what the app keeps, where it keeps it, and what reaches us. written 26 October 2026, changed 27 October 2026, and changed only here, with the date.
everything you say into the app is written to plain text files on your phone, and in your iCloud Drive if your phone is signed in to iCloud: your inbox, today's list, what you have done, a log, your notes, and a page of your preferences in your own words. we do not hold a copy. open the folder in anything, point another app at it, or copy it and you have everything.
the first thing the app asks is whether what you say may be sorted by AI. if you say yes: to make your day, to decide what to do with something you said, or to turn your answers into your preferences page, the app sends our server what it needs for that one call: the lines you said, your preferences page, a week of your log, the headings of your notes, and, when your own assistant has left one, its report for the day. the server adds its instructions, sends that through OpenRouter to a language model from Anthropic or DeepSeek, checks the answer and returns it. it keeps nothing of what you said. what it logs is the shape of the call and never the content: which call, a hash of a random id your install chose, which model, how many words, what it cost and how long it took.
the models run at providers that neither keep nor train on what they are sent; we ask for that on every call and refuse providers that do not promise it. we never train anything on what you say.
if you say no thanks, nothing you say is sent to any AI. your days are made on your phone, more simply. you can change your answer by running the first conversation again behind the slash.
your voice is turned into words on your phone. with your yes to AI, the words go to our server for a one second correction pass, with the few names from your preferences page or your contacts that sound like a word in them, and come back corrected. your audio never leaves your phone. the server keeps nothing from this call either.
both are read on your phone only, and only if you say yes when the app first asks. a phone number or an address from your contacts is put under a line on your phone and is never sent to us. if you allow the calendar, the week's events go with the night call so the day can be planned around them, and are kept nowhere.
if you sign in with Google, the app copies your folder of files to a folder called nownotnow in your own Google Drive, so it is on your other devices and your own assistant can reach it. the copying is done by the app on your phone, straight to Google; our server never sees a file. the app asks Google for two things: to make and change the files it makes itself, and to read files in your Drive, which it uses only to read what your own assistant writes into the nownotnow folder. it does not read anything outside that folder, does not send anything it reads to us, and does not share it with anyone. the app's use of information from Google follows Google's API Services User Data Policy, including its Limited Use requirements.
our server learns one thing from a sign in: it checks the identity Google or Apple gives the app, and answers with an account id it makes from it. it does not keep your email, your name or the id.
if you use Claude, ChatGPT or Gemini and set it up from the app, it reads your nownotnow folder in Google Drive and writes into it, on your own account and under that company's own privacy terms. what it writes comes to your phone through your Drive.
the app also gives your assistant a link of its own, so it can put a line on your day at once when something it watches for happens. for that link our server keeps two things for your account: a scrambled form of the link's key, never the key itself, and the token Apple gives your phone for notifications. the line your assistant sends passes through our server to your phone and is not kept. both things are deleted when you delete your account.
if a night goes wrong and you say yes when the app asks, that night's call and answer are kept for up to thirty days so another model can read them and we can fix the rule that failed; then they are deleted. the same is true, for every call, for people who opt in to help us improve the app. nothing from either is used to train anything.
the app tells our server which steps of the first run conversation were reached, answered or skipped, which version of it you were shown, and whether the app was opened the next day. never what you answered.
the app includes Meta's software so that, when a free trial starts or a subscription begins, Meta can be told that an advert worked. it does not ask to track you, it does not track you across other apps or sites, and it is never given your lists or your notes.
subscriptions are handled by Apple through the App Store. we never see your payment details.
behind the slash, under your sign in, delete my account forgets your account on your phone and on our server: the sign in, the link your assistant uses with what our server keeps for it, and the connection to Google Drive. your files stay on your phone and in your Drive, to keep or delete as you like. a subscription is cancelled in the App Store.
write to us through the app's page on the App Store.