Privacy
Last updated: September 2026
Short version: Calendar, mail, files, and local models stay on your Mac unless you send them out. We don’t store them. If you bring a key, that prompt goes to the provider you chose, not to us. The site is hosted by Cloudflare. Polar is the merchant of record when you buy; we never see your card. What can sit with us: a license via Polar when you buy, and your email if you write to us.
Who is responsible
Christoph Schumann is responsible for what this page describes.
Herbstweg 31, 8050 Zürich, Switzerland.
Write to hello@nova-assistant.io.
We have not appointed a representative in the EU or the EEA.
Legal grounds in the EU and the EEA
If you are in the EU or the EEA, GDPR also applies to data we actually hold. Then we rely on these grounds. The site at Cloudflare (IP, time, browser, logs): so the site can be shown and stay safe — legitimate interest, Art. 6(1)(f) GDPR. The intern cookie: so this browser keeps intern access for 30 days — legitimate interest, so you don’t have to log in every time, Art. 6(1)(f). The source cookie on the website: so we can see which site a visit came from and whether it led to a download — legitimate interest, Art. 6(1)(f). It stays in this browser for 30 days, and on our side we keep totals only. The country total: so we can see which country a visit or a download came from — legitimate interest, Art. 6(1)(f). We keep a total per country and do not store the IP address for it. Mail to hello@nova-assistant.io: so we can answer. If it’s about a license or a purchase, Art. 6(1)(b); otherwise legitimate interest in answering, Art. 6(1)(f). License data from Polar (email, key, plan): to issue the license, run the plan, and give support — Art. 6(1)(b). Polar, Cloudflare, Stripe, and a provider you choose with a key rely on their own grounds.
This website
The site does not keep a customer file. Your language stays in this browser until you change it or clear the storage. The site is delivered by Cloudflare, Inc. (USA). When you open a page, Cloudflare can process technical data: IP address, time, browser and device, request logs. Purpose: deliver the site and keep it safe. How long Cloudflare keeps that is in Cloudflare’s privacy policy. We count page visits and downloads, the name of the site a visit came from, and the country of the connection, so we can see which visits lead to a download and which countries they come from. Cloudflare already reads that country while delivering the page. We do not keep the IP address in this count. Those are totals only: no name, no profile, no ads. A first-party cookie remembers that source in this browser for 30 days.
Purchases
Polar Software, Inc. (USA) is the merchant of record and acts as its own controller for that purchase. Polar collects your email, payment details, and the billing data needed for tax. Polar uses payment processors, including Stripe, under Polar’s privacy policy. From Polar we receive what is needed for the license — email, key, plan — to issue the license, manage the plan, and give support. We keep that as long as the license and support need it. We never receive your card number.
The app
Nova runs on your Mac. Cloud is an opt-in. A key does not mean everything stays local. If you bring a key, the prompt goes to the provider you chose. Writes to Calendar, Mail, and connected apps wait for your confirmation. API keys do not ride along with iCloud. You can export them separately, locally. Privacy Lock turns the cloud path off and blocks it. If you use Screenpipe, Nova can search it.
What can leave the Mac
Only when you use it. A prompt, attached files, or the context you pick can go to the provider you connected with a key. Optional keys today: OpenAI, Claude (Anthropic), Gemini, Grok (xAI), OpenRouter, ElevenLabs, Tavily, fal.ai. A local LLM stays on the Mac. Connected apps you turn on — Calendar, Mail, Notion, Asana, Linear, Slack, Airtable, and the others on the product page — get only what you send them, under their rules.
What this page covers
We have no server of ours that stores what’s on your Mac. This page is about what can sit with us — a license via Polar when you buy, and your email if you write to us. Calendar, Mail, files, and local models stay with you unless you send them out.
If you write to hello@nova-assistant.io, we keep the message so we can answer. That’s the only purpose. When the answer is done, we delete it. No ads. We don’t pass your email to others to use. The mail provider that receives hello@ sees the message so it can be delivered.
Microphone
The microphone is used when you dictate, talk in the circle, or use the wake word if you turned that on. Mute stops listening. In the circle, audio goes to OpenAI. When you dictate or talk, audio stays on the Mac only if speech-to-text runs locally. Otherwise it goes to the provider you chose for that. The text can then leave the Mac if you send it with a key.
Sensitive inputs
Don’t put health data, passwords, or other sensitive facts into a prompt unless you mean to. If you bring a key, that text can leave the Mac to the provider you chose.
Other services
What you send them is under their rules: Cloudflare, Polar, Stripe, Apple, OpenAI, Anthropic, Google, OpenRouter, ElevenLabs, xAI, and any app you connect.
Outside Switzerland
Cloudflare, Polar, Stripe, and the providers you choose can process data outside Switzerland — often in the United States. They use the transfer rules they publish themselves. We don’t list contract clauses or certificates we have not checked. Those details are in their privacy policies.
Children
Nova is not aimed at children under 16. We don’t knowingly collect their data.
What we don’t do
No analytics or telemetry from us in the app. The website keeps visit and download totals, including the referring site name and the country, as described above. No ad trackers. No ads. We don’t sell your data. What leaves: Polar when you buy, Cloudflare when you open the site, or the provider you chose with a key or a connection.
Your rights
Swiss data-protection law applies. In the EU and the EEA, GDPR rights apply too — only for data we actually hold. We hold your email if you write to us, and a license via Polar if you buy. We do not hold your calendar, files, or models on your Mac. You can ask for access, correction, erasure, restriction, and portability, and you can object. Write to hello@nova-assistant.io. Complaint in Switzerland: the FDPIC, edoeb.admin.ch. In the EU: the authority where you live.
Changes
If this page changes, the date at the top changes.