Privacy Policy

Last updated: 6 September 2026 · Applies to the Nitka app and heynitka.com

Nitka is a memory assistant: you capture quick notes and we help you remember and resurface what matters. That only works if you trust us with your information, so here is exactly what we collect, why, who helps us process it, and the control you have.

1. Who we are

Nitka is an independent app operated by David Wiesztal, an individual ("Nitka", "we", "us"). For data-protection purposes the operator is the data controller. You can reach us at privacy@heynitka.com; a postal address is available on request.

2. Information we collect

Account information

• Email address: for passwordless sign-in (we email you a magic link / one-time code) and essential service messages.
• Profile & preferences: optional name, your timezone, app language, and notification preferences (e.g. quiet hours, digest timing).
• Profile lines (optional): two free-text fields in Settings, "About you" and "What you want help with". Nitka reads them when it decides which follow-ups are worth raising, and when. You write them yourself; they are never inferred from your memos, and leaving them blank changes nothing. Because they shape the AI reasoning, they are sent to our AI providers as context (see section 4).
• Plan & usage: which plan you are on and simple usage counters (for example, how many memos and photos you captured this billing cycle) so we can apply your plan's allowances.

Subscriptions & payments

• Purchases are made through Apple's App Store or Google Play. Payment itself is handled entirely by the store: we never receive your card or bank details.
• To activate your plan, the store sends us the state of your subscription: the product you bought, whether a free trial or renewal is active, when the current period ends, and a store transaction identifier. We keep this subscription record while you subscribe, and we associate your purchase with your Nitka account by sending the store an account token (a random identifier, not your email).
• To cancel or change a subscription you use your App Store or Google Play account settings; the store then informs us and your plan updates.

Your memos and the memory we build from them

• The content you capture: text notes, voice recordings, and photos.
• Transcripts of voice memos, kept in their original language.
• Structured details we extract to make memos useful: people, places, jobs, dates, amounts, tasks/reminders, and relationships between the people you mention (for example, that someone is your daughter or a client), and the "threads" that group them.

Email capture (optional)

• You can forward an email to a personal Nitka address to turn it into a memo. When you do, the content of that email (subject, body, and any attachments) becomes a memo and is processed like any other. We record the sender address of forwarded mail to verify it belongs to you. Only mail from addresses you have verified is turned into a memo. We do not log into, read, or sync your mailbox.

Location

• When you add a photo in the app (and, optionally, other memos), we record the device's location (latitude/longitude) at capture and turn it into an approximate address on your device to give the memo context. The address becomes part of the memo, so it is processed like the rest of the memo's content (see section 4). You can decline location permission; capture still works.

Calendar (optional)

• If you grant calendar access, Nitka reads your upcoming calendar events to warn you when a new plan clashes with something already scheduled, to answer questions that depend on your schedule, and, no more than once a day, to proactively check the days ahead for clashes. Your calendar events are used only to do this in the moment: they are processed transiently by our AI providers (see section 4) for the check itself and are never stored on our servers (to avoid redundant checks, the app may send a short non-reversible fingerprint of your upcoming events; the fingerprint cannot be turned back into the events). If you choose to add an event to your calendar from within Nitka, we simply pre-fill your device's own calendar screen for you to confirm. We don't create, sync, or store calendar entries ourselves. You can decline calendar access; everything else still works.

Device & technical data

• Push token: a notification identifier (provided through Google Firebase Cloud Messaging) so we can send your reminders and digest. We may also send the occasional silent notification, used only to let Nitka run its daily review in the background.
• Device list: a random per-install identifier and the device's model name (for example "iPhone 15 Plus"), so you can see and manage the devices connected to your account and so plan device limits can apply.
• Crash & diagnostic data: if the app crashes or hits an error, we collect a crash/error report so we can fix it: the device type and operating-system version, the time, and the technical error message and stack trace. These reports deliberately exclude your memo content, transcripts, and answers. Native crash reporting is provided on our behalf by Google Firebase Crashlytics.
• Operational metadata: timestamps plus performance, reliability, and cost metrics. Our service logs deliberately exclude your memo content, transcripts, and answers.

