Last updated: September 26, 2026
Nao is a journaling and productivity app for macOS and iOS. Your content is yours: it is kept on your devices and synced privately through your Nao account, and nobody else can see it unless you share it. This policy explains what we collect, why, and the choices you have.
Nao (“Nao”, “we”, “us”) is the data controller for the information described here. You can reach us at privacy@nao.app.
Nao needs an account. You sign in with Sign in with Apple, Sign in with Google, or a one-time code sent to your email address; Nao never receives or stores a password. We process your email address, your name, and an authentication identifier so we can sign you in, associate your data with your account, and let other people share notes with you by email address. Authentication is handled by Supabase on our behalf.
Nao's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use it only to provide sign-in and the account features described here; we do not sell it, use it for advertising, or transfer it to anyone other than the processors listed below.
Notes, boards, tasks, folders, and any images or files you attach. Your content is stored on your device and synced to our cloud so it is available across your devices and, where you choose, with people you share it with. This applies to every account; the Free plan has limits on how much you can sync, and Nao Plus raises them.
Purchases are processed by Apple through your Apple ID. We receive a transaction identifier, the product purchased, and its status and expiry so we can unlock Nao Plus. We never receive your payment card or full Apple ID details.
We may process limited technical information (such as error reports and a device identifier used for sync conflict resolution) to keep the service reliable.
We use the following processors:
If you access Nao from outside the EU, your data may be transferred to and stored in the EU. We rely on appropriate safeguards for any such transfers.
Some optional features (such as summaries) use AI. Where supported, processing happens on your device using Apple Intelligence. If you choose to enable a cloud AI provider, the specific content you act on is sent to OpenAI to generate a response and is handled under their terms. We do not enable cloud AI without your action, and your content is not used by us to train models.
On a Mac you can let an AI assistant you already use — Claude, Codex or Antigravity — work with your Nao content. You add Nao to it from Nao's Settings; the assistant then starts a small program that ships inside Nao. That program passes the assistant's requests to the Nao app on the same Mac and Nao's answers back; it makes no internet connections of its own and stores nothing. An assistant you connect can read and change your notes, tasks and boards (it can move notes and boards to the trash and remove items from a board, but can't permanently delete a note, board, task, list or folder). What it reads goes to that assistant's maker (Anthropic, OpenAI or Google) under their terms. Nao sends nothing to them by itself. Changes an assistant makes sync to your other devices like your own; edits to a note are recorded with the assistant's name in that note's change history. It works only while Nao is running on that Mac, and you can turn it off in Settings at any time. Questions: privacy@nao.app.
With Nao Plus you can also connect an AI assistant from anywhere — Claude, ChatGPT or Gemini on the web or on your phone — so it can find and read your notes and tasks without a Mac running. You start the connection in the assistant, sign in to Nao on a page at nao.app and allow it. Such an assistant can read everything you can see in Nao, including what others shared with you, and cannot change anything. To answer searches, Nao keeps a searchable copy of the text of the notes an assistant may read, on Nao's servers in the EU, only while a connection that can see them exists; what an assistant reads goes to its maker (Anthropic, OpenAI or Google) under their terms, and Nao sends nothing to them by itself. Nao's logs of these requests hold times, counts and identifiers, never your text or your search words. Each connection is listed in Nao's Settings under AI assistants, with when it was made and last used, and Remove ends it at once on every device; deleting your Nao account removes them all.
We do not sell your personal data, and we do not use your content for advertising.
We process your data to perform our contract with you (providing the app and sync), on the basis of our legitimate interests (keeping the service secure and reliable), to comply with legal obligations, and—where applicable—with your consent (for example, enabling cloud AI).
We share data only with the processors listed above, with people you explicitly choose to share or collaborate with, and where required by law or to protect rights and safety. When you share a note or folder, the people you share it with can see its content, your name and your email address. You can stop sharing at any time.
We keep your account and synced content for as long as your account is active. You can delete individual items in the app at any time.
You can delete your account and all associated cloud data yourself, from inside the app: open Settings → Account → Delete Account. This is immediate and permanent — your notes, tasks, folders and images are removed from our servers and your account is deleted. Images already uploaded are removed from backing storage shortly afterwards by an automated cleanup process. We may retain limited records (such as transaction records) where required for legal or accounting reasons.
Copies already on your devices are not affected by account deletion — they are removed when you delete them locally or uninstall the app, and you can export a copy at any time. If you would rather we handled deletion for you, contact privacy@nao.app.
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email privacy@nao.app. You also have the right to complain to your local data protection authority.
Data is encrypted in transit. Access to cloud data is controlled by row-level security tied to your account, and file access is granted through short-lived, signed requests. No system is perfectly secure, but we work to protect your information.
Nao is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal data.
We may update this policy. When we make material changes we will update the date above and, where appropriate, notify you in the app.