Privacy policy

Last updated 2 November 2026. This is also our collection notice under the Australian Privacy Principles.

Who we are

The team behind Nodd (“we”, “us”). We’re based in Australia and follow the Australian Privacy Principles in the Privacy Act 1988 (Cth). Questions or requests: hello@nodd.au.

What we collect

Your account

• Your name and email address, from Sign in with Apple, Google or an email code. If you use Apple’s “Hide my email”, we only see the relay address.
• Your settings: time zone, morning brief time, notification and privacy choices.

Plans and payments

• If you buy Nodd Plus or Nodd Family, the App Store handles the payment. We receive the subscription record: which plan, the product, start, renewal and end dates, whether it will renew, and the App Store transaction number. We never see your card or bank details.
• We use it to unlock your plan (and your household’s, for Family) and to help if something goes wrong with a purchase. Manage or cancel any time in your phone’s subscription settings.

What you tell Nodd

• What you say (as text) or type, and the items, lists, reminders, notes and dates Nodd makes from it.
• Photos and PDFs you choose to add (bills, school notes, parking signs) and the text Nodd reads from them. Photos are resized and their hidden location data (EXIF) is removed before upload.
• Names of people you mention or add, such as your children or a partner who doesn’t use Nodd, and how they relate to you. Please only add what you’re comfortable keeping here.
• Questions you ask Ask Nodd. Answers aren’t kept in your account (only suggested actions you can confirm, for 30 days); see AI quality checks below.
• Changes you make to what Nodd guessed (for example moving an item to another list), so we can improve how Nodd understands — kept 90 days, not used to train AI.
• Where you parked or a spot you saved — only when you tap Here or Parked. Nodd never tracks your location in the background.

Your household

• Who is in your household, invites you send, and a short activity feed (for example “Sarah ticked Milk”).
• If you share a list with a guest link, anyone with the link can see and tick that one list. What a guest adds or ticks is saved to it.

Your phone

• A push notification token, the phone’s platform (iOS or Android), the app version, a random install ID, and which reminders the phone will show by itself.
• Feedback you send from the app, and — unless you switch it off on that screen — details that help us fix problems: app version, phone model and system version, time zone, language, and the app’s sync and notification state. Kept 12 months.
• For abuse protection (invite codes, guest links), the network address you connect from is counted for up to 3 days.

If you join the waitlist on nodd.au

• Your email address and which phone you have (iPhone or Android). We use it only to email you when Nodd is available for your phone — one email, not a newsletter.
• It’s stored in Sydney, Australia, and the email is sent through our email delivery service (below). It’s never sold or used for anything else, and it’s deleted within 30 days of that email — or any time you ask at hello@nodd.au. The email has an unsubscribe link.

What we don’t collect

• Voice recordings. Speech is turned into words by your phone’s speech service (Apple or Google) — on the phone where possible, otherwise by their servers under their privacy terms. Nodd receives only the words.
• Your contacts, your location in the background, advertising IDs, or data about your use of other apps and websites.

Why we use it

• To run Nodd: turn what you say or photograph into items, remind you at the right time, send your morning brief, keep your phones and household in sync, and answer your questions.
• To keep it safe and working: sign-in, preventing abuse, fixing problems, and checking that AI results are right.
• To help you when you contact us.

We don’t use your data for advertising, we don’t sell or rent it, and we don’t use it to train AI models.

AI and your data

When you capture something, Nodd sends the words (or the photo) to our AI service provider with some context so it can work out what you meant: the names of your lists, the people in your household and the people you’ve added, and the titles of up to 20 recent open items. When you use Ask, your question and the items that match it are sent so it can answer. Item text is also sent to our AI search provider to make meaning-based search work. Your whole account is never sent at once.

If you share a household, your name and the names of shared lists may be included when another member uses AI. Your items are only ever sent if you’ve agreed to AI yourself.

Nodd asks before anything is sent to these AI services. If you say no — or later turn off AI features in Settings → Privacy — nothing more is sent to them: what you say is kept as plain notes, photos as photo notes, Ask is off, and your search data held for Ask is deleted.

Under our agreements, our AI providers don’t train their models on this data. The AI service deletes it from its systems within 30 days (longer only where needed to investigate misuse or meet the law), and the AI search service doesn’t keep it.

Who can see your things

• You. Private items are visible only to you, on your phones — and to Nodd staff only as described below.
• Your household. Things you share — and shared lists — are visible to the other members. You can make new things private by default in Settings → Privacy.
• Guests with a list link see that list only, until you turn the link off.
• Nodd staff — a small number of people who run Nodd — can access an account, including its items, notes, photos and what was said, when that's needed to give support you ask for, fix a problem, investigate abuse or a security issue, or meet the law. Every access is recorded with who, when and why, and those records are kept for 2 years. Staff can also suspend or delete accounts that break the rules.
• Our service providers, who process data for us under contract, only to run Nodd:

We may also disclose information if Australian law requires it, or to protect someone’s safety.

Overseas

Your data is stored in Australia. It is likely to be sent to the United States (AI, push notifications) and Japan (emails such as sign-in codes), and may be sent to the European Union (AI quality checks), as listed above. We choose providers with strong security and privacy commitments, but those countries’ laws are different from Australia’s.

How long we keep it

• Your items, lists and what you said: while you have an account.
• Things you delete, and captures you undo: hidden straight away; kept for 30 days (so mistakes can be fixed), then deleted from our servers and your phones. What you said to create them, and text read from their photos, goes once none of the items it made is left. Their photos are deleted within minutes.
• Household activity feed: 90 days. Records of notifications sent: 30 days. Feedback you send: 12 months. Records of staff access to accounts: 2 years. AI usage totals (counts and cost, no content): about 13 months.
• Exports: the file and its link are deleted after 24 hours.
• Subscription records: while you have an account. Apple keeps its own purchase records under its privacy policy.
• Delete your account and everything that’s only yours is deleted straight away, including your photos and files. Things you shared stay with your household. Copies in backups and AI quality records roll off within 30 days.

Security

Data is encrypted in transit and at rest. Every request is checked against who you are, so other households can’t see your things. Nodd isn’t end-to-end encrypted — our server and AI providers need to read what you capture to understand it. If a data breach is likely to cause you serious harm, we’ll tell you and the Australian Information Commissioner.

Your choices and rights

• See and download your items, lists, people, reminders, what you said and your files: Settings → Privacy → Export my stuff. Ask us for anything else we hold about you.
• Correct anything by editing it in the app, or ask us.
• AI features on or off: Settings → Privacy.
• Delete your account: Settings → Delete account. If you own a household others use, you’ll hand it over first. Can’t open the app? See how to ask us to delete it.
• Turn off notifications, the morning brief, or location access at any time in Nodd or your phone’s settings. Some features stop working without them, but the rest of Nodd still works.
• You can’t use Nodd anonymously: we need an account to keep your things and sync them.

To ask for access or correction, or to complain about how we handled your information, email hello@nodd.au. We’ll reply within 30 days. If you’re not happy with our answer, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Children

Nodd accounts are for people aged 13 and over. If you’re under 18, please use Nodd with your parent’s or guardian’s permission — for example, by joining your family’s household. Nodd isn’t meant for children under 13: parents can add younger children’s names and details as people in their own household, and those children don’t have accounts. If you think a child under 13 has an account, tell us at hello@nodd.au and we’ll delete it.

Changes

If we change this policy, we’ll update the date above, and tell you in the app if the change is significant.