Journal entries

Your entries are encrypted on our servers using AES-256-GCM encryption before storage. We cannot read your entries. No one can without your credentials.

Account information

Your email address, used solely for authentication via magic link. We do not store passwords.

Timezone

Your device timezone is detected automatically when you complete onboarding and stored on your account. This is used to ensure your journal entries, streaks, and daily tracking are attributed to the correct day in your local time. You can view and update your timezone at any time in Settings.

Usage data

Basic, anonymous usage signals (page loads, feature interactions) to understand how the app is used. No personally identifiable information is attached to this data.

AI processing

When you write a journal entry, the text is sent to Anthropic (our AI provider) to generate a personalised reflection. Your entry content is transmitted securely and is not used by Anthropic to train their models. We do not store your entries in any unencrypted form at any point in this process.

Apple Health data (iOS only, optional)

If you grant permission, Nous reads your daily step count and previous night's sleep duration from Apple HealthKit. This data is stored securely in our database to power the Growth tab, which surfaces patterns between your activity and your journal entries over time. Your health data is:

• Only accessible to you
• Never shared with third parties
• Deleted when your account is deleted

You can revoke this permission at any time in iOS Settings → Health → Data Access & Devices. To request deletion of your health data without deleting your account, contact privacy@nous.mobi.

All users

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for optional data uses (such as Apple Health)

California residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion of your personal information, and to opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, contact privacy@nous.mobi.

European Economic Area and UK residents (GDPR / UK GDPR)

If you are located in the EEA or the United Kingdom, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. You also have the right to lodge a complaint with your local data protection authority. Our lawful basis for processing your data is the performance of our agreement with you (providing the Nous service) and, where applicable, your consent. To exercise your rights, contact privacy@nous.mobi.