Privacy, in operational terms.

1. Who we are and how to contact us

NOLO is an independently operated AI assistant, built and maintained by one person. It is available as a web app at nolo-app.com, a website at landing.nolo-app.com, an Android app distributed through Google Play (package app.nolo.ai), and a directly downloadable Android APK.

For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, the operator of NOLO is the data controller for the processing described here.

For privacy questions, data access or deletion requests, complaints or security reports, write to nolo.ai.app@gmail.com. That is the fastest route and it reaches a real person. If you contact us, we process your email address and the content of your message in order to answer you. We have not appointed a Data Protection Officer, because NOLO's scale and processing do not meet the conditions in GDPR Art. 37.

The controller's full name and postal address are set out in section 21, at the foot of this page.

2. What this policy covers

This policy covers the NOLO website, the web app, the Android app on Google Play, the standalone APK, subscriptions, AI chat, file and image processing, voice dictation, web search, live-data widgets, exports and the optional Google Drive sync.

It does not govern the independent processing carried out by the companies named in section 7 when they act as controllers in their own right (for example Google for your Google account, Stripe for payment fraud prevention, Google Play for your purchase). Their own policies apply to that processing, and we link to each of them.

3. How NOLO is built, in one paragraph

There is no sign-up. When you first open NOLO, your browser generates a random identifier that looks like nolo_a1b2c3. That string is your entire identity: it is not derived from your device, your email or your IP address, and it means nothing outside NOLO. Your conversations are written to your browser's own storage (localStorage and IndexedDB) and stay there. When you send a message, your browser posts it to NOLO's own API, and NOLO's server, not your browser, forwards the part needed to answer to an AI provider. That relay is deliberate: it means the AI provider sees a request from a server in Vercel's pool, with no user identifier and no IP address of yours. There are three exceptions to that rule, and they are listed in section 8 rather than buried.

4. Data categories NOLO processes

5. What stays on your device

Your conversation archive lives in your browser's localStorage and IndexedDB: chat history, projects, spaces, memories, gallery entries and settings. NOLO has no server-side copy of any of it and no way to reconstruct it.

• Incognito chats are not written to storage at all. They exist only in memory and disappear when the chat is closed.
• App lock can put NOLO behind your device fingerprint or PIN. This protects the app's screen; it does not encrypt the underlying browser storage.
• If you clear browser data, switch browser or device, reset the app, or uninstall it, local history is gone. We cannot recover it, because we never had it.
• Local storage is not the same as end-to-end encryption. Anyone with access to your unlocked device or browser profile, and software with access to your browser storage, can read it.

6. What NOLO's own servers store

This is the complete list. Everything below lives in one PostgreSQL database hosted by Supabase and is keyed on your anonymous ID or on a hashed IP, never on a name, email or IP address in the clear.

The encrypted fields use AES-256-GCM with a key that only NOLO's server holds, in Vercel's environment, so a copy of the database on its own does not reveal them. NOLO's server can decrypt them, because it has to read a task to run it: this is encryption at rest, not end-to-end encryption.

7. Every company that receives your data

These are NOLO's processors and sub-processors. The list is exhaustive as of the date at the top of this page. "Sees your IP" means the provider receives your device's IP address rather than our server's.

AI models

Search and live data

Infrastructure

Payments, distribution and optional sync

We do not sell personal data, do not share it for cross-context behavioural advertising, and do not use it to build advertising profiles. There are no advertising SDKs, attribution SDKs or third-party trackers in NOLO.

8. What your browser loads directly from third parties

Almost everything is relayed through NOLO's own server so that third parties never see you. These are the exceptions, where your browser talks to another company directly and that company therefore receives your IP address and user agent. We list them because they are real, not because we are comfortable with them.

You can verify all of this yourself in about thirty seconds: open NOLO, press F12, open the Network tab, and watch. Everything on this page is observable.

9. Analytics

NOLO runs Vercel Web Analytics and Vercel Speed Insights on the website and inside the app. We are naming this explicitly because "we have no analytics at all" would be untrue, and an earlier version of our transparency page said so.

• They record the page or route visited, the referring page, an approximate country, device and browser type, and page-performance timings.
• They set no cookies, create no persistent visitor identifier, and cannot follow you to other websites.
• They are served from NOLO's own domain (/_vercel/insights/), so no request leaves for a third-party analytics domain.
• They never see the content of your conversations, your anonymous ID, or anything you type.
• Vercel processes this on our behalf as our processor. Because it is aggregated, cookieless and non-identifying, we rely on legitimate interests rather than consent; if your local law requires a consent banner for it, tell us and we will add one.

