Privacy

This policy covers the Nave app for iPhone and this website, navememory.com. Nave is made by Denys Vysochin in Ukraine. For anything about your data, write to hello@navememory.com. The rules for using Nave are in the terms.

In short: your notes are stored on your iPhone and in your iCloud Drive, not with us. A few features have to send data to a server, and each one is listed below.

What Nave never receives

• Your notes as stored files. They're plain Markdown files in your iCloud Drive, or on your iPhone if iCloud Drive is off. We have no copy.
• Anything handled by Apple Intelligence. It runs on your iPhone, and Nave doesn't send that text anywhere.
• Anything you send with your own OpenAI, Anthropic or Google key. That request goes from your iPhone straight to that company.
• Voice recordings transcribed on your iPhone, which is the default.

The app has no analytics, no advertising identifier and no crash-reporting service. If you've chosen to share crash data with app developers in your iPhone settings, Apple may pass crash reports on to us.

The app

AI titles and summaries

Nave sends a note to an AI model only after you've agreed to it on a screen that names the provider, says what is sent and who receives it, and asks before anything leaves your iPhone. You agree separately for each provider: changing to a different company asks you again in full, and sending voice recordings to OpenAI has a permission of its own. Until you agree, nothing is sent, and you can start Nave without AI at all.

You choose the provider:

• Apple Intelligence, on iPhone 15 Pro or later. Nave doesn't send the text anywhere.
• Your own key for OpenAI, Anthropic or Google. The request goes straight from your iPhone to that company, under your agreement with them and their API terms: OpenAI, Anthropic, Google.
• Nave's built-in AI, with no key and no account. It's described in the next section.

If you use a free Google key: Google's terms say it uses what you send to improve its products, that people may read it, and that you shouldn't send personal information on the free tier. This doesn't apply to a paid Google key.

Nave's built-in AI

Your iPhone proves it's a genuine copy of Nave using Apple's App Attest, and our server gives it a token that's stored in your iPhone's Keychain. The token identifies that install. There's no account, email or password.

The app can also send our server Apple's record of your download of Nave, which includes an App Store transaction ID. That ID is the same on every iPhone where you installed Nave with the same Apple Account, and we use it to recognise the same download across reinstalls for plans and trials. It doesn't tell us your name, email or Apple Account.

When you use the built-in AI, the note's text goes to our server at api.navememory.com, with a limited amount of context so the model can tell whether the note continues something you were already writing about: a date, and short summaries and titles of a few recent notes and threads. Apart from the install token, no file names, location or device identifiers are sent. Our server passes the request to OpenAI or Anthropic, on our account. Like any server, it receives your IP address with each request. It doesn't log it; when a device enrols, the address is kept for up to one minute to limit how many enrolments can come from it.

We don't store the text of your notes. It's used to answer the request and isn't saved by us. OpenAI and Anthropic handle it under their API policies, which say API data isn't used to train their models and may be kept for up to 30 days to detect abuse, or longer where their policies or the law require: OpenAI, Anthropic.

What we do keep is a usage record for each request: which kind of task it was, whether it worked, how many tokens or seconds of audio it used, and when. Never the text. We also keep a running total of requests, tokens and seconds of audio for each install for the current month.

Nave Free is counted for the Apple Account that downloaded Nave: each note the built-in AI writes up and each edit it makes to a note at your command, on every iPhone that uses that Apple Account for the App Store, so reinstalling doesn't start the count again. The counts are kept against the App Store transaction ID described above, not your name, email or Apple Account. So that a request your iPhone has to send twice is counted once, we keep a keyed fingerprint of each counted request: a number worked out from the request that contains none of its text.

If you subscribe to Nave Pro, Apple tells our server about the subscription: its ID, which plan, its status and when it renews or ends. We use that to switch Nave Pro on and off. Apple handles the payment; we never see your payment details.

Our server runs on DigitalOcean in Frankfurt, Germany, and the usage records, monthly totals and install records are stored there. The server doesn't write request logs. If something on the server fails, an error report goes to Sentry, without the text of your notes, the contents of the request or your IP address. How long each of these is kept is listed below.

Voice

Nave asks for permission to use the microphone before it records anything. By default, the recording is turned into text on your iPhone and the audio isn't uploaded.

Two settings change that. Both are off until you turn them on.

• With Nave's built-in AI, the recording is uploaded to our server and transcribed through the same providers as above, and we don't store it. The languages you chose and up to 600 spelling hints taken from your own notes go with it, single words and short phrases, so names and terms come back spelled the way you write them. The same hints go with a recording sent to OpenAI under your own key.
• With your own key, Settings › Voice can use OpenAI's transcription, and the recording goes from your iPhone to OpenAI. Turning this off deletes its key and any recordings still waiting to be sent.

Reminders

If you turn on reminders, Nave asks for access to Reminders and adds them on your iPhone. iOS has no write-only permission, so the access also allows reading, but Nave doesn't read your existing reminders. Nothing from Reminders is sent to us.

