Privacy Policy
Last updated: 9 October 2026
The short version. Nestriq stores your notes, habits, goals, reminders, budgets and workouts on your own device. There is no Nestriq account, no Nestriq server holding your content, and no advertising. If you enable iCloud sync, your data travels through your own private Apple iCloud account, which we never see.
There are two small exceptions, and nothing you've written is part of either. If you allow notifications, your device registers with our server so it can send you a morning digest and an evening preview. That registration is a device token, a hashed id, your time zone and the times you picked. And if you're on the free plan and over its page limit, the app asks our server for the current time. Section 6 covers both in full.
1. Who we are
Nestriq ("the app", "we", "us") is an iOS application published by the developer of Nestriq. This policy explains what happens to information when you use it. If you have questions, email app@nestriq.app.
2. Information you create in the app
Everything you type, tick, log or plan in Nestriq (pages, notes, checklists, tables, boards, habits, streaks, goals, reminders, mood check-ins, journal entries, financial entries, workout plans and set logs, saved places, any images or PDFs you attach, and the name you give in the intro) is stored locally on your device.
None of it is transmitted to us. We have no server that receives your notes, pages, habits or any other thing you write, so we cannot read it, restore it, or hand it to anyone. (We do run one small server, for scheduled notifications and a free-plan time check. It never receives your content. See section 6.)
3. iCloud sync (optional)
When you're signed in to iCloud, your Nestriq data is kept in your personal iCloud account as well, so it's on all your Apple devices and a change made on one usually shows up on the others within seconds. This uses Apple's CloudKit private database. The data belongs to your Apple ID, is governed by Apple's Privacy Policy, and is not accessible to us. You can turn it off for Nestriq in iOS Settings → your name → iCloud; new changes then stay on the device.
To hear about changes from your other devices, Nestriq registers with Apple's push service, even when notifications are off. Apple then sends your devices a silent signal when something changes. It shows nothing on screen, carries none of your content, and never reaches us.
A few small settings sync the same way: your name, theme, tab and Home layout, whether you've finished the intro, and the date a free-plan grace period started (the 14 days you get to tidy up after going over the page limit).
Two of those are also saved in your device's keychain, and in iCloud Keychain if you use it: that you've used Nestriq before, so reinstalling skips the intro, and the grace-period date, so reinstalling doesn't restart it. Keychain items stay after you delete the app. They hold nothing you've written, and like the rest of iCloud they're not visible to us. The grace-period date is cleared when you upgrade or get back under the limit.
4. Information we do not collect
- We do not ask you to create an account, and we do not collect names, email addresses or passwords to use the app. (The launch-notification form on our website is separate and entirely optional; see section 9.)
- We do not track you across other apps or websites, and we do not use advertising identifiers.
- We do not sell, rent or share personal information with data brokers.
- We do not read, index or analyse the contents of your pages.
- We do not store your IP address. To stop scripts flooding our server, it keeps a one-way hash of the address for about a day, made with a secret key so it can't be turned back into the address (section 6).
What we do receive, only if you allow notifications or are over the free plan's page limit, is set out in section 6.
5. Device permissions
Nestriq asks for certain iOS permissions only when a feature needs them. You can decline any of them and keep using the rest of the app, and you can change your mind at any time in iOS Settings → Nestriq.
| Permission | Why Nestriq asks | Where it goes |
|---|---|---|
| Notifications | To deliver the reminders and habit nudges you schedule, and the optional morning digest and evening preview. | Reminders you set are scheduled locally by iOS and never leave the device. The digest and preview are sent from our server, which needs the registration described in section 6. |
| Location | Only if you create a location-based reminder ("remind me when I get to the gym"). | Monitored on-device by iOS, and never sent to us. When you pick a place, its coordinates go to Apple Maps to look up the address. |
| Photos / Files | Only when you attach an image or PDF to a page. | Copied into the app's local storage on your device. |
| Siri & Shortcuts | To let you add items and run actions by voice or from Shortcuts. | Handled by iOS. Apple's own privacy terms apply to Siri. |
| Spotlight indexing | So your pages can be found from the iOS search screen. | Indexed locally on your device by iOS. |
6. What reaches our server
We run one small server, console.nestriq.app. Your device talks to it for two things only:
- Scheduled notifications. Nestriq can send you a morning digest of what's coming up and an evening preview of tomorrow. Sending a notification at a chosen local time is something only a server can do. This only happens if you have allowed notifications. If you decline them, or turn both off, nothing is sent and no record of your device exists. (The registration with Apple's push service that iCloud sync uses, in section 3, stays between your device and Apple. It isn't sent to us unless you allow notifications.)
- A time check, only on the free plan and only while you're over its page limit. See "The time check" below.
Notifications: what your device sends
| Item | What it is | Why it's needed |
|---|---|---|
| Device token | An identifier issued by Apple's Push Notification service for this installation of the app. It is not your device's serial number or advertising id, and Apple changes it if you reinstall. | It's the address a push is delivered to. Without it nothing can reach you. |
| Hashed id | A one-way SHA-256 hash, taken on your device, of your private iCloud user record id. If you have no iCloud account, a random value is generated instead. We only ever see the hash, never the original. | Lets us recognise that your iPhone and iPad belong to the same person, so the digest goes to one device rather than buzzing all of them. |
| Time zone | A region name such as "Europe/Rome". Not your location. | So "8am" means 8am where you are. |
| Notification settings | Whether the morning digest and the evening preview are on, and the time you picked for each. | To send it when you asked, and not at all when you didn't. |
| App version and platform | The Nestriq version number, and whether the token is a test or release one. | Sending to the wrong Apple environment fails; the version helps us diagnose delivery bugs. |
| Proof it's the real app | A key made in your device's secure chip and certified once by Apple's App Attest service. Each request is signed with it. We keep the key's public half, a counter, and when it was created and last used. It says nothing about who you are. | Stops anyone but the Nestriq app from registering devices or making requests in its name. |
What your device never sends
No pages, notes, reminder titles, habits, goals, financial entries or any other content, ever. The digest you read is written on your own device: our server sends only a generic placeholder, and the app replaces it with your real summary after it arrives, using data that never left the phone.