NOLO's own former usage and visitor analytics have been retired and the code that wrote them has been removed.

10. Google Sign-In and Drive sync (optional)

NOLO offers an optional Google Sign-In so your chats can follow you between devices. It is entirely optional and NOLO is fully functional without it. If you never sign in, this section does not apply to you.

What NOLO asks Google for

• openid, which returns Google's opaque account identifier (the sub). NOLO does not request your email, name or profile picture. If Google's standard response includes them, NOLO discards them immediately and never stores them.
• https://www.googleapis.com/auth/drive.appdata, which grants access restricted to NOLO's own hidden folder inside your Drive. This scope cannot read, list or modify any other file in your Drive. It is technically incapable of it.

What is stored in your Drive

A single obfuscated file in that hidden folder, containing your chat sessions, settings, saved memories, projects and your anonymous ID (so your paid plan follows you across devices).

The file is scrambled in your browser with AES-GCM 256 before it is uploaded, but the key is derived from your Google account identifier (with PBKDF2 at 100,000 iterations and a fixed salt), not from a secret only you know, so this is obfuscation, not end-to-end encryption. The key is regenerated locally each session and never transmitted to or stored on NOLO's servers. NOLO's servers never see the key, the plaintext, or even the fact that a sync file exists.

Google's Limited Use commitment

NOLO's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, NOLO does not transfer information received from Google APIs to third parties; does not use it for advertising, profiling or training AI models; and does not allow humans to read it, except with your explicit consent, to comply with applicable law, or as strictly necessary for security operations.

How to disconnect or delete it

• Sign out on this device: Settings → Account → Sign out. The token is revoked and syncing stops. Your sync file stays in your Drive so you can come back.
• Delete everything: Settings → More settings → "Delete all my data". This deletes the sync file from your Drive, revokes the token and wipes local data on the device.
• Revoke from Google: at any time, at myaccount.google.com/permissions. This works independently of NOLO.

11. Payments and subscriptions

On the web, payments go through Stripe. You are redirected to Stripe's own checkout; your card details are entered on Stripe's page and never reach NOLO's servers. NOLO stores the resulting Stripe customer ID against your anonymous ID so your plan can be recognised, and receives webhook events about the state of the subscription.

In the Android app from Google Play, payments go through Google Play Billing under your own Google account. NOLO receives a purchase token and a product ID and nothing else: no name, no email, no payment method. NOLO asks Google once a day whether that subscription is still active, and removes paid access when it is not. Google also sends NOLO real-time notifications when a subscription changes state.

In both cases the payment provider retains transaction and invoice records for as long as its own tax, accounting and anti-fraud obligations require. NOLO cannot delete those records on your behalf.

12. International transfers

NOLO is operated from the European Union, but most of its providers are established in the United States: Groq, OpenRouter, CoreWeave, DigitalOcean, fal, Tavily, Vercel, Cloudflare, Stripe and Google (and Mozilla or Apple, if you turn on notifications in their browsers). Using NOLO therefore involves transferring data outside the European Economic Area.

These transfers rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, on the EU–US Data Privacy Framework, together with the technical measures described throughout this policy, principally that your identity is not transferred at all, because there is none to transfer.

If you would rather not have your data processed in the United States, the honest answer is that NOLO is not the right tool for you today, and we would rather say so than bury it.

13. Legal bases for processing

Where we rely on legitimate interests, you have the right to object. See section 15.

14. How long anything is kept

15. Your rights, and how to actually use them

Under the GDPR and comparable laws you have the right of access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and the right to lodge a complaint with a supervisory authority. If you are in the EU you can complain to your national data protection authority; a list is at edpb.europa.eu.

Because NOLO holds almost nothing about you, most of these you can exercise yourself, immediately, without asking us:

• Erase your conversations, projects, memories and settings: Settings → More settings → "Delete all my data". Instant, and it also removes the Drive sync file if you use sync, and your scheduled tasks, their pending results and your push subscriptions from our server.
• Export your data: the export controls in the app produce a file from your local storage. That file is your data. There is no server copy to request.
• Erase your server record: email nolo.ai.app@gmail.com with your anonymous ID (Settings shows it) and ask us to delete it. We respond within 30 days and usually within a few days. If you have a paid subscription, cancel it first, because deleting the record ends your access.
• Object to legitimate-interest processing: write to us. In practice, opting out of usage counters means opting out of NOLO, because they are what makes daily limits possible. We will say so plainly rather than pretend otherwise.
• Withdraw sync consent: sign out in Settings, or revoke NOLO at myaccount.google.com/permissions.

