Skip to content
FeaturesHow it worksPricingQuestions
BackUpdated: September 7, 2026

Privacy Policy

Thank you for using nobardak (the "Service"). nobardak is an iOS app that works on top of Apple Reminders: it classifies new reminders, moves them to the right list, and enriches them with useful notes and links. This Privacy Policy explains what data nobardak processes, what it deliberately does not collect, and your rights. The short version: nobardak has no accounts. Your original reminders are never stored on our server. To deliver the result, the server holds the processed result — the new title and notes — until your device confirms delivery; it is deleted on confirmation, and at most 7 days after processing. The optional, anonymous feedback sharing described below is off by default.

Data Controller and Contact

The Service is operated by Vitalii Rizo. For the purposes of data protection laws (such as the EU GDPR), Vitalii Rizo is the "Data Controller" of personal data processed through nobardak. You can contact the Data Controller at:

  • Name: Vitalii Rizo
  • Address: Adlergestell 371, 12527 Berlin, Germany
  • Email: [email protected]

What nobardak Does Not Collect

  • No account. There is no sign-up, no email address, no password, and no user profile.
  • No stored original reminders. The text of your reminders is processed to generate the enrichment and is not stored. What the server does store, so it can deliver the result to your device, is the processed result — the new title and notes derived from your reminder. It is deleted the moment your device confirms delivery, and at most 7 days after processing. Neither the original reminder nor the result is used for training or shared for marketing. The one exception: if you opt in to feedback sharing (below), disliked examples are stored anonymously.
  • No contacts, no location history, no calendars. nobardak only reads the Reminders data you grant access to. Your device's location is used only on your device (for the optional city field in Settings and "remind me when nearby" alerts resolved with Apple Maps); your precise location is never sent to our servers.

What Data Is Processed

  • Reminder data, while the job runs: When a new reminder is picked up, the app sends it to our backend so the AI can classify and enrich it: the reminder's title and notes, your list names, its due date, any URL on the reminder, the name of a location-based alert if one is set, and its priority and repeat settings — together with your settings (country, language, city if you set one, detail level). Enrichment runs as a background job, and the internal job message carries this data only while the job runs. The original reminder is not stored; only the processed result is kept, for as long as described under "Data Retention" below. Reminder text can, depending on what you write, contain personal information — it is treated exactly the same way.
  • Processed results, until delivered: The result the AI produces — the new title and notes derived from your reminder — is stored against your anonymous device identifier so your iPhone can collect it when it next reaches the server. It is deleted the moment your device confirms delivery, and at most 7 days after processing. If notifications are on, a notification announcing a single processed reminder carries its new title to your device through Apple's push service.
  • Anonymous usage counters: To enforce the monthly quota, the backend stores a counter keyed by your anonymous device identifier (see "Device Identity" below). This counter contains numbers only — never content.
  • Technical logs: Server logs contain only counts, timings, and error codes — never reminder text or list names.
  • IP addresses: Your IP address is used only to limit request rates and is not stored. Our analytics provider is configured to discard IP addresses.
  • Derived search queries: For "buy", "visit", "watch", and "other" reminders, a short search query derived from the reminder (for example a product name, a place name, a movie title, or a question) is sent to our web search provider, Brave, to find prices, opening hours, streaming availability, or an answer. The query is sent from our server, not from your device, and carries no identifier of you — but your country, language, and city (if you set one) are sent along as search context so results are local to you.
  • Shopping searches: For "buy" reminders, the product name derived from the reminder is also sent to our shopping search provider, SearchApi, together with your country and language, to find stores and prices. To check that a store found this way is real, the store's name or domain is sent the same way. These requests go from our server, not from your device, and carry no identifier of you. SearchApi keeps request logs under its own retention schedule.
  • Stored search responses: The raw response Brave returns for those searches — the pages and snippets it found, which reflect the search topic but never your reminder text — is stored in our database for quality analysis. Each stored response carries no device identifier, no reminder identifier, and no search query, only the date (not the time) it was stored; we keep at most the 1000 most recent responses, deleting older ones as new ones come in. These responses are not linked to you or to any reminder, but they are not scrubbed of all identifying detail — a response can still name the exact place, product, or movie a search was about.
  • On-device data: The timeline, journal, list mappings, and the snapshot nobardak uses to detect new reminders are stored only on your iPhone. Deleting the app deletes them.

Device Identity

nobardak identifies your device with an anonymous device ID: a random identifier stored in the iOS Keychain and synced through iCloud Keychain, so it survives reinstalling the app and is shared across your own devices. It is never tied to your name, email, or Apple ID. To keep quotas fair, our server verifies devices with Apple's App Attest and stores the device's public key bound to that ID. Apple's DeviceCheck additionally stores two bits per physical device that only answer "has this device used its free credits" — Apple's own mechanism, holding no other data. Analytics uses the same anonymous ID.

