Privacy policy

Nova is built by one person and connects to some of the most personal accounts you own. This explains exactly what it holds, where that data goes, and how to get it all deleted.

Who's responsible

The short version

Nova is operated by an individual (not a company) in British Columbia, Canada. Your data is stored on a single private server, encrypted, used only to run the assistant for you, and never sold, rented, or used to train anyone's AI models. You can have all of it deleted by asking.

1. What Nova collects

Things you give it directly

Your name, email, and phone number.
Everything you say to Nova — in the app, by text, by Siri, and on phone calls (calls are transcribed to text).
Tasks, goals, habits, training logs, places you mention, preferences, notes, and files or PDFs you send it.
Financial figures you choose to enter (account balances, loans).

Things it reads from accounts you connect

Google Calendar — events, times, locations, and attendees on calendars you own.
Gmail — recent messages, scanned to find commitments. Nova stores only short extracts (a couple of lines), never whole emails. It can also open an attachment when you specifically ask.
iMessage — only if you install the optional Mac helper, and only messages that reach that Mac.
Bank data via Plaid — only if you connect a bank yourself.

Things it works out on its own

Patterns from your own data: streaks, how long tasks take you, which people recur, which places you go.
A record of every message Nova sent you and why.

Nova does not collect your location, does not read your phone directly, and has no advertising or analytics trackers of any kind — no Google Analytics, no pixels, no third-party cookies.

2. Why it holds each thing

Every piece of data exists for one reason: to let the assistant do its job for you. Calendar and email are read to find what you're committed to. Conversations are kept so Nova remembers context. Habits and training are kept so it can track progress you asked it to track. There is no secondary use.

3. Who else sees it

Nova relies on a small number of services. Each receives only what that job requires:

Service	What it receives	Why
Anthropic	Your messages and relevant context	The AI that writes Nova's replies, takes your notes, and reads any file or image you attach. Per Anthropic's API terms, this data is not used to train their models.
OpenAI	Your voice during a call, and the audio of any video you send	Live voice conversations and speech transcription. Per OpenAI's API terms, this data is not used to train their models.
Google	Calendar & Gmail access you granted	Reading your commitments, creating events, sending mail as you.
Twilio	Your phone number and message text	Delivering texts and phone calls.
Auth0	Your email and login	Signing you in securely — Nova never sees your password.
DigitalOcean	The encrypted database at rest	Hosting the server.
Plaid	Bank credentials & balances	Optional. Only if you connect a bank.
Open-Meteo	Nothing about you — a city forecast	Weather in the morning briefing.

Nothing is ever sold, shared with advertisers, or handed to anyone else, except if legally compelled — in which case you'll be told unless the law forbids it.

4. How it's protected

Encrypted at rest. Conversations and sensitive fields are encrypted in the database with a key kept separately — a stolen copy of the database file alone is unreadable.
Encrypted in transit. The whole site runs over HTTPS.
Locked down. Sign-in required for everything, invite-only accounts, rate limiting, and hardened security headers.
Backups. Nightly encrypted snapshots are kept (a week of dailies, then weekly for two months) and one is emailed to the operator's own Google account weekly for off-site safety.

No system is perfect. Nova runs on one small server maintained by one person — please weigh that before connecting anything you'd consider high-risk.

5. How long it's kept

Your data is kept while your account exists, because the assistant's usefulness depends on memory. Email contents are never stored in full — only short extracts. Backups roll off automatically within about two months. Delete your account and everything, including backups as they cycle out, is gone.

6. Your rights

Wherever you live, and regardless of what local law requires, you can:

See it — ask for a copy of everything Nova holds about you.
Correct it — tell Nova, or edit it in the app.
Delete it — clear your conversation history yourself at any time from the chat screen, or ask for the whole account to be erased permanently.
Disconnect — revoke Google access from your Google account settings, or disconnect a bank, at any moment.
Leave — take your data and go, with no dark patterns in the way.

Requests are handled personally, normally within a few days.

7. Children

Nova isn't intended for anyone under 16, and accounts are invite-only.

8. Changes

If this policy changes in a way that affects how your data is used, you'll be told directly — by text or email — not by a silent edit.

9. Contact

Questions, a data request, or a complaint: [email protected]. If you're in Canada and unsatisfied with the response, you may contact the Office of the Privacy Commissioner of Canada.

Last updated 2026.