Privacy policyWhat stays private.

Overview

NanoClip, NanoVoice, and NanoPad (collectively, “our apps”) are developed by Digital Toys (“we”, “us”). This policy explains what the apps and the getnano.dev website access, where that information goes, and the choices available to you.

Data stored on your devices

App content is stored locally on your devices. Eligible content may also sync through iCloud as described below. We do not operate a server that stores your clipboard history, notes, recordings, or transcripts. Local data may include:

• Clipboard history, snippets, notes, and saved flows
• Voice recordings, transcripts, meeting notes, and templates
• Usage statistics stored by an app, such as copy counts
• Link-preview caches, preferences, and app settings
• License credentials and provider API keys stored in Keychain

Voice and meeting audio

NanoVoice accesses your microphone only when you start dictation or a recording. Meeting Mode can also capture system audio when you enable it and grant macOS permission. Audio and transcripts are processed on your Mac by Apple Speech or a local Whisper model. NanoVoice does not upload them to NanoApps. You are responsible for obtaining any consent required before recording another person or a meeting.

iCloud sync

NanoPad automatically syncs notes, tasks, saved URLs, and attached images through your personal iCloud account when iCloud is available and permitted for NanoPad. This uploads eligible content to Apple's CloudKit servers. You can manage NanoPad's iCloud access in your device's Apple Account settings. Other NanoApps sync features follow the choices provided in those apps. Apple encrypts synced data in transit and at rest. We do not have access to the contents of your private CloudKit database.

Optional AI providers

Some paid features can send text you choose to process directly to a provider such as OpenAI, Anthropic, or Google Gemini using an API key you supply. Keys are stored in macOS Keychain. NanoApps does not receive your key or the text sent in those requests. The selected provider processes the request under its own privacy policy. Local processing options do not send that text to a cloud AI provider.

Analytics and diagnostics

Our apps may send limited product and diagnostic events, such as app version, operating-system version, feature used, processing engine, duration, result status, and failure descriptions. These events do not include clipboard contents, audio, transcripts, notes, or text you process. Where an app provides an analytics setting, you can turn this collection off there.

NanoPad uses Google's Firebase Analytics and Crashlytics when collection is enabled. Analytics sends app-instance identifiers, app and device information, feature interactions, and purchase events to Google to help us understand usage and improve NanoPad. Google also derives approximate location from masked IP addresses; NanoPad does not request GPS location for analytics. Crashlytics sends crash stack traces, app and device state, installation identifiers, and technical diagnostics to Google to help us find and fix crashes. Analytics events do not include note titles, note contents, tags, searches, saved URLs, or filenames. We do not attach a NanoPad account, name, or email address to these events.

In NanoPad versions with the Help improve NanoPad toggle, Firebase remains off until you turn that toggle on. It is optional during Mac onboarding and available in Settings (General → Help on Mac; Help & Support on iPhone and iPad). Your choice applies to that installation and does not affect access to any app features. Turning the toggle off withdraws consent and stops future Firebase collection. Earlier versions without this toggle may have enabled analytics and crash reporting by default; use their sharing controls where available.

Google processes this data on its infrastructure, which may be outside your country. We use these services under Google's applicable data-processing and security terms, with protections for confidentiality and security. Read more in Firebase's privacy and security information. We do not use NanoPad analytics for advertising or cross-app tracking and do not sell this data.

The website uses Vercel Analytics to measure aggregate visits and interactions. Vercel may process technical request information needed to provide that service. We do not use advertising trackers or sell personal information.

Permissions

Depending on the features you use, an app may request Accessibility, microphone, system-audio-recording, notification, or automation permissions. These permissions are used only to provide the feature described by macOS. For example, Accessibility enables global shortcuts, pasting, and snippet expansion; it is not used to log your keystrokes or read unrelated screen content.

Purchases, licenses, and network requests

The apps do not contain third-party advertising or data-broker SDKs. Network requests may be made for:

• Apple StoreKit purchases and Apple CloudKit sync
• Google Firebase analytics and crash diagnostics when enabled
• Polar checkout, license activation, and periodic license validation for direct-download products
• App updates and optional speech-model downloads
• Metadata or page content for URLs you explicitly process
• Cloud AI requests you initiate with your own provider key

Polar acts as merchant of record for purchases it processes and may collect billing, tax, and contact details needed to complete the transaction. That information is handled under Polar's privacy policy. NanoApps receives order and license information needed to provide your purchase, but not your full payment-card details.

Retention and deletion

You control content stored in the apps. You can delete individual items or clear saved content from within the relevant app. Deleting a Mac app does not always delete its Application Support data, so use the app's deletion controls first if you want to remove content. Data synced through iCloud can be managed through your Apple account. Purchase and tax records may be retained by Apple, Polar, or us where required to provide your license or comply with law.

Google starts removing Crashlytics crash reports and their associated identifiers after 90 days. Our NanoPad Analytics property retains event data for 2 months and user data for 14 months. The user data retention period restarts when the installation is active again; aggregate reports may remain longer. Firebase installation records can remain until deleted. Contact support@digitaltoys.xyz to request deletion of analytics or diagnostic data. Because NanoPad does not send your name or email with this data, we may need an installation identifier to locate records, and may be unable to identify a particular record from your email alone.

Children's privacy

Our apps are not directed at children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy as the products change. The current version will remain available on this page with its effective date.

Contact

For privacy questions or requests, email support@digitaltoys.xyz.