Privacy Policy
In short. Nome is a personal assistant made by Sloa. To answer you, it sends your messages, and what you have allowed it to use, to our server in Frankfurt and from there to AI services, some of them in the USA. It asks for your consent first. It keeps your conversations and the things you keep in Nome in your account until you delete them. If you link Nome to WhatsApp, where the app offers it, your chat with Nome there passes through WhatsApp, is not end-to-end encrypted, and while it is linked our server keeps what your iPhone last reported about itself. Nome's subscription is bought and paid through Apple; we learn that your account has one, never your payment details. There are no ads, no tracking and no selling of data, and you can delete your account and everything in it from the app.
1. Who is responsible
The controller for the Nome app and the service behind it is:
Trout UG (haftungsbeschränkt)
Forellenweg 8a, 94428 Eichendorf, Germany
Email: support@flits.so
Write to the same address about anything in this policy and to use your rights (section 10).
2. What this policy covers
This policy covers the Nome app for iPhone ("Nome" on the App Store) and the service behind it, including your chat with Nome in WhatsApp if you link it (section 4). Nome uses the same Sloa Account as Sloa Learning on the web; what Sloa Learning does with your data is described in its own policy. This website has its own policy.
3. Your Sloa Account
To use Nome you need a Sloa Account: your email address and a password (stored only as a secure hash). You can create one in the app. We use them to sign you in, to tell you about your account (for example the confirmation and password-reset emails) and to keep your data apart from everybody else's. The sign-in session is kept in the iPhone's Keychain, on this device only.
Sign in with Apple or Google. Instead of a password you can sign in with your Apple Account or, where the app offers it, with your Google account. Apple or Google then confirms to us who you are, and we receive your email address, your name if you choose to share it, and the identifier they use for you with us. With Apple you can hide your email address; we then receive a private relay address from Apple that forwards our emails to you. Signing in with Google opens Google's own sign-in page, and we never see your Apple or Google password. Apple and Google learn that you sign in to Nome and when, and handle that under their own privacy policies. When you delete your Sloa Account, we ask Apple to revoke the sign-in; for Google you can remove Nome's access in your Google Account at any time.
Legal basis: performance of the contract with you (Art. 6(1)(b) GDPR).
4. What Nome processes, and why
Nome processes only what it needs to do what you ask. Several kinds of data are sent only for the connections you turn on (in the app: side menu › Customize › Connections) and only after iOS has asked for your permission.
| Data | When | What happens to it |
|---|---|---|
| Your messages and attachments (text, pictures, PDFs, text files such as CSV), and the record of what Nome did for you | When you send a message | Sent to our server and to the AI services in section 5 to write the answer. Stored as the conversation in your account until you delete it or your account. |
| Your voice when you dictate or ask Nome from the Action Button or Control Center | When you record | The recording is sent to our server and transcribed by OpenAI's Whisper through OpenRouter. We do not store the recording; the words become your message. |
| What you keep in Nome: to-dos, notes and their pictures, habits and check-ins, collections Nome set up for you, rules, watches, the morning brief and "For you" | When you or Nome (with your OK) create them | Stored in your account until you delete them or your account. Shown to the AI when they help answer you. |
| Memory: short facts Nome notes from your conversations so it can remember them, such as a preference or a plan | After a reply, if memory is on | Written by an AI service, stored in your account with a numeric "embedding" (calculated by OpenAI's embedding model through OpenRouter) so related memories can be found. Memories fade when unused. Ask Nome what it knows about you or to forget something; switch memory off in Settings → AI & data. Memory may include facts you tell Nome about your health. |
| Device details: preferred languages and region, device model (such as "iPhone"), iOS and app version, Low Power Mode, measurement units, 12/24-hour clock, time zone | With each message | Sent with the message so answers fit your device and your time; the time zone is stored to schedule your morning brief. Nothing else of this is stored, unless you link WhatsApp (see "Talking to Nome in WhatsApp" below). |