How long we keep it
Only while it's useful. Your registration is deleted:
- when you turn off both the morning digest and the evening preview in Nestriq;
- the next time you open Nestriq after turning off its notifications in iOS Settings;
- when Apple tells us the device token no longer works, which is what happens after you delete the app;
- and in any case once a device hasn't opened Nestriq for 90 days. App Attest keys follow the same 90-day rule.
There is no archive and no backup copy kept elsewhere. If you'd like your registration removed right away, email app@nestriq.app.
The time check
On the free plan, going over the page limit starts a 14-day grace period, and some limits after it are counted in days too. So that changing the phone's clock can't stretch them, the app asks our server for the current time while they apply. It sends a random number, which comes back signed with the time, so the app can tell the answer is genuine. Nothing else is sent, and nothing about it is stored beyond the request count below. On Nestriq Plus, or within the free limit, this request never happens.
Counting requests
To stop scripts flooding the server, it counts requests from each internet address per hour. It never stores the address itself, only a one-way hash of it made with a secret key that stays on the server, so the hash can't be turned back into the address. Each count is deleted about a day after the last request it counted. Beyond that, the server's log notes only events such as errors and sends, never an address or anything that identifies you. Our hosting provider may keep standard web server logs for a short time, for security and troubleshooting.
7. Purchases
Nestriq Plus is sold through the Apple App Store. Apple processes the payment; we never receive or store your card details, billing address or Apple ID. To know whether your copy is unlocked, the app checks your purchase receipt with Apple's StoreKit, and stores a small local flag on your device. It also reads, from Apple, the date your Apple Account first downloaded Nestriq, and uses it only on your device to tell a reinstall from a first install. Apple's privacy policy covers the transaction itself.
8. Crash reports and diagnostics
If you have enabled "Share with App Developers" in iOS Settings → Privacy & Security → Analytics & Improvements, Apple may send us aggregated, anonymised crash logs and performance data. These contain no personal information and none of your app content. You can switch this off in iOS at any time.
9. The launch-notification list (website only)
This section is about nestriq.app, not the app. If you enter your email address in the "Get notified" form on our homepage, here is exactly what happens to it.
- What we collect. Your email address, and nothing else. No name, no tracking cookie, no analytics profile.
- Why. To send you one email when Nestriq is released on the App Store, containing a code for three months of Nestriq Plus.
- How many emails. One. There is no newsletter, no sequence and no marketing follow-up.
- About the code. It's an App Store offer code generated by Apple. Redeeming it happens entirely between you and Apple, so we're not told who redeemed, when, or whether you redeemed at all. The code isn't tied to your email address, so it can't be used to identify you.
- Where it goes. Into a database on our own web hosting. No third-party form service, mailing-list provider or analytics company is involved, so your address isn't passed to anyone.
- One extra thing we store. A one-way cryptographic hash derived from your IP address, used purely to stop bots flooding the form. It can't be reversed back into an IP, and it's never used to identify or track you.
- How long we keep it. Until the launch email goes out, after which we delete the list. If the launch is cancelled or indefinitely delayed, we delete it anyway.
- Getting off it. Email app@nestriq.app and we'll remove you the same day. You don't have to give a reason.
- What we never do. Sell it, rent it, share it with advertisers, or use it to build a profile of you.
10. Email you send us
If you contact support, we keep the message and your email address for as long as it takes to help you, and reasonably afterwards for reference. We don't add you to a mailing list without you asking.
11. Children
Nestriq is not directed at children under 13, and we do not knowingly collect information from them. The only things the app sends us are the notification registration and the time check in section 6. Neither contains a name, email or anything else identifying a person, and the registration is deleted once notifications are switched off. If you believe a child's information has reached us, write to us and we'll remove it.
12. Your rights
Depending on where you live, you may have rights to access, correct, export or delete personal information a company holds about you. Almost everything Nestriq knows about you, you hold yourself:
- Access and export — your data is in the app; you can view and export pages from within it.
- Deletion — deleting the app removes its local data from your device, apart from the two small keychain items in section 3. If iCloud sync was on, you can remove the Nestriq data from iOS Settings → your name → iCloud → Manage Account Storage.
- The notification registration — the one record we hold about a device (section 6). Turning off notifications removes it automatically, and deleting the app does too, within 90 days at most. We can also delete it on request.
- Requests to us — for anything else, email app@nestriq.app and we'll respond within 30 days.
13. Security
Your Nestriq data is protected by your device's own encryption and passcode. Keeping your device locked and up to date is the most effective thing you can do to keep it safe. Because we hold no copy of your content, a breach of ours cannot expose it, but it also means we cannot recover it if you lose your device without a backup.
14. Changes to this policy
If we change this policy we'll update the date at the top, and for anything significant we'll note it in the app's release notes. Continuing to use Nestriq after a change means you accept the updated policy.
15. Contact
Questions, concerns, or a privacy request: app@nestriq.app