Privacy

Last updated 31 August 2026.

The short version

Nano stores what you write down so it can organise it and hand it back to you. It is not sold, not shared with advertisers, and not used to train anybody’s model. You can download all of it at any moment, on any plan, without asking. You can delete all of it the same way, and deletion means deletion.

Who is responsible

To be completed before launch. The data controller is the operator of Nano. Once the company is registered, its name, registered address, company number and a contact email belong here, along with the ICO registration number.

What Nano stores

Your accountEmail address, and a name if you give one.
What you writeTasks, goals, projects, habits, notes, people, intentions — the content and its dates.
Your journalEvening entries and weekly reviews, including anything you write in them.
Scanned lettersThe text Nano reads out of a photograph, and the appointments it creates from it.
CalendarEvents from any calendar you connect, and the events Nano writes back.
TelegramYour chat id, if you link it, so Nano can message you — and anything you send the bot, which is stored as a capture.
DictationNothing. The words your browser transcribes arrive as text; no audio reaches Nano. See below for where the audio does go.
UsageWhich AI features you used, when, and what they cost to run.
BillingYour plan and its status. Card details never reach Nano — see below.
WaitlistIf you asked to be told when Nano opens: your email, whether you have abandoned a productivity app before, and which problem you picked. Deleted if you later make an account and delete it.
Signing inYour IP address and which browser you used, recorded against each sign-in. It is how a session can be recognised as yours and how repeated password guesses are slowed down. Nothing is built from it — no profile, no location, no analytics.

Sensitive information

Journals and scanned medical letters can contain special category data under UK GDPR Article 9 — health information, in plain terms. Nano treats it as such.

The lawful basis for handling it is your explicit consent — Article 9(2)(a). Nano asks for it separately for the journal and for the letter scanner, the first time you use each, and records what you agreed to and when. Neither is bundled into signing up, and refusing one does not affect the other or anything else in Nano.

You can take either permission back in Settings, as easily as you gave it. Withdrawing the journal switches it off and deletes the entries — once the permission is gone there is no basis to keep holding them, so Nano does not. Export first if you want them; the link is next to the button. Withdrawing the letter scanner deletes nothing, because Nano never stored the letters in the first place.

Nano is a productivity tool. It is not a medical device, it does not diagnose or treat anything, and nothing you write in it is reviewed by a clinician.

What leaves the app, and exactly what

Nano uses Anthropic’s models for a few specific features. This is the precise list, because “we may share data with service providers” tells you nothing:

Turning a sentence into a taskThe sentence you typed, and today’s date.
Reading a letterThe photograph, or the text you pasted.
The goal assistantThe goal you wrote and the questions you answered.
The weekly reviewCompleted task titles, habit records, HOW MANY notes you wrote — not their titles or contents — and the “wins” from your evening journal, not the rest of the entry.

Anthropic does not train models on data sent through their API. Everything else — the morning brief, the Return screen, search, your calendar, your notes — is computed by Nano itself and never leaves.

Dictation is different, and worth reading. The microphone button uses your browser’s own speech recognition. No audio reaches Nano — only the finished text. But Chrome, Edge and Safari transcribe by sending the recording to Google or Apple, so your voice does leave your device, to them rather than to us. It is the same bargain as your phone keyboard’s dictation key. If you would rather not make it, type instead; nothing else changes.

On the free plan, nothing goes to any model at all, because every AI feature sits behind the paywall.

Who else processes it

VercelRuns the app. United States.
TursoStores the database.
AnthropicThe AI features listed above. United States.
PolarPayments, as merchant of record. They handle card details; Nano never sees or stores a card number.
CloudflareA timer that tells Nano when to run the briefs. It carries no personal data.
ResendSends the few emails Nano sends — password reset and the welcome note. It sees your email address.
GitHubHolds the nightly backup, in a private repository. That backup is a complete copy of your data.
GoogleIf you connect Google Calendar — and, separately, if you dictate in Chrome or Edge (see below).
AppleIf you dictate in Safari. Nothing else.
TelegramOnly if you link Telegram.

Some of these are outside the UK. Transfers rely on the providers’ standard contractual clauses and UK adequacy arrangements.

How long it is kept

Mostly until you delete it. There is no automatic expiry on the things you write, because an organiser that quietly forgets things is not an organiser. Per type:

Your accountUntil you delete it.
What you writeUntil you delete the item, or the account.
Your journalUntil you delete it, the account, or you withdraw permission for the journal — which deletes the entries.
Photographed lettersNot kept at all. The image and the text read out of it are discarded when the request ends; only the appointments and tasks you tick survive.
CalendarUntil you disconnect that calendar, or delete the account.
TelegramUntil you unlink it.
Dictation audioNever held by Nano. Google and Apple apply their own retention to what their browsers send them.
Usage recordsUntil you delete the account. Which feature ran and what it cost — no content.
BillingUntil you delete the account. Polar keeps the payment records themselves, as merchant of record, under their own retention.
PermissionsUntil you delete the account. Kept while it exists because they are the record of what you agreed to and when.
Sign-in recordsUntil that sign-in expires or you sign out, and in any case until you delete the account. Your IP address and which browser you used, written when you sign in.

When you delete your account, the data is removed rather than flagged as hidden — Nano walks every table and fails loudly rather than reporting a partial deletion as success.

One honest exception. Nano writes a nightly off-platform backup so that a bad migration cannot be the end of your data. Those backups are not yet pruned on deletion, which means a copy of your content can survive in them after your account is gone. This is being fixed. Until it is, say so if it matters to you and it will be removed by hand.

Your rights

Under UK GDPR you can ask for a copy of your data, correct it, delete it, take it elsewhere, object to how it is used, or withdraw consent.

Two of those need no request at all — export everything and delete your account are both buttons in Settings, on every plan. The export is a zip of ordinary files, not a proprietary format.

If you think something has been handled badly, you can complain to the Information Commissioner’s Office at ico.org.uk. Raising it with us first is welcome but not required.

What Nano does not do

  • No advertising, and no advertising trackers.
  • No selling or renting your data to anyone, for any reason.
  • No training any model on what you write.
  • No reading your journal for product research.
  • No third-party analytics that carries what you wrote.