Privacy Policy

Last updated: September 21, 2026 · In effect now, alongside the updated Terms of Service.

NurtureBot is a personal relationship manager: you tell it who you met, and it helps you remember them and stay in touch. To do that it holds information you clearly care about keeping private. This page explains, in plain English, what we collect, what actually happens to it, and the choices you have. Where the Terms of Service set out the permissions you give us, this page describes what we really do today, and we keep it accurate.

What we collect

Your account. Your email address and first name, used to sign you in and greet you.

The contacts you add. Names, details, notes, and the history of your interactions with them: the information you type, dictate, scan or import so NurtureBot can help you keep up with people.

Your conversations with the assistant. The messages you exchange with NurtureBot in the chat, so it has the context to help you.

Feedback you send. If you use the in-app feedback feature, we read it (with AI help summarising it) so we can improve the app.

The beta link you asked for on our website. If you type your name and email into the "email me the link" box on nurturebot.app, we store them so we can send you the link and a few follow-up reminders. Every one of those emails has an unsubscribe link, and unsubscribing stops them at once. You do not need an account for this, and we never add that address to anything else. Our email service tells us whether each of those emails was delivered, opened, or had a link tapped, so we can fix it when they do not arrive; the website itself may also send an anonymous visit count and a code for your browser to our analytics service, never your name or email.

An invite a friend sent you. If you type your first name and email on a friend's invite page (a NurtureBot code you scanned, or an invite link they shared), we store them only to send you that one invite email and, if you then sign up with the same address, to match the invite so you and your friend both get your free credits. It is one email, not a mailing list, and we never use that address for anything else.

Usage and device information. Basic technical information generated by using the app, such as which screens you opened, logs and crash diagnostics, used to keep the service running and fix problems.

Your credit balance. A count of your credits and what you spent them on, so the balance is accurate and we can fix it if something goes wrong.

Things on your phone that NurtureBot can read, and what happens to them

Each of these is optional, each asks your permission first, and each can be turned off. This section is the detail behind those permission prompts.

Your phone's address book. If you turn on phone contacts, NurtureBot reads your address book on your phone to match people you already know and fill in a missing email or phone number. The address book is never uploaded. The matching code never touches the network; it compares two lists in your phone's memory and returns suggestions. What does reach your account is the people you add, which are then saved like any other contact. The app also keeps a device-local list of scrambled, one-way name codes so it can tell who is new since last time; that list is not a readable copy of your contacts and never leaves the phone.

Your calendars. Two separate, optional connections, both read-only. Google Calendar connects through Google and can be disconnected at any time in Settings, which cuts off our access immediately. The calendars on this device (for example your iPhone's own calendars) are read on the phone through iOS. In both cases NurtureBot looks for networking events so it can help you prepare and remember who you met, and only a networking event's title and start time are saved. Nothing else from your calendar leaves your phone, and NurtureBot can never create, change or delete anything on a calendar.

Your photo library. When NurtureBot offers to draft a LinkedIn post about an event, it can show you your own photos from around the time of that event so you can pick some. Those photos stay on your phone unless you explicitly turn on the option to let the AI look at them, and even then only one short factual sentence per photo comes back as text. The photos themselves are never stored by us.

Business card scans. When you scan a card, the photo is sent to our server, read once by AI to pull out the name and details, and then discarded. The photo itself is never stored.

Your microphone. When you talk instead of typing, the app records a short clip and sends it to our transcription provider, which turns it into text. The recording is not kept, by them or by us, and the clip is deleted from your phone right after it is sent. Only the text comes back.

Files you import. If you import contacts from a spreadsheet or a LinkedIn export, the app makes a temporary copy to read it and deletes that copy as soon as the import finishes, successfully or not. What remains is the contacts you chose to import.

Contact profile photos. If a contact has a public LinkedIn or Instagram profile, we can fetch their public profile photo. We send only that profile link to a lookup service, never anything about you, and store the returned photo privately in your account.

