Privacy Policy
Last updated July 2026
Nowist is a personal productivity assistant. This policy explains what we collect, why, who processes it on our behalf, and the control you have over it. It is written plainly on purpose.
What we collect
- Account. Your name and email address from Google or Apple when you sign in.
- Your content. The tasks, notes, sub-tasks, and goals you create, and activity we derive from them (e.g. completions, streaks).
- Connected Google services (only if you connect them). With your consent, Nowist can read your Google Calendar (to show your day and schedule events you ask it to) and, if you turn on the email monitor, read your Gmail. See “The email monitor” below for exactly what that means. It can also send email on your behalf — but only messages you have reviewed and approved first.
- Fitness (optional). If you add a training-feed URL (e.g. TrainingPeaks / intervals.icu), we fetch your planned workouts from it.
The email monitor
The email monitor is off by default and only runs if you turn it on. When it is on, Nowist periodically checks your new incoming Gmail messages — reading the sender, subject, and a short snippet — to detect ones that look like tasks and draft them into your review inbox as suggestions. You approve or dismiss each suggestion; nothing is added to your list automatically. You can turn the monitor off at any time in Settings, which stops this access. We do not read your entire mailbox history, and we never send email without your explicit review and approval of the recipients, subject, and body.
How we use it
- To run the app and its AI features — organizing and prioritizing tasks, suggesting next steps, drafting messages you review, and planning training.
- The relevant content above (your task text, and, for the monitor, the sender/subject/snippet of a message) is sent to Anthropic's API to generate these results for you.
- We do not sell your data, show ads, or use your content to train AI models. Under Anthropic's API terms, your content is not used to train their models.
Who processes your data
We use a small set of trusted service providers (subprocessors) to run Nowist. They process your data only to provide their service to us:
- Supabase — database hosting (your account and content).
- Vercel — application hosting.
- Anthropic — the AI that powers task triage, drafting, and search.
- Google — sign-in, and the Calendar/Gmail access you connect.
- Optional channels you enable — if you set up notifications via Telegram or WhatsApp (Twilio), the brief/reminder content you choose to receive passes through that provider to reach you.
Google user data
Nowist's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: connected-account data is used only to provide and improve the user-facing features described above, is not sold, and is not used for advertising. Access can be revoked at any time in Settings, or at your Google Account permissions page.
Security & retention
- Connected-service tokens (e.g. your Google grant) are encrypted at rest. Traffic is encrypted in transit (HTTPS).
- We keep your account and content for as long as your account is active. When you delete your account, your data is permanently removed (see below).
Your control
- Disconnect any integration, or turn the email monitor off, in Settings at any time.
- Delete your account and all associated data in the app: Settings → Account → Delete account. This is permanent and cannot be undone.
- Request a copy of your data, or deletion by another route, by emailing devon@nowist.ai.
Changes
If we make material changes to this policy, we will update the date above and, where appropriate, notify you in the app.