Nest

Privacy Policy

Effective July 24, 2026

Nest is a personal, single-user outliner. This policy describes what the service stores when you use it — on the web at notes.nixx.co or through the Nest iOS app — and how you can get rid of it. The short version: we store your email address and the outline you write, we use them only to run the product for you, and you can delete everything yourself at any time.

What we collect

• Account data. Your email address and a salted, hashed form of your password (Argon2). We never store the password itself.
• Your content. The nodes in your outline — text, hierarchy, tags, dates, completion state, links between nodes — plus timestamps for when they were created and edited.
• Session data. A random session token in an HTTP-only cookie so you stay signed in. If you generate personal access tokens for your own AI agents, we store only a hash of each token.

What we don't collect

• No analytics, no advertising identifiers, no tracking pixels, and no third-party trackers of any kind.
• No location data, no contacts, no device fingerprinting.
• The iOS app collects nothing beyond what the web app does; its privacy manifest declares exactly the two categories above (email address and user content), both used solely for app functionality and never for tracking.

How your data is used

Solely to operate Nest for you: authenticating you, storing and syncing your outline across your devices, and powering search over your own content. Your data is never sold, shared, rented, or used to train anything. Nest has no in-product AI. Each account's data is isolated to that account.

Where it lives

Your data is stored in the service's database and transmitted over HTTPS. Passwords are hashed with Argon2; sessions use secure, HTTP-only cookies.

Deleting your data

You can permanently delete your account and every node you've written, yourself, without asking anyone:

• iOS app: Settings → Delete Account.
• Web: deletion is available through the API today (DELETE /api/auth/account while signed in); an in-app control is planned. You can also open an issue to request deletion.

Deletion is immediate and irreversible: the account row, sessions, access tokens, and every node are removed from the live database. Individual notes you delete inside the app are soft-deleted first so you can undo, then excluded from every query.

Export

Your outline is yours. You can export it at any time from the app menu as plain text or JSON.

Changes

If this policy changes, the effective date above will change with it. Material changes will be noted in the project's release notes.

Contact

Nest is an open-source solo project. Questions about this policy: github.com/dillonco/nested/issues.