A card. Then your yes.
Calendar, Mail, reminders, tasks — Nova drafts. Nothing is saved until you confirm. That’s the habit, not a setting buried in a menu.
Nothing leaves unless you flip it on.
Nova is a companion on your Mac — not a recorder in the cloud. You choose the model. You confirm the write.
Privacy Lock
One switch cuts the cloud. Ollama keeps working. The room stays quiet.
Local if you want it.
Run a model on the Mac. No tokens, no vendor in the loop. Cloud brains are an opt-in — your keys, your bill.
Your keys stay yours.
OpenAI, Claude, Grok, ElevenLabs, Tavily, fal.ai — accounts you already have. We built Nova. We don’t sell tokens. When two Macs sync, keys stay put — safety first.
Nova doesn’t film the desk.
No always-on screen capture in Nova. No silent archive of what you saw. If you use Screenpipe, Nova can search it.
When it should stay quiet
Does it need to be still? Mute Nova. You can still speak up whenever you need Nova.
What actually leaves.
A key opens the path to that provider. After that, the request goes there without a card each time. A change in a connected app, or a flow, waits for the card.
If you stay local
Speech and text stay on the Mac. Ollama works here. We don’t run a Nova cloud that stores your day. A license, and a mail to us, are on the privacy page.
If you bring a key
The prompt goes to the provider you chose — OpenAI, Anthropic, or one of the others. That’s their privacy policy, not a hidden Nova server. Privacy Lock turns that path off and blocks everything.
If you connect an app
Notion, Asana, Linear, Slack, Airtable, Morgen, Paperless, Hue, Screenpipe, Strava — your account. Nova only reads Slack; Nova does not send Slack messages. A new Linear issue or a status change is prepared as a draft and runs only after you approve it. A flow runs only after you approve it on the confirmation card.
If you sync two Macs
iCloud can carry Nova’s state. API keys don’t go along automatically. You can export them separately, locally.
What we don’t promise.
Trust is easier when the gaps are named.
No corporate certificates.
No SOC 2, no HIPAA, no security PDF for a purchasing team. Nova runs on your Mac. When those papers exist, they’ll be on this page — not before.
No flawless model.
A local model can be wrong. A cloud model can be wrong. We don’t promise the answer is right. That’s why you confirm the card when it matters.
Apple Silicon. Local if it should stay with you. Your own keys when you want more capability and speed.