Your space.
Your privacy.

Information we process

When you sign in, Nearlet processes your account identifier, email address and profile name through your chosen sign-in provider and Supabase. Google and Apple sign-in are available.

Signed-in notes, tasks, plans, saved links, photos, recordings, sharing choices and pairing records are stored through Supabase to provide the features you use and synchronize your devices. Preview content and private drafts remain on your device.

If you contact support, we receive your email address and the information you choose to include. We use it to respond and resolve the issue.

Personal and shared content

Personal content is accessible to your account. Items you share become accessible to your paired partner. Pairing does not automatically publish your personal items.

Ending a pairing gives each person a separate archive of shared history they could already access. Private drafts, hidden answers and unopened capsule contents are not revealed by disconnecting. New partners do not automatically receive earlier archives.

Server access controls protect stored content. Starting with beta version 0.4.0, new Memories posts (photos, notes, checklists and voices) and their replies use device-side encryption after you set up a recovery kit. Titles, captions, transcripts and attachments are encrypted before upload; the service stores ciphertext and routing metadata. Shared encrypted posts require both partners to set up keys and compare their safety codes. Older app versions cannot open these encrypted posts.

Encrypted posts and optional concealment

Post encryption does not cover plans, personal statuses, profile photos, Saved items or collections, or capsule and answer contents. Existing posts are not automatically converted: the optional earlier-post conversion covers your active posts and replies, and does not erase previous archives, backups, exports or copies. The service can still see account and public-key identifiers, sharing relationships, record identifiers, revisions, request timing and object sizes.

Your recovery kit contains private key material. Keep it in a password manager and save a fresh kit after verifying a partner. We do not receive this kit and cannot recover lost keys for you. Restored devices share the same account identity; this beta has no individual-device revocation or forward secrecy. A compromised recovery kit can expose encrypted posts. This first implementation has not had an independent cryptographic audit.

Ordinary photos display normally. “Hide until tapped” is optional and covers content on screen; it is separate from encryption. Optional Face ID or Touch ID, with device-passcode fallback, gates revealing covered posts and exports on that device. Biometric matching is handled by iOS; Nearlet does not receive biometric data. A recipient can still capture, export or keep content. No feature guarantees that shared content cannot be copied.

The new app excludes local content caches and drafts from future device backups. Accessible content remains available to the authorized app on an unlocked device. Explicit exports contain decrypted content; protect those files separately.

Device permissions and links

Microphone and photo access support actions you choose, such as recording a voice note or saving an image. You can change permissions in iPhone Settings. The optional “Use my location” action uses your position to find nearby places in Apple Maps. Your current position is not automatically shared with a partner; only a place you confirm and save becomes part of the plan. Image text recognition runs on-device. Voice transcription uses on-device recognition where supported. When a selected language requires Apple’s online speech recognition, Nearlet explains this and asks for confirmation before sending that recording to Apple. Cancelling keeps your recording and lets you enter text manually.

Opening a link or requesting its preview may contact the linked website. That site can receive network information such as your IP address and handles it under its own privacy policy.

Memories timeline and widgets

Saved contains your library, including typed lists, wishes and places. Showing or hiding an item in Memories changes presentation only; it does not change who can access the item. An optional Home Screen widget reads a local snapshot of accessible collection rows and selected timeline entries. This snapshot does not contain sign-in credentials, full note bodies or media files. The app removes its widget snapshot when you sign out; iOS controls when displayed widgets refresh. Concealed or encryption-locked posts are excluded from widget entries. Open the app to refresh shared changes.

AI, advertising and diagnostics

Cloud AI chat and writing are not connected. On supported iPhones, optional automatic organization uses Apple’s on-device model to categorize imported links from their title, URL and your note. This processing stays on the device. You can turn it off in Saved → Share to Nearlet. It preserves visibility and any collection you selected. The optional Apple speech-recognition flow described above sends audio only after your confirmation. The app has no advertising or third-party analytics SDK.

Apple may provide crash reports, diagnostics and TestFlight feedback according to your Apple settings. Please avoid including private content in feedback screenshots.

These support pages have no analytics scripts or advertising cookies added by Nearlet. The hosting service receives ordinary web request information, such as IP address and browser information, to serve and protect the pages.

Service providers

Supabase provides authentication, database and media storage. Nearlet’s database project is hosted in Ireland. Your sign-in provider, support email provider and hosting provider may process information in other countries under their own policies.

• Supabase privacy policy
• Google privacy policy — sign-in and support email
• Apple privacy policy — platform services, sign-in and optional speech recognition
• OpenAI privacy policy and Cloudflare privacy policy — support-page hosting

Retention and deletion

We retain your account and content to provide the service until you remove them through the available controls. Support correspondence is retained as needed to resolve requests and keep a record of their resolution.

In Settings → Account & space, you can export accessible content, end a pairing or delete your account. Account deletion removes your sign-in, personal content and archives, and ends your current pairing. Your partner keeps shared history they could already access, including independently retained attachments. Retained attachments are removed when account deletion leaves no remaining reader.

Other installations need an internet connection to learn that an account was deleted. Offline copies cannot be cleared remotely while offline. Exports, screenshots and copies held outside Nearlet cannot be recalled.

Restricted, encrypted operational backups may contain earlier copies while needed for recovery. They are used for recovery rather than ordinary app access. Deletion requests must be reapplied before recovered data is returned to service. Minimal technical deletion receipts are retained to support safe retries and recovery.

Your choices and requests

You can manage sharing, edit your profile, export accessible content, delete your account and change device permissions. For questions or requests about your information, email roman.dev.tech@gmail.com. Depending on where you live, you may have additional privacy rights. We may need to verify account ownership before acting on a request.

Changes to this policy

We will update this page when the service or its data practices change and revise the date above. Material changes that affect your choices will be communicated in the app or by another appropriate means.

Optional Spotify connection

When you connect Spotify to search for songs, your searches go directly to Spotify. Connection tokens are stored in this iPhone’s Keychain and are not sent to our server or shared with your partner. Disconnect Spotify in the song picker or sign out of Nearlet to remove the local connection. You can also revoke access in your Spotify account.

Saving a Spotify link may load its public title and artwork from Spotify without connecting an account. Saved song links, metadata and your notes follow the privacy setting you choose; shared songs are visible to your partner. Songs and their notes are saved items and are not covered by the encrypted Moments feature. Spotify metadata is not passed to the automatic AI link categorizer. Playback opens Spotify and is subject to Spotify’s account and playback rules.