on your device. This content stays on your device unless you enable cloud features.
- Account information: When you use Sign in with Apple, we receive the account identifier and any name or email address you choose to share. If you choose email sign-in or link an email, we process that email address and expiring verification challenges to authenticate you.
- Cloud content: Content and required metadata are uploaded over encrypted connections only when you enable sync, sharing, or cloud AI features.
- Purchase information: Apple processes purchases made in the Apple app. The directly distributed Android test build does not offer purchases. We receive only the product, transaction status, and expiration data needed to verify existing access, not full payment-card details.
- Operational information: Our servers process request times, status codes, and minimized error details needed for security and reliability. Apple MetricKit diagnostics may include crash stacks, hangs, abnormal exits, app and build versions, operating-system versions, and a random Diagnostic ID shown in Settings. They do not include personal-memory content or source addresses.
How We Use Data
We use this data to provide saving, parsing, search, answers, sync, sharing, subscription verification, security, and recovery. We do not sell personal data or use personal memories for advertising profiles. We do not use your content to train general-purpose AI models without separate, explicit consent.
AI and Service Providers
When you choose a cloud AI feature, content required to complete the request is sent to contracted cloud infrastructure and model providers. You can continue using on-device saving, OCR, transcription, indexing, and keyword search without cloud AI.
Usage analytics provider: PostHog Cloud. Analytics data is stored and processed in the United States.
Optional Usage Analytics
With your permission in Settings, Nostos analyzes page navigation, feature results, coarse response times, funnels and return visits. Events include app version, platform, a random installation reference and, when signed in, your Nostos account ID. Signing in links guest activity to that account so activity on different devices can be understood together. Signing out starts a new guest identity.
Analytics does not include saved content, titles, source URLs, questions, answers, names, email addresses, advertising identifiers, hardware fingerprints or screen recordings. IP addresses are not retained for analytics or used for location enrichment. We do not use this data for advertising or tracking across other companies’ apps.
You can turn usage analytics off at any time in Settings. This stops new collection and clears the local queue without affecting app features. Usage analytics has a one-year retention window; deletion processing is asynchronous, not an exact day-by-day erasure guarantee. Deleting your Nostos account also queues deletion of its linked analytics profile and events. For analytics-only or guest-data deletion, use the request link in Settings or contact support with the analytics references provided there. A queued request does not mean deletion has already finished.
Retention and Deletion
You control on-device content and can delete individual memories or clear local data. Account holders can request account deletion directly in Settings. This revokes cloud access and deletes or anonymizes account-related data. Diagnostic reports expire after 90 days. Minimal records required by law, security, or abuse prevention may be retained for a limited period.
Security
Local files use iOS Data Protection on Apple devices and app-private storage on Android. Account credentials are stored in Keychain or Android Keystore-backed encrypted storage. Network traffic uses TLS, and cloud data is protected in transit and at rest. Because cloud retrieval and AI features require server-side processing, we do not claim end-to-end encryption.
Children
Nostos is not designed for children. We do not knowingly collect personal information from children below the applicable age of digital consent.
Contact Us
For privacy questions, email support@dsysonshi.com.