For the Nova Thread notes app · Last updated October 25, 2026
This Privacy Policy explains what Nova Thread collects and how we use it. Plain language first.
Summary
You can use Nova Thread without an account; your notes then stay on your device.
If you sign in, your notes sync through Supabase so you can use them on more than one device and share them with people you invite.
We do not sell your personal data, show ads, or track you across other apps.
Nova Thread is a $3.99 USD one-time App Store / Play Store purchase (no subscription). Purchase is handled by Apple or Google; we do not receive your payment card details.
Notes, folders, checklists, tags, photos, sketches, voice recordings, scans and settings you create
Optional Face ID, fingerprint or passcode, only to unlock notes you lock or to unlock the app if you turn on the app lock (handled by your phone; we never see or store biometric data)
Optional location, only when you choose to add a place to a note
If you create an account
Email address and sign-in identifiers
Your name and profile picture, if you add them; people you share notes with can see them
If you use Sign in with Apple or Sign in with Google: the email address and name they share with us. With Apple's "Hide My Email", we receive only a private relay address
Your notes, folders and attachments (photos, sketches, recordings, files), stored under your account so they sync
The people you share a note with: their email address, pending invites and join codes
A push notification token for your device, so we can tell you when a shared note changes or someone invites you
Basic technical logs kept by our service providers for security and reliability
Store purchases
Apple and Google process the one-time $3.99 purchase. We do not receive your payment card number.
3. How we use information
Provide the notes app, sync and sharing
Send sign-in emails and notifications about shared notes
Secure your account and prevent abuse
We do not use your notes for advertising or to train AI models, and we do not sell personal data or note contents.
4. Sharing
People you share with see the notes you share with them, including your email address.
Supabase hosts accounts, notes and attachments for sync.
Google Firebase Cloud Messaging (and Apple Push Notification service) deliver notifications. They receive a device token and the short notification text.
Google Firebase Crashlytics receives a crash report if the app crashes: the phone model, iOS or Android version, app version, and where in the app the crash happened. It is not linked to your account, and we use it only to fix bugs.
Apple and Google handle app purchases, and confirm who you are if you choose Sign in with Apple or Sign in with Google.
Apple Maps (on iPhone) or Google Maps (on Android) receives the words you type when you search for a place to add to a note, and shows the map.
These providers process data on our behalf under their own terms. We may disclose information if required by law or to protect rights and safety.
5. Retention
Data on your device stays until you delete notes, uninstall the app, or use Delete Account.
Data on our servers stays until you delete it or delete your account.
Delete Account (Settings) erases your account, your notes and attachments on our servers, and Nova Thread data on that device. Notes you own are deleted for everyone you shared them with; notes other people shared with you stay with them. This cannot be undone.
6. Children
Nova Thread is not directed at children under 13 (or the minimum age in your region). Do not create an account for a child below that age.
7. Security
Data is sent over encrypted connections, and server rules limit each note to its owner and the people it is shared with. No method of transmission or storage is 100% secure.
8. Your choices
Use the app without an account (local only)
Sign out anytime
Choose who to share each note with, and remove people
Turn off notifications in your device settings
Delete your account and data from Settings
9. International transfers
If you sign in, your data may be processed on servers in the United States or other regions where our providers operate.
10. Changes
We may update this Privacy Policy. The "Last updated" date will change when we do. Continued use after updates means you accept the revised policy.