There is a dedicated data-deletion page at nolo-app.com/delete-account.

If you are in California or another US state with a comparable law: NOLO does not sell or share personal information as those terms are defined, does not use it for cross-context behavioural advertising, and does not offer financial incentives for data. The rights described above apply equally, and we do not discriminate against anyone who exercises them.

16. Children

NOLO is not directed at children. You must be at least 16, or the minimum age for consent to data processing in your country if that is lower, and at least 18 to buy a subscription. We do not knowingly process data from anyone below that age. Because there is no account, we have no age verification beyond this statement and Google Play's own content rating, another limit we would rather state than imply away. If you believe a child has used NOLO and you want the associated server record removed, email us with the anonymous ID.

17. Security

• HTTPS everywhere, with HSTS and preloading.
• A strict Content Security Policy that limits which hosts the app may contact at all. Everything in sections 7 and 8 is listed there and enforced by your browser.
• Provider API keys live only in server environment variables and are never exposed to the browser.
• Cross-origin requests are restricted to NOLO's own domains.
• Rate limits on every expensive endpoint, keyed on a hashed IP.
• Sync payloads are obfuscated client-side before they leave the device (not end-to-end encrypted; see section 10).
• A design rule against logging user content, applied throughout the codebase.

No internet service can promise perfect security. You remain responsible for your device, your browser profile, your exported files and any content you choose to submit. If you find a vulnerability, email nolo.ai.app@gmail.com. Reports made in good faith are welcome and will not be met with legal threats.

18. The honest limits

Every claim above has an edge. Here they are, collected in one place so you do not have to find them yourself.

• NOLO is not "zero logs". We keep pseudonymous usage counters for 30 days, and our host logs every request including your IP address. Without either, daily limits and abuse prevention would not work. "No content logs and no identity" is accurate; "zero logs" would be a lie.
• Hashing an IP is pseudonymisation, not anonymisation. Our rate-limit hashes use a fixed salt, so the same IP always produces the same hash. It cannot be reversed to an address by inspection, but someone who guessed an IP could confirm it. Those rows hold only a counter and a date, and are deleted after 7 days.
• Your IP and your anonymous ID are in the same request. When you send a message, our infrastructure necessarily sees both at once. We do not store them together and nothing writes that pairing to a database, but we cannot claim the pairing never exists.
• Drive sync is not end-to-end encrypted. It is obfuscated with a key derived from your Google account, so Google could read it. See section 10.
• Scheduled tasks are encrypted at rest, not end-to-end. NOLO's server holds the key, because it has to read a task to run it. A stolen copy of the database would not show them; NOLO itself can read them. See section 6.
• Local storage is not encrypted storage. Anyone with your unlocked device can read your chats.
• Three third parties do see your IP directly. Google Fonts, the two library CDNs, and fal's image CDN. Section 8 lists exactly when.
• We cannot audit our providers' internals. What section 7 reports is what each provider publicly commits to. We can prove what NOLO sends and to whom; we cannot prove what happens inside another company.

19. Professional, regulated and sensitive use

NOLO is useful for legal, compliance, business, medical-adjacent and research work, but it is not a law firm, lawyer, accountant, doctor, financial adviser or any regulated professional service. Using it creates no attorney-client relationship, no professional privilege and no duty of confidentiality equivalent to one owed by your own adviser.

If you intend to put client data, personal data of others, health data, trade secrets, privileged material or regulated information into NOLO, you are the controller of that data and you are responsible for confirming that doing so is lawful, authorised and compatible with your professional duties. Read section 7, decide whether that chain of providers is acceptable for your obligations, and do not paste anything you are not entitled to share with them. NOLO does not currently offer a data processing agreement or a business associate agreement; if you need one, email us before using NOLO for that work.

20. Changes to this policy

If we add, remove or replace a provider, this page changes and the date at the top changes with it. That is the commitment: the list in section 7 is meant to be complete at all times, not aspirational. Material changes will also be surfaced in the app or on the website. If you want to know what changed and when, ask us and we will tell you.