Privacy Policy

nonne is made by Pedro Conchas Burelo, at Boulevard Santillana 11, A2, Zapopan, Jalisco 45019, México. We decide how the data described here is handled, and we answer for it.

Privacy questions and requests about your data: privacidad@nonne.today. This policy covers the nonne iPhone app, the web app, and nonne.today.

Your account. Your email, and your name and photo if you add them.

What you put in nonne. Tasks, subtasks, notes, comments, tags, dates, durations, reminders, tracked time, and any files you attach. You decide what goes in here, including anything sensitive you choose to write down.

Your voice, while Helena listens. This one has its own section below, because it deserves it.

Your subscription. Which plan you are on and when it expires. We never see your card: Apple takes the payment.

How you use the app. Events such as signing in, creating a task, starting Helena or opening the paywall. They are tied to your account ID, not to your name or your email, and they carry counts and settings, never the text of your tasks or notes. To be precise rather than flattering: that ID still points at your account, so this is a pseudonym, not anonymity.

Your calendars, if you connect them. Read only, and never stored on our servers. See the calendar section.

People you invite. If you invite someone to your Circle, we store their email address so we can send the invitation, even if they never join nonne.

When you talk to Helena, your voice goes directly from your device to Google’s Gemini AI, which turns it into tasks. The audio does not pass through our servers, and we ask for your explicit permission before the first time it happens.

What we keep of it:

• No audio. The recording is not stored, by us or for us.
• No transcript. The text of what you said is not stored either.
• Only the count. We record that a session happened and when, to enforce the monthly limit on the Free plan.
• The result. The task Helena creates is saved like any task you type by hand, because it is one.

We use Google’s paid API tier, which means Google does not use your voice to train or improve its models. It keeps content briefly to detect abuse of its service, and nothing else. That is Google’s commitment on the paid tier, not ours, and you can read it in Google’s Gemini API terms.

Helena does not identify you by your voice. It does not build a voiceprint, it does not verify who is speaking, and it does not tell voices apart. It transcribes words in order to create tasks, nothing else.

A second AI, for context. Occasionally, to help Helena understand your world, we send a summary of your account to Anthropic (Claude): your name, email, timezone, the names of your tags and spaces, the email of a connected calendar, and the titles of up to 150 recent tasks. It returns a short paragraph describing how you work, which we store on your profile and give to Helena. Your notes are never included.

• To run the planner: store your tasks and sync them across your devices.
• To turn your voice into tasks, when you use Helena.
• To sign you in, and to send you the emails the service needs.
• To manage your subscription and the Free plan limits.
• To send the reminders and notifications you turn on.
• To understand how the app is used, so we can improve it.
• To keep the service secure, and to fix errors when it breaks.

We do not use your data to advertise to you, and we do not build a profile of you to sell.

These companies process data on our behalf, only to do their job for nonne, and they are bound by contract to protect it at least as well as this policy promises:

• Supabase stores your account and your content, on servers in the United States.
• Google (Gemini) receives your voice, live, while Helena listens.
• Anthropic (Claude) receives the account summary described above.
• Apple and RevenueCat handle the purchase and tell us which plan you are on.
• Resend delivers your sign in links and invitation emails.
• PostHog collects the product usage events and technical error reports described above, on servers in the United States.
• Expo delivers push notifications, which include the title of the task they are about.
• Sentry receives error reports. On the web, when an error happens, it may record a replay of that session so we can see what broke. Your email and IP address are stripped before it is sent.
• Google Analytics measures our public site and the sign in page. It does not run inside the app.

We do not sell your personal information, and we do not share it for advertising. No advertising network, no data broker, no cross app tracking. There is no IDFA in nonne.

Google Calendar. If you connect it, we ask only for read only access. Your events are fetched live to be shown next to your tasks and are never stored on our servers. The access tokens are encrypted. You can disconnect at any time, and doing so is enough for us to stop reading.

Apple Calendar. It is read on your iPhone, by your iPhone. Your events never leave the device and never reach us.

nonne is a personal planner, not a social network. Two things are visible to others, and only to people you chose:

• A task you share or assign is visible to that person, along with its comments and its title in the notification they receive.
• Your email can be used by other people to find you and invite you to their Circle. That is how invitations work.

Your attachments are private: they are served through links that expire and that only your account can request. Your profile photo, if you set one, is served from a public address.

We keep your data while your account exists. You can delete it whenever you want.

Deleting your account is immediate. From Settings, Account, Delete account, we erase your profile, your tasks, notes, comments, tracked time, tags, attachments, calendar connections and notification tokens. There is no grace period and no recovery. If you signed in with Apple, we also revoke that sign in with Apple, and if you connected Google Calendar we revoke that permission with Google.

What survives, and why:

• Purchase records. Apple and RevenueCat keep the history of what you bought. Tax and accounting law requires that, and it is not ours to delete.
• Error reports. Technical errors already logged remain, and they do not carry your email or your IP.
• Usage events already collected. These may remain in our analytics, no longer attached to an account that exists.

Wherever you live, you can ask us to see, correct, export or delete your data, and you can withdraw a permission you gave, such as Helena’s. Write to privacidad@nonne.today and we will answer.

If you are in the United States, this includes the rights your state gives you to know what we collect, to have it deleted or corrected, to opt out of its sale or sharing, and not to be treated worse for asking. We do not sell or share personal information, so there is nothing to opt out of, and we honour Global Privacy Control signals.

Most of it you can also do yourself: your data is in the app, and account deletion is one screen away.

Your data travels encrypted, and it is stored encrypted at rest. Your session lives in your device’s secure storage. Access to your rows is enforced by the database, not just by the app.

To be honest with you about the limit of that: we can technically read your content, because the server has to, in order to sync it and to give Helena context. nonne is not zero knowledge, and no planner that syncs and uses AI can honestly claim to be.

Our providers store and process data in the United States. Wherever you are, using nonne means your data is handled there, under the safeguards our contracts with those providers require.

nonne is not for children. We do not knowingly collect data from anyone under 13, and if we learn we have, we delete it. If you believe a child has an account, write to us.

If we change how we handle your data, we will update this page and, when the change matters, tell you in the app or by email before it takes effect. The date at the top is always the date of the version you are reading.

Pedro Conchas Burelo

Boulevard Santillana 11, A2, Zapopan, Jalisco 45019, México

Privacy and data rights: privacidad@nonne.today.