Privacy Policy
Effective July 24, 2026
This policy applies to the NUO iOS app and nu-o.com. NUO is a wake-up and shared-accountability app designed so raw health and motion inputs stay on your iPhone while only the narrow account and product state needed for synced features reaches our servers.
Consumer health data has a separate, more specific Consumer Health Data Privacy Policy.
1. What we collect
When you use synced features, we collect the information needed to provide them: • Account information: your email or phone number, internal user ID, authentication records, and an optional Circle display name. • Derived commitment and wake outcomes: the commitment title, cadence, signal type, whether an outcome was met, missed, or close, and derived streak or risk state when you choose to sync or share it. • Future You content: messages and quick replies you send, responses generated for you, media you deliberately attach, memories you explicitly accept, forget instructions, and proposal decisions. • Circle data: buddy relationships, alarm shares, derived shared statuses, acknowledgements, reactions, and nudges. • Device and service data: APNs push token, app version, time zone, consent version, request timestamps, and limited security logs.
2. What stays on your device
Raw Apple Health samples, pedometer readings used during wake verification, local calendar details, contact details used for a user-initiated Messages handoff, and raw alarm scheduling remain on your device. NUO does not scan your photo library. Only media you individually choose to attach to Future You is uploaded. The app's alarm is scheduled locally through Apple's AlarmKit. The server receives only the narrow social or derived outcome state needed for features you choose to sync or share.
3. How we use information
We use information to authenticate your account; provide reinstall and multi-device continuity; operate alarms' optional social mirror, Circle, commitments, and Future You; send notifications you enable; prevent abuse and duplicate or replayed requests; support users; and comply with law. We do not sell personal information, use it for third-party advertising, or track you across other companies' apps and websites.
4. Future You and attached media
Future You is generated by an Anthropic language model. The messages and media you choose to send are routed through Vercel's AI Gateway to Anthropic to produce a response. The app requires separate, versioned consent before the first live message and lets you withdraw that permission. Attached images are stored in Supabase, stripped of EXIF metadata before model use, and associated with the conversation turn you chose. Unattached uploads are scheduled for deletion. Deleting a turn removes its attached media from live storage.
5. Service providers
Apple provides the platform, AlarmKit, TestFlight, and APNs delivery. Stytch provides authentication. Vercel hosts the API and AI Gateway. Supabase provides the Postgres database and media storage. Anthropic generates Future You responses. These providers process information only for their service role and under their own security and privacy terms. We may also disclose information when law requires it, to protect users and the Service, or as part of a corporate transaction with appropriate notice and continuing protections.
6. Circle sharing
Circle sharing is user-directed. A buddy sees only the relationship, alarm, commitment title, or derived status you chose to share. They do not receive your raw HealthKit, motion, calendar, contact, mood, or location data. You can remove a buddy or stop sharing; the server removes the associated shared visibility according to the product's deletion flow.
7. Retention and deletion
We keep account and synced product data while your account is active and as needed to provide the Service. Short-lived security and idempotency records expire automatically. Circle events and unattached uploads have automatic expiry rules. You can delete individual memories, conversation turns and attached media, commitments, Circle relationships, or your account. Verified account-deletion requests remove data from live systems and are propagated to processors; encrypted backup copies expire on the provider's normal backup rotation and are not used except for disaster recovery.
8. Your choices and rights
You can access, correct, export, or delete synced information; withdraw optional Future You or health-adjacent consent; stop sharing with Circle; and control notifications in the app or iOS Settings. The core local alarm does not require Circle or Future You. To make a request, use the in-app privacy controls or email team@nu-o.com from the address associated with your account. We verify requests and respond within the time required by applicable law. We do not discriminate against anyone for exercising a privacy right.
9. Security
Traffic is encrypted in transit and infrastructure providers encrypt production data at rest. API access uses authenticated bearer sessions; critical mutations use idempotency and replay protection. Production access is restricted. No system is perfectly secure, and we will provide notice when required if a security incident affects personal information.
10. Children and availability
The Service is not directed to children under 16, and we do not knowingly collect personal information from them. A parent or guardian who believes a child provided information can contact team@nu-o.com. The beta is operated from and currently intended for the United States. Data is processed in the United States. Distribution outside the United States will require a separate review of local privacy requirements.
11. Policy changes and contact
We will post changes with a new effective date. We will give advance notice in the app or by email when a change materially expands how we use personal information, and we will obtain fresh consent where law requires it. For privacy questions or rights requests, email team@nu-o.com.