Privacy Policy
This Privacy Policy explains how Virgilio Lampano Basilit, known as Vince Basilit ("Nokoto," "we," "us" or "our") collects, uses, shares and protects your information when you use the Nokoto app for iPhone and any related websites, notifications, widgets and support channels (together, the "Service"). By using the Service, you agree to this policy. If you don't agree, please don't use the Service.
Questions or concerns? Email us at support@nokoto.app.
Summary of key points
This summary gives you the short version. Each point links to the full section below.
- What we collect. The tasks you say or type, the first steps and plans Nokoto makes for you, your focus and timer history, your settings and onboarding answers, your first name and age range, and basic technical data. See section 1.
- What we never keep. We never store recordings of your voice. Audio is turned into text, then discarded. See section 4.
- Sensitive information. We don't ask for sensitive information such as health, religion or financial details. Optional reflections you write about how a task felt are stored only so you can see them.
- Who sees your data. Only the service providers we need to run Nokoto, such as our database host and our AI provider. We don't sell your personal information and we don't use it for targeted advertising. See section 3.
- AI. Your task text is sent to Anthropic's Claude model to understand your task and suggest a first step. See section 4.
- Screen Time. The apps you choose to block stay on your iPhone. Apple doesn't share them with us, and we can't see which apps they are. See section 1.
- Age. Nokoto is for people 13 and older. Users aged 13 to 17 get extra protections. See section 7.
- Your choices. You can export your data or delete it at any time in the app, under You, then Privacy and data. See section 8.
- Where we operate. Nokoto is offered in the United States and Canada.
1. What information we collect
We collect only what Nokoto needs to turn your tasks into first steps and help you start them.
Information you give us
| Category | What it includes |
|---|---|
| Profile | Your first name and your age range (13 to 15, 16 to 17, 18 to 24, or 25 and up). If your iPhone shares an age range through Apple, we use that instead. |
| Onboarding and settings | What you put off, what usually stops you, your preferred tone, your reminder time, notification and focus settings, and language. |
| Tasks | The text of tasks you say or type, any time or date you mention, the first steps and next steps Nokoto creates, and whether a task is waiting, started, paused or done. |
| Photos and screenshots | If you add a task from a photo or screenshot, our server sends the image to Anthropic's Claude model to read the task from it. We don't keep the image after the task is created. |
| Focus history | When you start, pause or finish a task, how long you focused, how many times a task was moved, your streak and your milestones. |
| Reflections | Optional notes on how a task felt before or after you did it. |
| Support | Messages, feedback and email address you send us when you contact support. |
Information collected automatically
- App and device data: device model, iOS version, app version, language, time zone and a random user ID created when you install the app.
- Usage data: which screens you visit and which features you use, such as starting a task or finishing onboarding. We use this to improve Nokoto.
- Diagnostics: crash reports and performance logs.
- Server request logs: when the app talks to our servers, Supabase records your IP address, approximate location (city and country), the time, the address called and whether it worked. These logs never include what you said, typed or photographed, and Supabase keeps them only for a short time.
- Notification token: if you allow notifications, a token from Apple that lets us deliver them.
Information from Apple
- Purchases: Apple tells us whether you have an active subscription, a free trial, or a lapsed plan. Apple handles all payments. We never see your card or bank details.
If you join the Founding 100 beta
The Founding 100 is a free early-testing program for up to 100 people, joined with a single-use invitation code. If you join, we also collect:
- Beta membership: your place number, the invitation code you used, when you joined and when your access ends, and the version of the beta terms you saw.
- Feedback you choose to send: a category, any text you write, an optional 1 to 5 rating, and your app and iOS version. Anyone can send feedback from You, then Send feedback.
- Basic usage events: short records of actions such as "a task was created" or "a starter session finished," with the app version and where in the app it happened. They never include your task titles, steps, notes, transcripts or audio. You can turn them off in You, then Founding Beta, and they're always off for ages 13 to 17.
- Interview contact: if you volunteer for an interview, the one email address or phone number you give us. You can remove it at any time. It isn't offered to ages 13 to 17.
We use this only to run the beta and learn what to improve.