| Location (only with the Location connection on and iOS permission "While Using"): your position, the place's name, and up to eight named places within about 400 metres | While Nome is open, and with each message | Your position goes to our server, which names the place and what is nearby by looking the coordinates up with OpenStreetMap's Nominatim and komoot's Photon; it does the same when you ask about a place. With a message, the AI services receive the position rounded to about 100 metres, the place's name and the nearby places, so Nome can answer "near me" questions. Not stored separately, but it may appear in a conversation. While WhatsApp is linked, our server keeps the last one (see "Talking to Nome in WhatsApp" below). |
| Contacts, Calendar, Reminders, Apple Music, Shortcuts, Things (only with the connection on and iOS permission) | When Nome needs them for your request | Read or changed on your device. The results Nome needs (for example a contact's email address, or tomorrow's events) are sent to our server and the AI services and are kept in the conversation. While WhatsApp is linked, our server also keeps the last state of two of them, Calendar and Reminders (see "Talking to Nome in WhatsApp" below). |
| Apple Health (only with the Apple Health connection on; read-only): steps, active energy, exercise minutes, walking and running distance, weight, resting and average heart rate, heart rate variability, respiratory rate, sleep, mindful minutes and workouts; Motion & Fitness activity | About two months back when you turn it on, then while the app is open | Copied to your account to show your Health page and to answer questions about your health, which means it is given to the AI services when relevant. Turning Apple Health off in Nome deletes the copy. This is health data; we process it only with your explicit consent. |
| WHOOP (only if you connect it): recovery, cycles, sleep, workouts, profile and body measurements | While connected | Read from WHOOP and used like Apple Health data. The access token is stored encrypted. Disconnecting ends the access. |
| Gmail, Google Calendar, Microsoft Outlook (only if you connect them) | While connected | Nome reads mail and events when you ask, creates drafts and events when you ask, and sends email or invitations only after your OK each time. For new mail it keeps the sender, recipients, subject and a short preview for 45 days (at most 400 per mailbox) to tell you what matters; an AI service sorts them. Disconnecting deletes these previews and revokes Nome's access. |
| Your chat with Nome in WhatsApp (only if you link it, where the app offers it): the key of your WhatsApp agent, the messages and voice notes you send Nome there, Nome's answers, and what your iPhone last reported about itself | While WhatsApp is linked | Described under "Talking to Nome in WhatsApp" below this table. |
| Notifications: your device's push token, and what a notification says (for example a mail's sender and a one-line summary, a reminder, your morning brief) | If you allow notifications | The token is stored in your account and removed when you sign out or delete your account; notifications are delivered by Apple's Push Notification service. |
| Your subscription: the App Store's record of the purchase (which plan, its price, when it was bought, when it renews or ends, whether it was cancelled or refunded, the transaction's identifiers and the store's country) and your Sloa Account id. No card, bank or billing details: Apple takes the payment and does not pass them on | When you subscribe or restore a purchase, and whenever Apple reports a renewal, a cancellation, a refund or the end of the subscription | The app hands Apple's signed record to our server, which passes it with your account id to RevenueCat (section 6). RevenueCat checks it with Apple and tells our server whether your account has access. We store that status (plan, end date, whether it renews) in your account, to give you access and to answer your questions about it; the record of the purchase itself stays with RevenueCat and Apple. |
| Your consent: when you agreed to the AI processing, and to which version of the text | When you agree or withdraw | Stored in your account as proof of consent. |
| A response you report: the answer, the model that wrote it, the conversation it belongs to and your note | When you report it | Reviewed by us to improve Nome's safety. Kept until you delete your account or ask us to delete the report. |
| Usage and technical data: when you last used Nome, a daily count of replies (each account has 200 a day), whether a reply was waited for, and the server's technical logs (time, request, errors) | When you use Nome | Used to run the service, enforce the daily limit, keep it secure and fix errors. Technical logs are kept by our hosting providers for a limited time, between a few days and 30 days depending on the provider. |
Talking to Nome in WhatsApp
Where the app offers it, you can talk to Nome in WhatsApp. This is optional. You create an agent in your own WhatsApp, copy its API key and paste it into Nome (Customize › Connections › WhatsApp). From then on Nome answers what you write to that agent, and only you: an agent talks only with the WhatsApp account that created it.