Website (heynitka.com)

• If you request early access, we collect the email address you submit (plus basic request data such as IP address and timestamp) to contact you about the beta.
• Our web fonts are served by Google Fonts, which may receive your IP address when the page loads.

3. How we use your information

• Capture, transcribe, understand, and store your memos; organise them into threads.
• Answer your questions and surface reminders, links between notes, conflict warnings, and suggested follow-up actions at the right time, including a once-a-day proactive review of the days ahead.
• Compile reports from your memos when you ask (for example an expense claim) and, if you choose, email the report with its receipt photos to your own verified address.
• Activate the plan you purchased and apply its allowances.
• Learn your notification preferences (including from which suggestions you accept or dismiss).
• Operate, secure, debug, and improve the service.
• Contact you about your account or the beta.

4. AI processing & our providers

To make your memos useful, we use AI to transcribe, understand, and reason over what you capture. This processing is carried out on our behalf by trusted third-party AI providers acting as our data processors: Anthropic, OpenAI, Google (Gemini), Groq, and Mistral. Depending on the feature, they may receive the content of your memos (text, voice recordings, photos and documents), the content of emails you forward to Nitka, your calendar events when you use conflict warnings, the approximate place a memo was captured, the profile lines you chose to write, and relevant context from your earlier memos.

Each provider is bound by contract to process your content only to provide these features, with protection equal to or stronger than what this policy promises. Your data is never used to train AI models, is never sold, and is never used for advertising. You agree to this processing in the app before Nitka processes your first memo, and you will be asked again if this list of providers materially changes. Questions about our processors: privacy@heynitka.com.

5. Legal bases (EEA / UK users)

• Performance of a contract: to provide the app you asked for.
• Consent: for device permissions you grant (microphone, photos, location, calendar, notifications); you can withdraw these in your device settings.
• Legitimate interests: to keep the service secure, working, and improving.

6. Data retention

• Your memos and the memory built from them are kept until you delete them or delete your account.
• Voice audio may be deleted after it has been transcribed; the transcript remains until you delete it.
• Your profile lines stay until you clear them or delete your account.
• Operational, crash, and diagnostic data is retained for a limited period for security and troubleshooting.
• Subscription records are kept for as long as your subscription is active, then as required for accounting and legal purposes.
• When you delete your account, your data is erased from our systems within 30 days, excluding anything we must keep by law.

7. How we protect your data

• Encrypted in transit (TLS) and at rest.
• Per-user database access controls; private file storage reached only through short-lived signed links.
• Provider keys kept server-side; your session tokens stored in the device's secure keystore.
• On-device data protected by the operating system's encryption.

No system is perfectly secure, but we use measures appropriate to the sensitivity of the data.

8. International transfers

Our AI providers (see section 4) and hosting providers process data in the United States and other countries. Where data leaves the EEA or UK, we use appropriate safeguards, such as Standard Contractual Clauses or certification under an adequacy framework, to protect it.

9. Your rights & choices

• Export: download your data as JSON from inside the app.
• Delete: "delete my account" in the app erases your memos and account.
• Access, correction, restriction, objection, portability: write to privacy@heynitka.com.
• Withdraw permissions: change microphone, photo, location, calendar, or notification access in your device settings at any time.
• Complain: if you're in the EEA or UK, you can lodge a complaint with your local data-protection authority.

10. Children

Nitka is not directed to children and is not intended for anyone under 16. We do not knowingly collect data from children.

11. Changes to this policy

We'll update this page when our practices change and revise the date above; significant changes will be communicated in-app or by email.

12. Contact

Questions or requests: privacy@heynitka.com. David Wiesztal, operator of Nitka.