This page is translated for convenience. English is the definitive version — if anything reads oddly, the English text is authoritative.

the short version: almost nothing

Privacy Policy

effective july 14, 2026 · applies to the nomo ios app

Nomo is built to know as little about you as possible. The app has no accounts of its own, no advertising, and no cross-app tracking. It does use one privacy-focused analytics tool to record anonymous, aggregate usage — never your identity. With Nomo Pro, session updates travel through our server, but they're end-to-end encrypted and we can't read them. This page explains exactly what data exists, where it lives, and where it goes.

In one sentence: everything sensitive — your credentials and your usage numbers — never leaves your device in a form anyone can read; what does leave is an anonymous push registration (if you turn alerts on), anonymous aggregate analytics that can't identify you, and — for Pro sessions — end-to-end-encrypted blobs that only your own devices hold the key to.

01What stays on your device

If you connect an account from a supported provider (for example Claude or ChatGPT) to use the optional usage widget, you sign in through that provider's official sign-in flow. The resulting credentials are:

Your usage numbers are downloaded by your device, computed on your device, and displayed on your device. They never leave it. Disconnecting an account deletes its credentials from the keychain.

The same goes for the encryption key behind Nomo Pro sessions (section 03): it's generated on your computer and handed to your phone directly when you scan the pairing QR code. It lives only on those two devices — it is never sent to us or anyone else.

02What our server receives (alerts only)

If you enable status or usage alerts, your device registers with our notification service so it can send you push notifications. That service stores:

DataWhy
Anonymous push tokenThe device identifier Apple provides for delivering notifications. It contains no personal information and is not linked to your identity.
Alert preferencesWhich services you want alerts for and which alert types are on or off.
TimestampsTo schedule notification checks.

That's the complete list. No name, no email, no account identifiers, no credentials, no usage numbers. If you turn alerts off, your device is unregistered. Usage-limit alerts are computed on your device — the server only sends an invisible "wake up and check" signal.

03Nomo Pro sessions (end-to-end encrypted)

Nomo Pro can show your live Claude Code and Codex sessions in the Dynamic Island. To set it up, you scan a QR code on your computer with your phone. That QR code carries a randomly generated encryption key that passes directly from computer to phone — it never touches our server. A small open-source plugin on your computer then encrypts each session update (the session title, its working / done / needs-attention state, and the model name) with that key before anything is sent anywhere.

Our server is a blind relay: it accepts the encrypted blobs and forwards them to your phone as push notifications. It stores:

DataWhy
Anonymous pairing IDA random identifier linking your computer's plugin to your phone. It contains no personal information.
Anonymous push tokenThe same kind of Apple-provided delivery identifier used for alerts.
TimestampsTo deliver updates and expire stale ones.
Encrypted session eventsOpaque blobs the server cannot decrypt — it never has the key. Decryption happens on your phone, at render time.

No key, no plaintext, no code, no prompts, no file contents — the server can't read what it relays, and neither can we. The blobs are ephemeral: they're kept only as long as needed to deliver and expire automatically. Unpairing a computer deletes the pairing from the server; the key was never there to begin with.

04Purchases

Nomo Pro is an auto-renewing subscription ($4.99/month or $34.99/year) purchased through Apple's App Store in-app purchase system. Apple processes the payment — we never see your name, card number, or any billing information. The app checks your subscription status on-device through Apple's StoreKit; the only thing our server learns is whether a device is entitled to Pro delivery — a yes/no tied to the same anonymous push registration, linked to no identity. You can manage or cancel the subscription anytime in your App Store account settings.

05Anonymous analytics

To understand how Nomo is used — which widgets people add, how many connect an account, whether alerts get turned on — the app sends anonymous usage signals through TelemetryDeck, a privacy-focused analytics service. These signals:

The result tells us aggregate things like "what share of users added the usage widget" — never anything about a specific person.

06Where status data comes from

Service status is read from each provider's public status page — the same pages anyone can open in a browser. Requests to those pages and to providers' usage endpoints are made by your device, so those providers see your device's standard network requests (such as IP address), as they would for any app or website. Their own privacy policies govern that data.

07What we don't do

08Data retention & deletion

Because we hold no account data, there is nothing to delete beyond the anonymous alert registration and any Pro pairings. Turning alerts off (or deleting the app) removes your device from our notification service. Unpairing a computer — or deleting the app — removes the pairing from the server, and encrypted session blobs expire automatically on their own. Credentials in the keychain are deleted when you disconnect an account or delete the app.

09Changes to this policy

If Nomo's data practices ever change, this page will be updated and the effective date above will be revised before the change takes effect.

10Contact

Questions about privacy? Email karrixlee1231@gmail.com and you'll get a reply from a human.