On the nokoto.app website
This website doesn't set cookies and doesn't use analytics or advertising trackers. Its fonts are served from this site. Like any website host, Netlify, which hosts nokoto.app, receives your IP address and browser details to deliver the pages.
Information that stays on your iPhone
- Voice audio. Audio is turned into text while you speak and is never stored or sent to us. See section 4.
- Screen Time choices. When you pick apps to block during focus, iOS gives Nokoto an encrypted reference, not the app names. Your choices never leave your device and we can't see them.
- Widget data. Your current task and timer are shared between the app and its widgets on your iPhone only.
What we don't collect
We don't collect your precise location, contacts, photos library (other than images you choose to add), health data, or advertising identifier. We don't track you across other companies' apps or websites.
2. How we use your information
We use your information to run Nokoto and make it work for you. We use it to:
- Turn what you say or type into tasks, first steps and focus plans.
- Schedule tasks for later and send the reminders you ask for.
- Run focus sessions, timers, widgets and Live Activities.
- Track your streak, milestones and progress.
- Apply your tone, language and reminder time.
- Turn on teen protections when your age range is 13 to 15 or 16 to 17.
- Check your subscription with Apple and unlock paid features.
- Answer your questions and support requests.
- Find and fix bugs, crashes and slow screens.
- Learn which features help people start, so we improve the app.
- Keep Nokoto secure, prevent abuse and fraud, and follow the law.
What we don't do
- We don't sell your personal information.
- We don't share it for targeted or cross-context behavioral advertising.
- We don't show ads in Nokoto.
- We don't use your tasks, reflections or voice to train AI models, and our AI provider doesn't either. See section 4.
- We don't make decisions with legal or similarly significant effects about you based only on automated processing.
Our legal reasons
Where a law asks us to name our reason for using your data, we rely on:
- Your consent, for example when you allow the microphone, speech recognition, notifications or Screen Time. You're free to withdraw it in iOS Settings at any time.
- Providing the service you asked for.
- Legitimate interests in keeping Nokoto secure and improving it, balanced against your rights.
- Legal duties, such as keeping tax records or answering lawful requests.
3. When and with whom we share it
We share personal information only in the cases below.
Service providers
These companies process data for us. Our contracts limit their use of it to the work they do for Nokoto.
| Provider | What they do for us | Data they receive |
|---|---|---|
| Supabase | Hosts our database, anonymous sign-in and server functions | Your random user ID, profile, settings, tasks, first steps, focus history and reflections, plus your Founding 100 membership, feedback, usage events and interview contact if you join the beta |
| Anthropic | Runs the AI model (Claude) turning your words into tasks and first steps | The task text or photo, the date and time zone, the app language, your tone setting, your answers about what you put off and what gets in the way, and, when you ask for a next step, the step you finished and any next step you wrote. Never your name, age or past tasks. |
| Apple | App Store, payments, push notifications, speech recognition and crash reports | Purchase status, your notification token, audio for speech recognition on devices without on-device support, and diagnostics if you share them with developers |
| Netlify | Hosts the nokoto.app website | Your IP address and browser details when you visit the website |
| Sentry | Crash and error reporting | Crash reports, error details, device model, iOS and app version. Sentry runs without personal data or request contents. |
Other cases
- Legal reasons. To follow a law, court order or lawful request from authorities, or to protect the rights, safety and property of you, other people or Nokoto.
- Business transfers. If Nokoto is sold, merged or reorganized, your information moves to the new owner, who must keep honoring this policy.
- With your consent. When you ask us to, for example when you export your data and share it yourself.
Where your data is stored
Supabase stores our data in the United States. Anthropic processes AI requests in the United States and other countries where it operates. If you live in Canada, your information is stored and processed outside Canada. While it's there, the laws of those countries apply, including access by their courts and authorities.
4. AI features and voice
How voice input works
When you tap the mic, iOS speech recognition turns your words into text as you speak, until you tap it again to stop. On most recent iPhones this happens on your device. If your iPhone or language doesn't support on-device recognition, Apple processes the audio on its servers under Apple's privacy policy. Nokoto never records, saves or uploads your audio.