Who receives what. Your messages go from WhatsApp to our server, and Nome's answers go from our server to WhatsApp, which shows them in your chat. An answer can contain anything Nome would tell you in the app, for example something from your to-dos, your notes or your calendar. With your messages, WhatsApp tells our server the identifier it uses for you in that chat and, if you have set one, your WhatsApp profile name. Our server does not use the name and does not keep it. To write the answer, our server sends your message to the AI services in section 5, as it does for a message from the app. A voice note is turned into text the same way as dictation, and we do not store the recording.
Not a private chat between two phones. A chat with an agent in WhatsApp is not end-to-end encrypted, and WhatsApp says so itself. A service of Meta, the company WhatsApp belongs to, passes your messages to our server, and our server reads them in order to answer them. So this chat is not private between your phone and one other phone: WhatsApp's systems carry it, our server reads it, and the AI services receive what the answer needs. Your other WhatsApp chats are not part of this. Nome cannot see them, and your agent cannot be added to them.
What our server keeps while WhatsApp is linked.
- The agent's key, stored encrypted. It is what lets our server fetch your messages and send the answers. Nome never shows it again.
- The identifier WhatsApp uses for you in that chat, so that Nome answers only you, with when you linked and when you last wrote. With it, what our server needs to fetch your messages in order and no more often than WhatsApp allows: where it stands in WhatsApp's list for your agent, when it last asked WhatsApp and last sent something, and when it last asked you for your OK or told you why it could not answer. If somebody other than you writes to your agent, that message is neither stored nor answered; our server only notes when that last happened and how often.
- Your messages and Nome's answers, as a conversation in your account like every other. You see it in the app and can delete it there.
- For each message: the id WhatsApp gave it, whether it was a text, a voice note or something else, how answering it went, WhatsApp's ids of the messages Nome answered with, and when it arrived and was answered. This is kept for 35 days after the message was answered, so that no message is answered twice. A message's words, and the answer while it is being sent, are in this list only until the message has been answered.
- What your iPhone last reported about itself. In WhatsApp, Nome cannot ask your iPhone. So while WhatsApp is linked, the app reports to our server when you open it, while it is open and when you leave it: the same details about your iPhone that it sends with a message (the device details and, with Location on, the place you were last at, both described in the table above), and the last state of three things, each only while its connection is switched on and allowed in iOS: your open reminders, your calendar from the day before to thirty days ahead, and the reminders Nome has scheduled on your iPhone. Nothing from your contacts, your music or Apple Health is kept this way. Each report replaces the one before. Our server keeps the last one, stored encrypted, with its time and with your position rounded to about 100 metres, and Nome uses it to answer you in WhatsApp. When you switch a connection off, or take away its permission in iOS, its part is removed with the next report. If Nome has not been opened on your iPhone for 30 days, what it last reported is deleted.
- Changes you asked for in WhatsApp that only your iPhone can make, for example a new reminder. They wait on our server, stored encrypted, until Nome is next open on your iPhone. One that your iPhone has not collected within seven days is dropped. Either way Nome tells you in the chat how it went, and the entry is deleted once it has, after 30 days at the latest.
Disconnecting, and what it deletes. You disconnect in Nome under Customize › Connections › WhatsApp › Disconnect. That deletes from our server, at once, the key, the identifier, the list of messages, whatever was still waiting to be answered or to be done on your iPhone, and what your iPhone last reported. Nome stops reading and answering in WhatsApp. It does not delete three things: the conversation in your account, which you delete in the app like any other; what Nome did for you there, such as a to-do it added; and anything in WhatsApp. Your agent and your chat with it stay in WhatsApp until you remove them there, and what WhatsApp itself keeps is for WhatsApp to decide. Resetting the key or removing the agent in WhatsApp also stops Nome there, but to delete what our server keeps for it, disconnect in Nome as well. Linking a new key in place of the old one starts the link over: it also deletes what your iPhone last reported and whatever was still waiting to be answered or to be done on your iPhone. Deleting your account deletes all of it.
5. The AI services Nome uses
Nome's answers are written by AI models run by other companies. When you send a message, Nome sends what is needed to answer it to these services, and only to answer you:
- OpenRouter (OpenRouter, Inc., USA) passes each request to a model provider: Anthropic, OpenAI or Google (all USA). It also transcribes your voice (OpenAI Whisper) and calculates memory embeddings (OpenAI).
