Last updated: 2026-10-15
This is the canonical Privacy Policy for Nosy. The same text is mirrored in the web app and the iOS app. Questions? Email support@nosyfriend.com.
Nosy is for people who are 13 years of age or older. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has used Nosy, contact support@nosyfriend.com and we will delete the account.
quiet-hours preferences).
ideas, artifacts).
We share the minimum necessary data with a small set of processors, each bound to use it only to provide their part of the service:
| Processor | Purpose | What it receives |
|---|---|---|
| Anthropic (Claude Haiku) | Generates chat replies and classifies messages for safety | Your messages, recent conversation context, and the profile details needed for a reply (e.g. name, tone). Not your email or password. |
| Resend | Sends the one-time login code by email | Your email address and the login code |
| Render | Hosting and database | Your account data, stored to run the service |
| Apple | Push notifications (iOS) | A device token and the notification text |
| Only if you connect Calendar or Gmail | Read-only access you grant, used to read the calendar events / emails you allow (see "Google user data" below) |
We do not sell your data, and we do not use it to train third-party models.
If — and only if — you connect Google Calendar or Gmail, Nosy requests read-only access (one product at a time):
calendar.readonly): your upcoming events (title, time), soNosy can time its check-ins around them.
gmail.readonly): an email's **subject, sender and a shortsnippet** — only as needed to spot things like a booking, bill or a reply you're waiting on. Nosy never sends email and never reads full message bodies beyond that snippet.
This data is used only to generate your check-ins and replies. To produce a reply it is processed by Anthropic (Claude Haiku) (the message/context only). It is never sold and never used to train AI models. When you disconnect a source, or delete your account, the Google token is revoked and the stored Calendar/Gmail data is deleted.
Nosy's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We send sign-in codes from no-reply@mail.nosyfriend.com, through Resend. The sending domain mail.nosyfriend.com is verified (DKIM, SPF, DMARC).
You can edit your profile and preferences, delete individual memories, or delete your whole account from Settings. Deleting your account removes your profile and ends your sessions.
support@nosyfriend.com