Feedback Sharing (Opt-In)

Feedback sharing is off by default — nothing is stored unless you say yes. The first time you dislike an enrichment, the app asks once whether you want to share disliked examples anonymously to help improve nobardak. If you allow it, each disliked enrichment — the original reminder text, what nobardak did with it, its category, summary, and link, plus the app version, your country and language, and the date — is stored in our database with no device identifier and no IP address. You can turn this off at any time in Settings. We keep at most the 1000 most recent examples, deleting the oldest as new ones arrive.

Subscriptions

When you subscribe to nobardak Pro, the app sends Apple's signed purchase receipt to our server. The server verifies it with Apple and stores the subscription's identifiers and status, plus which device identities have used it — kept only to enforce the 6-device limit. No payment details ever reach us; billing is handled entirely by Apple.

Analytics

nobardak uses PostHog (EU Cloud, hosted in the European Union) to understand which features are used and to catch errors. Analytics events contain feature names, categories, timings, and error codes — never reminder text, list names, or any content you wrote. Analytics data is keyed by the anonymous device ID described above, not by any account, and PostHog is configured to discard IP addresses.

Third-Party Processors

We have data processing agreements in place with the providers that process data for us. Where processing happens outside the EU, recognized safeguards apply — Standard Contractual Clauses or the EU-US Data Privacy Framework.

  • Cloudflare (Cloudflare, Inc.): nobardak's backend runs on Cloudflare Workers, and AI classification/enrichment runs on Cloudflare Workers AI. Your reminder text is processed on Cloudflare's infrastructure, and the processed result is stored there until your device confirms delivery, at most 7 days. Cloudflare acts as a Data Processor; a standard Data Processing Addendum with Standard Contractual Clauses applies to any processing outside the EEA.
  • Apple (Apple Inc.): The app is distributed through the Apple App Store, and nobardak Pro subscriptions are billed by Apple. We never see your payment details; we receive only Apple's signed purchase receipt to verify the subscription (see "Subscriptions" above). Apple also provides the App Attest and DeviceCheck services described under "Device Identity". When a notification announces a single processed reminder, its new title is carried to your device through Apple's push notification service (APNs). Apple processes your purchase under its own privacy policy.
  • PostHog (PostHog, Inc., EU Cloud): Product analytics without content, as described above, processed exclusively in the EU, with IP addresses discarded.
  • Amazon: "Buy" reminders may get an Amazon search link. The link may carry an affiliate tag; opening it is your action, in your browser, under Amazon's own privacy policy. We send nothing to Amazon.
  • Brave Search (Brave Software, Inc.): Derived queries (see "Derived search queries" above) are sent to Brave's search API together with your country, language, and city (if set) as search context. No identifier of you is included. We retain a bounded, unlinked sample of Brave's raw responses for quality analysis, as described above.
  • SearchApi (SearchApi LLC, New York, USA): Product queries for "buy" reminders and store names or domains for store verification (see "Shopping searches" above) are sent to SearchApi's search API together with your country and language. No identifier of you is included. SearchApi acts as a Data Processor under its Data Processing Agreement, which incorporates Standard Contractual Clauses for processing outside the EEA.

Legal Bases for Processing (GDPR)

  • Performance of a contract (Art. 6(1)(b) GDPR): processing your reminder text is necessary to deliver the enrichment you asked for by using the app. The original reminder is not stored; the processed result is kept until your device confirms delivery and is deleted then, and in any case at most 7 days after processing.
  • Legitimate interests (Art. 6(1)(f) GDPR): anonymous quota counters, device verification, rate limiting, error logs, and content-free analytics keep the Service working, fair, and secure without identifying you.
  • Consent (Art. 6(1)(a) GDPR): disliked feedback examples are stored only if you agree when asked, and you can withdraw that consent at any time in Settings.

Data Retention

  • Original reminder content: not stored — except opt-in feedback examples, below.
  • Processed results (the new title and notes): kept until your device confirms delivery, at most 7 days after processing, then deleted.
  • Feedback examples (opt-in): capped at the 1000 most recent, oldest deleted as new ones arrive.
  • Stored search responses: kept unlinked from you or your reminder, capped at the 1000 most recent, oldest deleted as new ones arrive.
  • Shopping search results: cached for 24 hours, keyed by country and product query; store verification results for up to 30 days, keyed by country and store. Neither carries a device identifier or a reminder identifier.
  • Anonymous quota counters: kept per monthly credit period and expire automatically.
  • Device identity and subscription records: kept only as long as needed to verify devices and enforce plan limits.
  • Technical logs: short-lived and content-free.
  • On-device data (timeline, journal, settings): stays on your device until you delete it or the app.

Your Rights

Under GDPR you have rights of access, rectification, erasure, restriction, objection, and portability. nobardak keeps no account, and shared feedback examples carry no identifier that could link them back to you, so there is usually nothing server-side we can tie to a person — but if you have any request or question, contact [email protected] and we will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority (for example, the Berlin Commissioner for Data Protection).

Children's Privacy

nobardak is not directed at children under 16. We do not knowingly process personal data of anyone under 16; since we keep no accounts and no content linked to any person, exposure is minimal by design. The processed results described above are held only until your device collects them.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates are posted on this page with a new "last updated" date. Significant changes will be announced in the app.

Contact Us

Questions about this policy or your data: [email protected].