Nim is made by Plue Studio ("we", "us"), based in the Philippines. This policy explains what happens to your information when you use Nim on iPhone or Android.
1. The short version
- What you write is kept on your phone, encrypted. It only reaches our servers if you make an account.
- You don't need an account. If you make one, your worries are stored on our servers so you can get them back on a new phone.
- No ads, no analytics, no tracking, and we never sell your data.
- Nudges are scheduled on your phone and never show what you wrote.
- Voice input is turned into text on your phone. The audio is never saved or sent anywhere.
- You can delete everything, on your phone and on our servers, from inside Nim.
2. What you write
Forecasts, worries, outcomes, notes, letters and your onboarding answers (including the name you give Nim, if you do) are created by you. What you write is up to you, and worries can include health or other personal details. That's why Nim encrypts everything.
On your phone, this data is encrypted with AES-256. The key is made on your phone and kept in the iPhone Keychain or the Android Keystore. It is never sent to us.
If you don't have an account, this data never reaches us, and we can't see it or recover it. Uninstalling Nim deletes it from your phone. On iPhone, Nim's data is included, still encrypted, in your phone's own iCloud or computer backups, if you use them, so restoring one can bring it back. On Android, Nim's data is not included in phone backups, so it doesn't move to a new phone unless you use an account.
3. Accounts and back up
Accounts are optional and exist to back up your data and sync it between your phones. You can sign in with Apple or with Google. There are no passwords.
When you sign in, we keep:
- Your email address. With Apple's "Hide My Email", this is a relay address from Apple.
- Which way you signed in, and a random account ID.
- Your Nim data (everything in section 2) and your Nim settings, such as categories, nudge times, therapist PDF choices, which tours you've seen and Nim's outfit, so they can be restored and synced.
We remove any name or profile photo Apple or Google sends when you sign in. The only name Nim keeps is the one you give it, if you do.
4. How backed up data is protected
Your data is encrypted on its way to our servers and encrypted on their disks. Database rules make sure only your account can reach your data. Our servers are run by Supabase, in the United States (Virginia), which may be outside your country.
5. Services we use
| Service | What it's for | What it receives |
|---|---|---|
| Supabase | Accounts, back up and sync | Your email, account ID and Nim data (only if you sign in) |
| Sign in with Apple, Google Sign-In | Proving who you are when you sign in | What you share with Apple or Google; we keep only your email |
| RevenueCat | Checking whether you have Premium, and sales totals | A random ID (your account ID once signed in, never your email), your purchases and store country |
| Apple App Store, Google Play | Payments | Your payment details, which we never see |
| Sentry | Finding and fixing crashes | Crash details, technical details about your device (such as its model and system version), app version and a random ID for this install. Never what you write. |
Each of these handles data under its own privacy policy: Supabase, Apple, Google, RevenueCat, Sentry. Sentry stores crash reports in the United States.
If you email us, we get your email address and what you write, and use them only to answer you. That includes "Send us what happened" on Nim's crash page, which adds the error details shown there. Sending it is always your choice.
6. Permissions
- Notifications: for check-in nudges and the monthly letter. They are scheduled on your phone. They never contain a forecast title, a worry or anything you wrote, because lock screens can be seen by others. On some Android phones, Nim also asks to set exact reminders ("Nudges on time"), so nudges don't come late.
- Microphone: only if you use voice input. Speech is turned into text on your phone. The audio is never saved and never sent to us or anyone else. If your phone can't do this on the device, Nim hides the microphone.
Nim never asks for your location, contacts, photos or advertising ID.
7. Sharing with your therapist
Nim can make a PDF of your record on your phone. Nothing is sent to us. Once you share the PDF, it isn't encrypted, and it goes wherever you send it.
8. What we don't do
- No ads and no advertising networks.
- No analytics or tracking of how you use Nim. Nim doesn't use Apple's App Tracking Transparency because it doesn't track you.
- We never sell, rent or share your data for marketing.
- What you write never goes into crash reports or logs.
9. Keeping and deleting your data
- Delete all data: Settings > Delete all data erases everything on the phone. If you're signed in, it also erases your data from your account, on our servers and your other phones. The account itself stays.
- Signing out or uninstalling: signing out removes Nim's data from that phone, and uninstalling Nim does too. Neither deletes your account or what's backed up in it.
- Your account: Settings > Back up and sync > Delete account deletes your account and all backed up data from our servers right away, and removes Nim's data from that phone. We keep only your account ID, with nothing else, for up to 30 days so your other phones know to clear themselves. A phone that stays offline for longer keeps its data until you use Delete all data on it.
- From the web: if Nim isn't on your phone anymore, ask at nim.pluestudio.com/delete-account.
- Subscriptions: deleting your account doesn't cancel a subscription. Cancel it in your App Store or Google Play settings.
- Crash reports are kept by Sentry for up to 90 days.
- If you stop using an account, we keep it until you delete it.
10. Your rights
Wherever you live, you can ask us to show you, correct, export or delete the data we hold about you, and you can withdraw consent at any time. This includes rights under the EU and UK GDPR, US state privacy laws, and the Philippine Data Privacy Act of 2012. You can correct and delete what you wrote inside Nim. For anything else, including a copy of your backed up data, email us (section 13). We'll answer within 30 days. We can't reach data that is only on your phone.
You can also complain to your data protection authority. In the Philippines, that's the National Privacy Commission.
11. Children
Nim is not meant for children under 13, and we don't knowingly collect data from them. If your country requires a parent's permission for online accounts at your age, ask a parent before signing in. If you think a child has given us data, email us and we'll delete it.
12. Changes to this policy
If we change this policy, we'll update the date at the top. If a change gives you less privacy, Nim will tell you in the app before it applies.
13. Contact
Plue Studio, Philippines
Email: [email protected]
Website: nim.pluestudio.com