Privacy Policy

The short version

Nosa has no accounts in this version. Your progress, the people you add to My people and your notes about real conversations stay on your device, except what you choose to send to the AI features described below (Prep a real conversation sends the details of the person you are preparing for). We do not sell your data. We do not show ads. The only third parties we send anything to are listed below; each is bounded to a specific function.

What we store on your device

We use the device's secure storage (AsyncStorage on iOS/Android) to keep:

• Lesson completions, quiz scores, and saved bookmarks • Streak history and review-queue cards • Self-reported settings (rest day, expert mode, specialty track, notifications) • My people: the first names you add, what they believe, what has come up, and their prayer reminders • Your notes about real conversations • Simulator and Ask history for the current session only

Deleting the app removes all of this. We do not back it up to a third party.

Accounts and sync

This version of Nosa has no sign-in and no cloud sync, so nothing listed above is backed up or synced off your device. What you send to the AI features is covered in the next section. Sync may come in a later version, and we will update this policy before it does.

AI conversations (Simulator + Ask)

Ask and the Simulator's practice partners are AI. When you use them, your messages are sent to our API server, which forwards them to Anthropic's Claude model to generate responses. We do not retain conversation content on our servers. Anthropic's data usage policy applies to these requests. See anthropic.com/privacy.

Prep a real conversation (Pro) sends one person's first name, what they believe and what has come up, so the practice partner can hold their beliefs. It is sent only for that practice, with each message, and we do not keep it.

Before anything you type in Ask, the Simulator or My people is sent, the app checks it on your device for words about harm or danger and, if it finds them, shows crisis line numbers. That check never leaves your device.

In-app purchases

Subscription management is handled by Apple's App Store via RevenueCat. We never see or store payment information. RevenueCat's privacy policy applies. See revenuecat.com/privacy.

Analytics (PostHog)

When configured, we use PostHog to count product events: which lessons were started, completed, or abandoned; which glossary terms were opened; which search queries returned results; whether a real-world conversation report was filed; whether a person was added to My people (never their name or notes). Events are tied to a randomly generated device id. The id is created the first time you open Nosa and cleared when you delete the app, and it is not linked to your name or email. We do not send your name, email, message content, or any of your free-text input to the analytics service.

If you have a question about your analytics data or would like it deleted, email [email protected] and we will help where we can.

Crash reporting (Sentry)

When configured, we use Sentry to capture unhandled errors and stack traces so we can fix bugs. Sentry is configured to suppress personally identifiable information (sendDefaultPii: false). Reports include the device id and the file and line where the error occurred. They do not include your message content.

Push notifications

If you allow notifications, the app schedules them on your device; none are sent from our servers. By default that is two notes a week and one note if you have been away for 30 days. A daily practice reminder and prayer reminders for people on My people are sent only if you turn them on. Nothing is sent on your rest day. Change them in Profile → Notifications, or turn them off in your device settings.

Data retention

Local data: stays until you delete the app. Analytics events: 24 months by default. Crash reports: 30 days.

Children

Nosa is not directed at children under 13 and is not designed to collect data from them. If you believe a child under 13 has used Nosa, deleting the app from their device removes everything it stored there and clears its analytics id. You can also contact [email protected] and we will help where we can.

Contact

Questions, deletions, or data requests: [email protected]