How Nod looks after your messages.
Nod only works if it can read what you connect, so you deserve a straight answer about what that means. This page says what we do, what we can't do, and what isn't finished yet.
Nothing is sent without you
The AI reads messages written by strangers, so a message could try to give it instructions. Three rules protect you, and they're enforced in the code rather than by asking the AI to behave:
- The AI cannot send anything. All it can do is create a draft. Only your approval sends one, and the AI has no way to give that approval.
- What you hear is what goes out. Before you approve by voice, the app reads the real recipient and the real text, never the AI's description of them.
- A sentence isn't an approval. Only an exact phrase like "send it" counts. "Send it but shorter" goes back to Nod as a request.
GitHub is read-only: nothing in Nod can change anything there.
What we keep, and for how long
| What | How it's stored | How long |
|---|---|---|
| Message text, subjects and summaries | Encrypted | Deleted automatically after 90 days |
| Who sent each message and when | Readable to our server, so messages can be sorted | Deleted with the message |
| Your chats, drafts and what you tell Nod about yourself | Encrypted | Until you delete your account |
| Passwords and access tokens for your accounts | Encrypted | Until you disconnect the account |
| Your voice | Never reaches Nod. We receive text, not audio | Not kept |
| What Nod says aloud, with natural voice on | Sent to Microsoft to make the audio | Not kept by Microsoft or by us |
| Backups | Encrypted fields stay encrypted | Deleted within 30 days |
Who can see it
Nod's software reads what you connect. That's how it sorts messages and writes drafts.
People at Nod don't read your messages. There's no staff screen for browsing them. Someone would only look if you asked us to, or if it were needed for security or by law.
What encryption does and doesn't do. The key that unlocks stored messages sits on our server, because Nod has to read them to help you. So encryption protects a stolen database or backup, but it isn't end-to-end encryption. No assistant that reads your email on a server can offer that, and you should be wary of any that says it does.
Who else handles your data
| Company | What for | What they've committed to |
|---|---|---|
| Anthropic | The Claude AI that reads and drafts | Can't train on your data under its commercial terms. Deletes it within 30 days, or keeps it up to 2 years if a message is flagged for misuse |
| Microsoft Azure | Natural voice, if you turn it on | Doesn't store the text or the audio |
| Hostinger | Runs our servers | Hosting only |
| Cloudflare | Routes traffic to Nod | Network only |
| Apple and Google | Sign-in, notifications and payments | Their own policies apply |
| Accounts you connect | Google, GitHub and your email provider | Their own policies apply |
We don't sell your data or use it for advertising. Google data follows Google's Limited Use rules, in full in our Privacy Policy.
You're in control
- Nothing goes to the AI until you've agreed to it in the app.
- Natural voice is a separate choice, off until you turn it on.
- Disconnect any account at any time, which ends Nod's access to it.
- Delete your account in the app. Your data is removed from our servers straight away, access at Google, GitHub and Apple ends, and backups clear within 30 days.
Keeping accounts apart
Every person's data is kept separate, and our automated tests attack that from a second account: messages, the assistant's tools, notifications and purchases. All connections are encrypted in transit. There's no public admin panel on the live service.
What isn't finished yet
We'd rather you heard this from us:
- No independent audit yet. We don't hold a SOC 2 report or an ISO 27001 certificate. Established companies in this space do, and we intend to as Nod grows.
- Google's security review is still ahead. Connecting Gmail directly is limited until Google has assessed Nod. Until then, Gmail connects with an app password.
- WhatsApp and Instagram aren't open yet. They're waiting on Meta's approval.
Found a problem?
If you think you've found a security issue, please tell us through our support page. We'll look at it quickly, and we won't take action against anyone reporting in good faith.
Last updated 31 October 2026.