How Nod looks after your messages.
Nod only works if it can read what you connect, so you deserve a straight answer about what that means. This page says what we do, what we can't do, and what isn't finished yet.
Nothing is sent without you
The AI reads messages written by strangers, so a message could try to give it instructions. Three rules protect you, and they're enforced in the code rather than by asking the AI to behave:
- The AI cannot send anything. All it can do is create a draft. Only your approval sends one, and the AI has no way to give that approval.
- What you hear is what goes out. Before you approve by voice, the app reads the real recipient and the real text, never the AI's description of them.
- A sentence isn't an approval. Only an exact phrase like "send it" counts. "Send it but shorter" goes back to Nod as a request.
GitHub is read-only: nothing in Nod can change anything there.
What we keep, and for how long
| What | How it's stored | How long |
|---|---|---|
| Message text, subjects and summaries | Encrypted | Deleted automatically after 90 days |
| Who sent each message and when | Readable to our server, so messages can be sorted | Deleted with the message |
| Your chats and drafts, which can quote your messages | Encrypted | Deleted automatically after 90 days |
| What you tell Nod about yourself | Encrypted | Until you delete your account |
| Passwords and access tokens for your accounts | Encrypted | Until you disconnect the account |
| What keeps you signed in | Only a hash, which can't sign anyone in if it's stolen | Until you sign out, or 90 days unused |
| Your voice | Never reaches Nod. We receive text, not audio | Not kept |
| What Nod says aloud, with natural voice on | Sent to Microsoft to make the audio | Not kept by Microsoft or by us |
| Backups | Encrypted fields stay encrypted, and nothing in them can sign anyone in | Deleted within 30 days |
Who can see it
Nod's software reads what you connect. That's how it sorts messages and writes drafts.
People at Nod don't read your messages. There's no staff screen for browsing them. Someone would only look if you asked us to, or if it were needed for security or by law.
What encryption does and doesn't do. The key that unlocks stored messages sits on our server, because Nod has to read them to help you. So encryption protects a stolen database or backup, but it isn't end-to-end encryption. No assistant that reads your email on a server can offer that, and you should be wary of any that says it does.
Who else handles your data
| Company | What for | What they've committed to |
|---|---|---|
| Anthropic | The Claude AI that reads and drafts | Can't train on your data under its commercial terms. Deletes it within 30 days, or keeps it up to 2 years if a message is flagged for misuse |
| Microsoft Azure | Natural voice, if you turn it on | Doesn't store the text or the audio |
| Hostinger | Runs our servers | Hosting only |
| Cloudflare | Runs the DNS for our domain | DNS only. Your traffic doesn't pass through it |
| Apple and Google | Sign-in, notifications and payments | Their own policies apply |
| Accounts you connect | Google, GitHub and your email provider | Their own policies apply |
We don't sell your data or use it for advertising. Google data follows Google's Limited Use rules, in full in our Privacy Policy.
You're in control
- Nothing goes to the AI until you've agreed to it in the app.
- Natural voice is a separate choice, off until you turn it on.
- Disconnect any account at any time, which ends Nod's access to it.
- Delete your account in the app. Your data is removed from our servers straight away, access at Google, GitHub and Apple ends, and backups clear within 30 days.
Keeping accounts apart
Every person's data is kept separate, and our automated tests attack that from a second account: messages, the assistant's tools, notifications and purchases. All connections are encrypted in transit. There's no public admin panel on the live service.
Keeping your account yours
- Two-factor. Turn it on under You, then "Security, legal and account", then Security, and signing in also needs a code from your authenticator, however you sign in. Someone with your password or your email still can't get in.
- Sign-in alerts. Phones already on your account are told about every new sign-in, and you can sign out of all devices at once.
- Face ID. You can lock Nod itself, and it hides your messages from the app switcher either way.
- Connecting an account. Only the app that started a connection can finish it, so a link sent to you can't put your mailbox on someone else's account.
What isn't finished yet
We'd rather you heard this from us:
- No independent audit yet. We don't hold a SOC 2 report or an ISO 27001 certificate. Established companies in this space do, and we intend to as Nod grows.
- Google's security review is still ahead. Connecting Gmail directly is limited until Google has assessed Nod. Until then, Gmail connects with an app password.
- WhatsApp and Instagram aren't open yet. They're waiting on Meta's approval.
Found a problem?
If you think you've found a security issue, please tell us through our support page. We'll look at it quickly, and we won't take action against anyone reporting in good faith.
Last updated 31 October 2026.