How we use your information

We use the information above to:

• provide, personalise and improve the service;
• generate the assistant's replies, drafts and suggestions for you;
• work out where the assistant gets things wrong, and make it better, including developing and training the models that power NurtureBot (see the next section);
• keep the service secure, prevent fraud and abuse, and fix problems;
• communicate with you about your account or important changes; and
• comply with legal obligations.

AI, and how your information is processed by it

What is sent, and when. When you ask the assistant something, draft a message, scan a card or use a feature that needs AI, the relevant part of your information is sent to an AI provider to produce that answer, and the answer comes back. Nothing is sent when you are not using an AI feature. The assistant only ever proposes: your contacts, scores and follow-up dates are written by the app itself, never directly by a model.

The providers do not train on it. The outside AI companies whose models we call are barred by their contracts with us from using what we send them to train their models.

We do use it to improve NurtureBot. We look at how the assistant performs so we can tune it, and we may use your content to develop and train models for the product, including models we build ourselves. This is on by default. If you would rather your content was not used that way, you can turn it off any time with the Help train the AI switch in Settings (or by emailing nurturebot.support@gmail.com from your sign-up address). It costs nothing and does not reduce what the app can do for you.

What our AI usage logs cannot contain. Every AI call writes a row recording which feature asked, which model answered, how many tokens it used, what it cost and whether it worked. That table has no column for your messages, drafts, notes or contact names, so it cannot hold them even by accident. Those rows are deleted after 90 days.

Advertising

NurtureBot shows no advertising today, and no advertising or measurement company receives anything from us. Our Terms of Service reserve the right to personalise what you see inside NurtureBot and, if we ever work with advertising partners, to share hashed or device identifiers with them: values that let a partner recognise a match without receiving your name, your contacts, or your notes. We would never give an advertiser your contacts, notes or messages, and we do not sell your personal information.

If that ever changes in practice, we will update this page and tell you in the app before it takes effect, and we will provide the opt-out that the law requires.

The services that help us run NurtureBot

We share information only with service providers working on our behalf, and each may use it only to provide its service to us. Today those are:

• Supabase - hosts our database and accounts. This is where your data lives.
• Anthropic (Claude) and xAI (Grok) - the AI models behind the assistant. Which one handles a request depends on the kind of request; both are used the same way and under the same rule.
• Deepgram - turns speech into text when you dictate. It receives the recording only for as long as transcription takes, and the recording is not kept.
• Apify - looks up public LinkedIn and Instagram profile photos. Receives only the profile link, nothing about you.
• Google - only if you connect Google Calendar.
• Apple - if you buy credits, Apple handles the payment and we ask Apple to confirm the purchase is genuine. We never see your card details.
• Resend - delivers email: your data export, the weekly recap if you have it on, any feedback you submit, and the beta link and its reminders if you asked for them on our website.
• Expo - delivers push notifications. Receives the notification text and your device's push token, not your contacts.
• PostHog - usage analytics, so we can see which screens are used and what is confusing. It receives which screens you opened, never the names, notes or messages of the people in your contacts.
• Sentry - crash reporting, so a bug that breaks the app gets noticed and fixed. It receives technical error details.

As NurtureBot grows we may add or swap providers doing the same kinds of jobs. The rule always holds: a provider receives only what its job requires, and only to serve us. We may also disclose information where the law genuinely requires it, for example in response to a valid legal request, and we will tell you unless we are legally prevented from doing so.

Google's Limited Use rule

NurtureBot's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In plain words: Google data is used only to provide the features described here, never for advertising, and never sold or passed to data brokers.

How your data is protected

Every row in our database is locked to your account by database-level security rules, so the database itself refuses to show your data to anyone but you. Data travels between your phone and our servers over encrypted connections. AI and lookup services are called from our servers using secret keys that never live in the app on your phone. Your sign-in token is held in your phone's secure keychain, not in ordinary app storage, so it does not travel in an unencrypted device backup.

There is also an operator role that is structurally unable to read your notes or messages: it can see counts and totals for running the service, and the database will not return the content to it. That is enforced by the database, not by a promise.