- TypeSafe AI helps Nome decide what to do with a message, which of your things it concerns, and which new mails matter. It receives your message, the one before it, the titles of your items, the name of the place you are at, and the names of what Nome remembers.
- Exa (Exa Labs, Inc., USA) runs web searches when Nome searches the web for you; Sloa's server may also open web pages that a search or you point to.
We use these services only to answer you and to do what you ask. With each request to a model that writes an answer, searches the web or calculates an embedding, Nome tells OpenRouter to use only providers that do not keep what they are sent to train their models. Two kinds of request cannot carry that instruction: turning your voice into text, and a message that OpenRouter's own router assigns to a model. For those, and for TypeSafe AI, what a service may keep and for how long follows from our account settings with it and from its own terms. So we do not promise that no service keeps a request for some time. Nome shows you these services, and asks for your consent, before your first message.
6. Who else receives data
Besides the AI services, these companies process data for us as processors, on our instructions:
| Service | What for | Where |
|---|---|---|
| Supabase, Inc. | Sloa's database and file storage (your conversations, things you keep, files); the Sloa Account service | Frankfurt, Germany (EU), for both; Supabase is a US company |
| Vercel Inc. | Runs Sloa's server (api.sloa.ai) | Frankfurt, Germany (EU); Vercel is a US company |
| OpenRouter, Inc.; Anthropic PBC; OpenAI, L.L.C.; Google LLC | Writing answers, transcription, memory embeddings (section 5) | USA |
| TypeSafe AI | Decisions about messages and mail (section 5) | Not confirmed to be within the EU; we treat it as processing outside the EU (section 7) |
| Exa Labs, Inc. | Web search (section 5) | USA |
| Composio, Inc. | Holds the connection to Gmail, Google Calendar or Outlook and carries out Nome's calls to them, only if you connect one | USA |
| RevenueCat, Inc. | Keeps track of subscriptions: checks App Store purchases with Apple and tells Sloa's server whether your account has access. It receives the App Store's record of the purchase and your Sloa Account id, from our server only; the app contains no RevenueCat software | USA |
| Apple Inc. | Delivers notifications (Apple Push Notification service) | USA |
Three companies also act on their own account, not on our instructions. Apple sells and bills Nome's subscription through the App Store and offers Sign in with Apple; from Apple we receive the record of your purchase and what section 3 describes. Google offers the Google sign-in; from Google we receive what section 3 describes. WhatsApp (WhatsApp Ireland Limited if you live in the European Region, otherwise WhatsApp LLC, USA; both are Meta companies) provides WhatsApp and the agents Nome answers through, only if you link Nome there. It carries your messages to our server and Nome's answers back to you. It is not our processor: it does not act on our instructions, and it handles what passes through it under its own terms and privacy policy. From WhatsApp we receive what "Talking to Nome in WhatsApp" in section 4 describes. Their own privacy policies apply to what they do with your data.
When you connect your own Google, Microsoft or WHOOP account, Nome exchanges data with that provider on your behalf, under its own terms and privacy policy. To name where you are (with Location on) and when you ask about a place, our server sends coordinates to OpenStreetMap's Nominatim (OpenStreetMap Foundation, UK) and komoot's Photon (komoot GmbH, Germany). We do not sell your data or share it with anyone for their own purposes, and we never use it for advertising.
7. Transfers outside the EU
Some of the services above are in the USA or are US companies. Where data leaves the EU or the EEA, we rely on the EU–U.S. Data Privacy Framework where the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). You can ask us for a copy of the safeguards. What Nome sends to your WhatsApp chat is delivered to WhatsApp because you asked for it there (Art. 49(1)(b) GDPR, as far as it leaves the EU); WhatsApp's privacy policy describes where WhatsApp processes data.
8. Legal bases
- Contract (Art. 6(1)(b) GDPR): your account and signing you in, your subscription and checking that it is active, storing what you keep in Nome, carrying out what you ask, notifications you asked for, and your chat with Nome in WhatsApp while you have it linked: fetching your messages there, delivering the answers, and keeping what your iPhone last reported so that Nome can answer without it.