What the AI does
When you finish speaking or typing, or pick a photo or screenshot, our server sends it to Anthropic's Claude model. Claude returns:
- one or more tasks with short titles
- a date and time, if you mentioned one
- a small first step to get you started
We send only what Claude needs: the task text or image, the date and time zone, the app language, your tone, and your onboarding answers about what you put off and what gets in the way. When you ask for a next step, we also send the step you finished and any next step you wrote. Claude never receives your name, age, past tasks, audio, Screen Time choices or payment details.
How Anthropic handles your text
Anthropic acts as our service provider. Its Commercial Terms don't allow it to train its models on the content we send. Anthropic deletes API inputs and outputs from its systems no later than 30 days after receiving them, with limited exceptions for legal duties and enforcing its usage policy. See Anthropic's privacy center for details.
AI results are suggestions
AI makes mistakes. First steps, task titles and times are suggestions. Check them before you rely on them, and edit or delete anything wrong. Nokoto doesn't give medical, mental health, legal or financial advice.
Keep sensitive details out
Please don't put passwords, health details or other people's private information in your tasks or reflections. If you do, we treat it like your other task data and use it only to run Nokoto.
5. How long we keep it
| Data | How long we keep it |
|---|---|
| Voice audio | Never stored |
| Photos and screenshots you add | Deleted once the task text is read |
| Tasks, first steps, focus history, streaks, reflections, profile and settings | Until you delete them or tap Delete my data |
| Subscription status | While your account exists, plus any period tax and accounting laws require |
| Support emails | Up to 2 years after your last message |
| Usage analytics and diagnostics | Up to 24 months, then deleted or made anonymous |
| Backups | Removed no later than 30 days after deletion |
| Founding 100 feedback and interview contact | Until you tap Delete my data, or your account is deleted for inactivity. You can remove your interview contact at any time. |
| Founding 100 place | After your account is deleted, we keep a record that your place and invitation code were used, with its dates and no link to you, so places aren't given out twice |
| Inactive accounts | Deleted after 24 months with no use |
When you delete a task, it's gone from our live systems right away. When you tap Delete my data in You > Privacy and data, we delete your account and all its data from our live systems right away. Backup copies roll off no later than 30 days later.
Before you delete the app
Your Nokoto account is anonymous and tied to the app on your iPhone. Deleting the app doesn't delete your data on our servers, and we have no way to link a new install to your old account. Tap Delete my data first. If you forget, your data is removed after 24 months of no use. Any request the app makes to our servers, such as turning a task into a first step, counts as use.
6. How we keep it safe
- Every request between the app and our servers is encrypted in transit (HTTPS).
- Supabase encrypts stored data at rest.
- Row-level security means each account reads and writes only its own data.
- AI keys and server secrets stay on our server and are never stored in the app.
- iOS stores your Screen Time choices as encrypted tokens on your iPhone. They never leave it.
- Only people who need access to run Nokoto get it.
If a breach puts your personal information at risk, we tell you and the right regulators as the law requires. No system is perfectly secure, so we don't promise absolute security. Protect your iPhone with a passcode to keep your Nokoto data private.
7. Children and teens
Nokoto is for people 13 and older.
Under 13
We don't knowingly collect personal information from children under 13. If you're under 13, please don't use Nokoto. If we learn we collected data from a child under 13, we delete it. Parents who think their child under 13 used Nokoto should email support@nokoto.app.
Teens 13 to 17
When your age range is 13 to 15 or 16 to 17, Nokoto turns on extra protections:
- Quiet hours are on and locked, so you get no notifications overnight.
- Nokoto shows no ads and does no tracking. This holds for everyone.
- Purchases go through Apple, which applies Family Sharing and Ask to Buy.
Where a law requires a parent's consent, we rely on Apple's age range and parental consent tools. A parent or guardian is welcome to ask us to review or delete their teen's data by emailing support@nokoto.app.
8. Your privacy rights and choices
In the app
- Export your data: You > Privacy and data > Export. You get a file with your tasks, history and settings.
- Delete your data: You > Privacy and data > Delete my data.
- Edit or delete any task at any time.
- Change your name, tone, language and reminder time in You.