This website

The site sets no cookies and has no analytics, tracking pixels or third-party scripts. Fonts are served from this domain. The site is hosted on Cloudflare, which handles every request to it, as any host does. Because nothing on the site tracks you, a browser's Do Not Track setting doesn't change anything here.

If you join the list for the Mac version, we store your email address, the language of the page and when you signed up, in Cloudflare Workers KV. We use the address for two messages only: a note confirming you are on the list, and one email when the Mac version is out. The emails are sent through Resend, which receives your address to deliver them. Once the Mac email has gone out, we delete the list.

To stop spam, the sign-up form keeps your IP address for up to one minute after your last attempt, and then it expires.

Who else handles data

• DigitalOcean runs our server for the built-in AI in Frankfurt, Germany, with its usage records and install records.
• Sentry receives error reports from that server, without note text, request contents or IP addresses.
• Cloudflare hosts the website and stores the Mac list.
• Resend sends the Mac list emails.
• OpenAI and Anthropic run the models behind Nave's built-in AI.

These companies process data for Nave only to provide their service, under terms that require them to protect it at least as well as this policy does. All of them are US companies, so data may be processed in the United States, under the safeguards they provide for international transfers, such as standard contractual clauses.

Apple is separate: iCloud Drive is your own Apple service, used under Apple's terms, and App Attest is how Apple confirms the app is genuine.

We don't sell your personal information, and we don't share it for advertising.

Why we can use your data

Data protection law asks for a legal reason for each way we use your data. These are ours:

• Nave's built-in AI and voice uploads: your consent, given on the screen that names the provider. Turn the provider or the setting off to withdraw it.
• Mac list: your consent. You can leave the list at any time.
• Install token, App Store transaction ID, Nave Free counts, request fingerprints, usage records and error reports: our legitimate interest in running the built-in AI, applying Nave Free's limits and plans, and protecting the service from abuse.
• Nave Pro subscription records: providing the subscription you bought.
• IP address on the sign-up form: our legitimate interest in stopping spam.

How long data is kept

• Notes: on your devices and in your iCloud Drive until you delete them. We have none.
• Text and recordings sent to the built-in AI: not stored by us. OpenAI and Anthropic may keep them for up to 30 days, as described above.
• Usage records: 90 days. Deleted sooner if you ask.
• Monthly totals per install: 90 days from the start of the month.
• Nave Free counts for your download, and the fingerprint of each counted note: for as long as Nave offers Nave Free.
• The fingerprint of each counted edit: one day.
• Your install record (token, App Attest key, plan and App Store transaction ID): until you ask us to delete it.
• Nave Pro subscription records: a year after the subscription ends, for refunds and disputes.
• Server logs: our server doesn't write request logs.
• Error reports in Sentry: up to 90 days.
• IP address when a device enrols: up to one minute.
• Mac list: until the Mac email is sent, or until you ask to be removed.
• IP address on the sign-up form: up to one minute after your last attempt.

API keys you add are stored in your iPhone's Keychain. Turning a provider off stops the sending at once but leaves its key there, so you can turn it back on without fetching it again; to remove a key, tap Delete on its row in Settings › AI provider. The copy of your OpenAI key used for voice transcription is deleted when you turn that off in Settings › Voice. The Nave install token is stored in the Keychain too; tap Delete on the Nave token row in Settings › AI provider to remove it. Keychain items stay on your iPhone after an app is deleted, so delete keys before you delete Nave if you want them gone at once; the first time a reinstalled Nave opens, it deletes any keys and token left behind. Deleting the app removes its search index and settings, but not your notes in iCloud Drive.

Your rights

You can ask us to show you the data we hold about you, give you a copy you can take elsewhere, correct it, delete it, or limit how we use it. Where we rely on legitimate interest, you can object to that use. You can withdraw your consent at any time, for example by leaving the Mac list or turning off an AI provider. Write to hello@navememory.com and we'll reply within 30 days. If you think we've handled your data wrongly, you can also complain to the data protection authority in your country.

Children

Nave isn't meant for children under 13, or under the minimum age for this in your country, and we don't knowingly collect their data.

Changes

If this policy changes, the date at the top changes too. For significant changes, we'll also say on this page what changed.

On 10 October 2026 we said that you agree for each provider rather than each space, that turning a provider off keeps its key until you delete it and that a reinstalled Nave deletes keys and the token left behind, and that the voice hint is up to 600 spelling hints rather than 600 words. We added the Nave Free counts and request fingerprints our server keeps for the Apple Account that downloaded Nave, and how long they are kept.

On 14 September 2026 we said where Nave is made, named DigitalOcean, which runs our server, and Sentry, which receives its error reports. We described the usage records, App Store transaction ID and subscription records our server keeps, added the legal reasons we use your data, and said how long each thing is kept.

Contact

hello@navememory.com