Privacy
Last updated 30 July 2026
Nouvel asks you to write down things you may not have told anyone. This page explains exactly what happens to those words, in plain language, including the one protection we do not have yet.
What Nouvel stores
What you write
Journal entries, mood and body and sleep check ins, your Life Blueprint, your Dream Life letter, and your onboarding answers. All of it is saved on your device first, so the app works with no connection and no account. If you are signed in, it also syncs to a private area of our database that is scoped to your account and readable only by you.
Your account
You have two ways in. Sign in with Apple passes us whatever you choose to share, which is usually a name and an email or a relay address. Skip creates an anonymous account instead, which is a random identifier and nothing else, no name and no email. The anonymous route exists so that syncing works at all without asking you to identify yourself.
Where you are, roughly
During setup you pick a country, a state, and a city. That choice is stored with your profile. If you grant location permission, it is used once to guess those three fields so you do not have to scroll for them. Your coordinates are never saved and never leave the device.
Anonymous usage events
To find the places where setup confuses people, the app records event names such as which onboarding step you reached. These are tagged with a random identifier that the app generates on your device on first launch. That identifier is not your account, not your name, and not connected to anything you write.
If you write to us from the website
The contact form on the support page stores exactly what you typed, which is your email address and your message, so that we can read it and reply. It also stores your browser's user agent string, which is the line describing your device and browser version, because it is often the difference between fixing a bug and guessing at it.
It does not store your IP address. To stop one person flooding the form, we keep a one way hash of the address mixed with a secret value, which lets us count recent messages from the same sender and nothing else. The original address cannot be recovered from it.
These messages go to our own database and to our own inbox. No form service, no help desk product, and no third party sits in between. We keep them while the conversation is useful and delete them when it is not. Ask us to delete yours at any time and we will.
Who else touches it
| Service | What it receives | Why |
|---|---|---|
| Supabase | Your account, your synced writing, and any photo you set as a journal cover | Database, sign in, and file storage |
| OpenRouter | The text of the relevant entries, at the moment an AI feature runs | Generates the reflection or the pattern summary |
| Apple | Only what Sign in with Apple handles | Optional sign in |
| Resend | Only a message you send through the website contact form, so it can reach our inbox | Delivers that one email. It never sees anything you write inside the app |
There is no advertising network, no analytics broker, and no third party tracker in the app.
How the AI works
Every AI feature runs on our server, never inside the app, which is why no model and no key ever ships to your phone. Your text is sent onward only in the moment a feature actually runs, and only the entries that feature needs. These are the five places it happens:
- The reading of your inner landscape at the end of setup
- The gentle reflection and practice shown after you save an entry
- The optional prompt ideas in the Childhood section of Life Blueprint
- What I’m Noticing, which reads across your recent entries to name patterns
- The Where You Are card in your profile, which is redrawn as you write more
Nothing you write is used to train any model. Nothing you write is shown to another person by any feature of the app. If an entry appears to describe a crisis, the app responds with a short supportive message and deliberately saves nothing from that exchange.
The claim we are not making
Your entries are not encrypted end to end. They travel over encrypted connections and they are stored on managed infrastructure, but they are not sealed in a way that would make them unreadable to us or to our hosting provider. That work is not finished, so we are not going to imply otherwise.
If that matters to you, and it reasonably might, please weigh it before you write anything you would not want a system administrator to be technically capable of reading. When this changes, this page changes with it.
Your control
- Delete any entry from inside the app at any time.
- Use the app entirely offline and never sign in, in which case nothing leaves your phone.
- Ask us to delete your account and everything synced to it, and we will.
Children
Nouvel is written for adults and is not directed at children. Confirm this line matches the age rating you declare in App Store Connect.
Credits and licences
The country, state, and city list comes from the Countries States Cities database, used under the Open Database License. The world map outlines come from Natural Earth, which is in the public domain. Interface type is set in Nunito, and the app also uses Fredoka, Dancing Script, and Patrick Hand, all under the SIL Open Font License.
Changes
If this policy changes in a way that affects what happens to your writing, the date at the top will change and the app will tell you.
Contact
Questions, or a deletion request: nouvel@nysachandna.com