No method of storing or transmitting data is 100% secure, and no honest company can promise otherwise, but we design for safety at every layer.

If something goes wrong

If we discover a security breach affecting your personal information, we will investigate immediately, act to contain it, and notify you and any regulator required, without undue delay, telling you what happened, what information was involved, and what you can do about it.

How long we keep your data

• Your account and everything in it: for as long as your account is open. When you delete your account it is deleted, immediately and permanently, apart from the sign-up email and credit balance described under “Your choices, and deleting your data” below, and anything the law requires us to keep.
• AI usage records (no message content, no names): 90 days, then deleted automatically.
• Your chat scrollback on your phone: 7 days, and it is cleared when you sign out.
• Business card photos, voice recordings, and imported files: not kept at all, as described above.
• Aggregated or de-identified statistics that cannot be tied back to you: we may keep and use these to understand and improve the service.

Where your data lives, and the legal basis for using it

NurtureBot is operated from the United States, and your information is processed and stored there. If you are in the United Kingdom or the European Economic Area, that means your information is transferred outside your country; we rely on the appropriate safeguards for those transfers.

If you are covered by UK or EU data protection law, our legal bases are: performance of our contract with you (running the app, storing your contacts, answering you); your consent (address book, calendars, photo library, microphone and notifications, each of which asks first and can be withdrawn); our legitimate interests (keeping the service secure, preventing abuse, understanding usage, and improving the product, balanced against your rights); and legal obligation where a law requires us to act.

You have the right to access, correct, delete, restrict or object to our use of your information, and to receive a copy in a portable form. The app does the main ones for you, and everything else is an email away. You can also complain to your local data protection authority.

Children

NurtureBot is for adults: our Terms require you to be at least 18. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, email us and we will delete it.

Your choices, and deleting your data

• Delete everything: open the app and go to Settings → Delete my account forever. It asks you to confirm, then deletes your account and its data. You do not need to ask us, and you do not need to wait. If you would rather we did it, or you can no longer sign in, email nurturebot.support@gmail.com from your sign-up address.
• Get a copy: Settings → Download my data emails your data to your sign-up address.
• Turn off a permission: phone contacts, calendars, photos, the microphone and notifications can each be switched off in Settings or in your phone's own settings, at any time.
• Opt out of model development: turn off Help train the AI in Settings, or email us, as described in the AI section above.
• Disconnect Google Calendar: in Settings. It stops that integration immediately without deleting anything else.

One narrow exception: when you delete your account we keep your sign-up email address and your remaining credit balance in a standalone list. That is what stops the free signup credits from being claimed twice with the same address, and it is how your credits come back if you ever sign up again. Nothing else survives — no contacts, no notes, no name.

Your California privacy rights

If you live in California you have the right to know what personal information we collect and how we use it (this page is that disclosure), to request a copy, to correct it, to delete it, to limit the use of sensitive personal information, and not to be treated differently for exercising any of these rights. To exercise them, email nurturebot.support@gmail.com from your sign-up address; we may need to verify it is really you first.

We do not sell personal information. Today we also do not share it for cross-context behavioural advertising, as those terms are defined in the California Consumer Privacy Act, which is why there is no "Do Not Sell or Share My Personal Information" link on this site: there is currently nothing to opt out of. If that ever changes, we will add the link and the opt-out, and tell you in the app before it takes effect. Because we do not track you across other companies' websites or apps, we do not respond to browser "Do Not Track" signals.

If our company changes hands

If NurtureBot is ever acquired by or merged into another company, your information may transfer as part of that change. This policy will continue to apply to it, and we will notify you before your information becomes subject to a different policy.

Changes to this policy

We may update this policy from time to time; we will post the new version here and update the date at the top. If a change meaningfully affects your privacy, we will tell you in the app before it takes effect.

Questions

NurtureBot is operated by The Notebookery LLC, doing business as NurtureBot, 500 Lake Dillon Dr Unit 1972, Dillon, CO 80435, United States. Email nurturebot.support@gmail.com. A real person reads it.