In iOS Settings
- Turn off microphone, speech recognition, notifications or Screen Time access for Nokoto. Typing still works without the microphone.
- Manage or cancel your subscription in Settings > [your name] > Subscriptions.
By email
Email support@nokoto.app to ask for access, correction, deletion or a copy of your data, or to withdraw consent. We reply in 30 days. Your account is anonymous, so we might ask you to confirm details from inside the app to prove the account is yours.
Withdrawing consent doesn't affect processing we did before. Some features stop working without it. For example, reminders need notifications.
9. Do-Not-Track and Global Privacy Control
Nokoto doesn't track you across other companies' apps or websites, so a Do-Not-Track signal has nothing to switch off. We don't sell personal information or share it for targeted ads. Where a law requires us to honor Global Privacy Control or a similar opt-out signal, we honor it.
10. United States residents' rights
Several US states, including California, Colorado, Connecticut, Virginia, Texas and Oregon, give residents rights over their personal information. We give these rights to every US user, whether or not your state requires it.
Your rights
- Know and access the personal information we hold about you.
- Correct inaccurate information.
- Delete your information.
- Get a portable copy of your information.
- Opt out of sale, sharing for targeted ads, and profiling. We don't do any of these.
- Limit sensitive information. We use it only to provide the service.
- Equal treatment. We don't charge you more or give you a worse service for using your rights.
What we collected in the last 12 months
| Category | Examples | Collected | Sold or shared for ads |
|---|---|---|---|
| Identifiers | Random user ID, first name, email if you contact support, email or phone number if you volunteer for a beta interview | Yes | No |
| Personal records | First name | Yes | No |
| Protected characteristics | Age range | Yes | No |
| Commercial information | Subscription and trial status | Yes | No |
| Internet or app activity | App events, crash logs | Yes | No |
| Audio | Voice converted to text and not stored | Briefly, for speech-to-text | No |
| Biometric information | We don't create voiceprints | No | No |
| Precise location | We use your time zone only | No | No |
| Education or employment records | None | No | No |
| Inferences and profiles | None | No | No |
| Sensitive personal information | Only what you choose to type into tasks or reflections | Only if you add it | No |
We collect these from you, your device and Apple, for the purposes in section 2, and share them only with the providers in section 3. We keep them for the periods in section 5.
How to use your rights
Use the in-app tools in section 8, or email support@nokoto.app. We confirm your request in 10 days and respond in 45 days. If we need more time, we tell you and take up to 45 more days. An authorized agent is free to make a request for you with your signed permission.
Appeals
If we turn down your request, reply with "Appeal" in the subject line. We answer your appeal in the time your state law sets, and no later than 60 days. If you disagree with our answer, contact your state attorney general.
11. Canadian residents' rights
Nokoto is based in British Columbia. We handle personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia's Personal Information Protection Act (PIPA) and, for Quebec residents, Quebec's Act respecting the protection of personal information in the private sector.
Your rights
- Access the personal information we hold about you and learn how we use and share it.
- Correct information you think is wrong or incomplete.
- Withdraw consent at any time, subject to legal or contract limits.
Quebec residents also have the right to get your information in a structured, commonly used format. We respond in 30 days. If we need more time, we tell you why.
Privacy officer
Virgilio Lampano Basilit is responsible for how Nokoto handles personal information. Reach them atsupport@nokoto.app.
Data outside Canada
We store and process your information in the United States and other countries where our providers operate. See section 3.
Complaints
Please contact us first so we fix the problem. You also have the right to complain to:
- the Office of the Privacy Commissioner of Canada
- the Office of the Information and Privacy Commissioner for British Columbia
- Quebec's Commission d'accès à l'information
12. Updates to this policy
We update this policy when Nokoto or the law changes. The date at the top shows when we last changed it. For important changes, we tell you in the app before they take effect. If you don't agree with a change, stop using Nokoto and tap Delete my data.
13. Contact us
For questions, requests or complaints about this policy, contact:
Virgilio Lampano Basilit (known as Vince Basilit), operating Nokoto
Email: support@nokoto.app
Mail: 9979 140 St, Surrey, BC V3T 5W2, Canada
Privacy officer: Virgilio Lampano Basilit