- Consent (Art. 6(1)(a) GDPR): sending your messages and the data in section 4 to the AI services in section 5, and memory. You give it on the consent screen before your first message and can withdraw it at any time in Settings → AI & data; Nome cannot answer without it. It covers the messages you send Nome in WhatsApp too: they go to the same services. Withdrawing does not affect what happened before.
- Explicit consent (Art. 9(2)(a) GDPR): Apple Health, WHOOP and Motion data, and health facts you tell Nome. Turn the connection off to withdraw it.
- Legitimate interests (Art. 6(1)(f) GDPR): security, preventing abuse, the daily limit, technical logs, and reviewing reported responses. You can object (section 10).
- Legal obligations (Art. 6(1)(c) GDPR) where the law requires us to keep or hand over data, for example records of sales for tax and accounting.
9. How long data is kept, and deleting it
- Your account and what you keep in Nome: until you delete it or your account.
- Conversations: until you delete them (in Recents) or your account.
- Mail previews: 45 days, and at once when you disconnect the mailbox.
- The Apple Health copy: until you turn Apple Health off in Nome or delete your account.
- Memories: they fade when unused and are deleted with your account.
- Voice recordings: not stored.
- Your chat with Nome in WhatsApp: the key, the identifier, the list of messages and what your iPhone last reported are kept while WhatsApp is linked and deleted when you disconnect in Nome or delete your account. Within that time, what is kept about a message is kept for 35 days after it was answered; what your iPhone last reported until its next report, and for 30 days at the longest if Nome is not opened on it; and a change waiting for your iPhone until Nome has told you how it went: it is dropped after seven days if your iPhone has not collected it, and deleted after 30 days at the latest. The conversation itself is kept like every conversation.
- Your subscription's status in our database: until you delete your account. Our database keeps no record of the purchase itself.
- The record of the purchase at RevenueCat, with your account id: it is not deleted automatically with your account. Write to us and we delete it, unless the law requires us to keep it. Apple keeps its own records of your purchases under its privacy policy.
- Reported responses: until you delete your account or ask us to delete the report. Technical logs: between a few days and 30 days, depending on the hosting provider.
Deleting your account: in the app, Settings (the gear in the side menu) → Account → Delete account. This permanently deletes your Sloa Account, including your Sloa Learning progress, and everything Nome keeps for you: conversations, things you keep, files, memories, Health data, mail previews, notification tokens and what Nome keeps for WhatsApp. Nome's access to Google, Microsoft and WHOOP is revoked, and we ask Apple to revoke Sign in with Apple. Our database backups are overwritten within 7 days. You can also ask us by email to delete your account. Deleting your account does not cancel a subscription bought through the App Store: cancel it in your Apple Account settings first.
10. Your rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or restricted (Art. 18), to receive it in a portable format (Art. 20), to object to processing based on legitimate interests (Art. 21), and to withdraw any consent at any time (Art. 7(3)). Write to support@flits.so. That includes what Nome received through WhatsApp; for what WhatsApp itself does with your chats, turn to WhatsApp. You may also complain to a data protection supervisory authority, in particular where you live or where we are based.
11. No ads, no tracking
Nome contains no advertising, no analytics or tracking tools and no third-party SDKs. Purchases use Apple's own StoreKit, and RevenueCat is reached only from our server. We do not track you across apps or websites and do not sell or rent your data.
12. Age
Nome is for people 18 or older. We do not knowingly process data of anyone younger. If you believe a child is using Nome, tell us and we will delete the account.
13. Security
Data travels encrypted (HTTPS). Your session is kept in the device's Keychain. Your data is stored in your own account, separate from everybody else's; access tokens for connected services and the key of your WhatsApp agent are stored encrypted; Sloa's database is not reachable from the internet except through Sloa's server. A chat with Nome in WhatsApp is not end-to-end encrypted (section 4).
14. Changes
We will update this policy when Nome changes. If a change affects what you consented to, Nome asks you again in the app.
Contact
Trout UG (haftungsbeschränkt) · Forellenweg 8a, 94428 Eichendorf, Germany
support@flits.so · Support · Imprint