Privacy Policy

NTHSTR is operated by Simple, LLC, an Arizona limited liability company. This policy explains what data NTHSTR collects, why, who else processes it, how long we keep it, and what you can do about it. It covers the NTHSTR web application, its installable (PWA) version, and its iOS and Mac apps.

1. The short version

• Your workspace content is yours. We do not sell it and we do not train models on it.
• We run no third-party analytics or advertising trackers — there is no Google Analytics, no advertising pixel, and no cross-site tracking in NTHSTR.
• AI and voice features are optional and only send data when you trigger them.
• You can export your data and delete your account from inside the app.

2. Data you give us

• Account identity. Your email address. You can sign in with an emailed link, or with any third-party sign-in provider offered on the sign-in page — in which case we receive the basic profile information that provider returns to identify you. We never receive your password for those providers.
• Workspace content. Everything you create: tasks and projects, the notes and content attached to them, comments, links between items, goals, habits and habit check-ins, focus sessions, journal entries, saved playbooks, automation rules, and imported or ingested sources.
• Voice captures. If you record a voice note, the audio is uploaded so it can be transcribed. The audio is written to temporary server storage for processing; the resulting transcript, any summary, and the duration are saved to your workspace.
• Captured messages. If you use an email capture address or an SMS capture number, we receive the messages you send to it — sender number or address, and the message body — and turn them into items in your workspace.
• Billing details. NTHSTR is free during the beta, so there is nothing here to collect today. If paid plans are introduced and you subscribe, Stripe collects your payment information directly. We store your billing email and subscription status. We never receive or store full card numbers.
• Sign-up and waitlist details. If you join a beta or waitlist, we store the name and email you submit so we can contact you about access.

3. Data we collect automatically

• In-app activity. A record of actions taken in your workspace — items created or completed, playbooks applied, AI actions run, focus sessions finished — so that your activity log, dashboards, reminders, and usage limits work.
• Operational logs. Standard technical data handled by our hosting provider, including IP address, request metadata, and error traces, used to keep the service running, secure, and debuggable.
• Push notification tokens. On the mobile and desktop apps, if you enable notifications, the device token needed to deliver them.

4. Cookies

NTHSTR uses cookies only to keep you signed in and to keep your session secure. We do not use advertising cookies, and we do not use cookies to track you across other websites. Clearing them signs you out.

5. How we use your data

• To provide and operate NTHSTR and the features you use.
• To run AI and voice features only when you explicitly invoke them.
• To deliver reminders, scheduled reports, and workspace invitations you or your workspace set up.
• To process subscriptions and enforce plan limits.
• To keep the service secure, prevent abuse, debug problems, and meet legal obligations.

We do not sell your personal data or share it for cross-context behavioral advertising, and we do not use your workspace content to train our own models.

6. AI and voice features

NTHSTR includes optional AI features — turning natural language into structured items, breaking work down, drafting daily plans, summarizing, research lookups, and transcribing voice. These run only when you trigger them. When you do, the specific content you submitted for that action is sent to the AI provider that handles it, listed in the table below.

AI and voice features are optional and run only when you trigger them. When you do, only the content you submit for that action is sent to the external AI subprocessors that handle it — OpenAI, Anthropic, or Perplexity — to generate a result for your review.

Our AI flow is review-before-apply: proposals are shown to you and are not written into your workspace until you accept them. AI output can be wrong — check it before relying on it.

7. Who else processes your data

We use the following providers to operate NTHSTR. Each receives only the data it needs for its function. Providers marked optional receive data only if you use that feature or connect that account.

We may also disclose data if we are legally required to, or to protect the rights, safety, or property of our users or Simple, LLC. If Simple, LLC is ever involved in a merger, acquisition, or sale of assets, your data could transfer as part of that transaction; we will say so before it becomes subject to a materially different policy.

8. Integrations you connect

Integrations are off until you turn them on, and you can disconnect them at any time in the app. Their access tokens are encrypted before storage. When connected:

• Google Calendar — we request permission to read and write your calendar events, so NTHSTR can show your schedule and place planned work on your calendar.
• GitHub — we request repository access and the ability to read your basic profile, so NTHSTR can connect your work to repositories.
• Vercel — used for deployment-related connections where you enable it.

Disconnecting an integration stops future access. It does not retroactively delete items already created in your workspace from that source.

9. How long we keep data

We keep your workspace data for as long as your account is active, because NTHSTR is a long-term record of your work and is designed to keep your history available to you.

• When you delete an item, it is removed from your workspace along with the content attached to it.
• When you delete your workspace or account, we delete the associated records — items and their content, comments, goals, habits and logs, focus sessions, voice captures, journal entries, activity events, notifications, artifacts, automation rules, saved playbooks, integrations, and access tokens.
• Backups and logs. Residual copies can persist briefly in encrypted database backups and in operational logs until they age out on their normal rotation.
• We may retain the limited records we need to meet legal, tax, or accounting obligations, such as billing history.

10. Your rights and choices

Depending on where you live, you may have rights to access, correct, export, delete, or restrict the processing of your personal data, and to object to certain processing — for example under the EU/UK GDPR or under California law. You have the right not to be discriminated against for exercising them.

Inside NTHSTR you can, without contacting us:

• Export your workspace data.
• Correct your content by editing it directly.
• Delete individual items, or your whole account.

To make any other request — including access, portability, or a question about how we handled your data — email privacy@simplellc.com. We may need to verify your identity before acting. We respond within the time applicable law requires, and we aim to reply within 30 days.

11. Security

We protect your data with encryption in transit, encryption of stored integration credentials (AES-256-GCM), isolation between workspaces enforced at the database layer, role-based access within a workspace, rate limiting, and constant-time comparison of secrets. The iOS and Mac apps can be locked behind your device biometrics, which are verified by your device and never sent to us.

No system is perfectly secure. If a breach affects your personal data, we will notify you and any regulator as applicable law requires.

12. International transfers

Simple, LLC is based in the United States, and our providers process data in the United States and other countries. If you are outside the United States, your data will be transferred there. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for those transfers.

13. Children

NTHSTR is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has given us data, contact privacy@simplellc.com and we will delete it.

14. Changes to this policy

We may update this policy. We will revise the “Last updated” date above and, for material changes, give additional notice in the app or by email.

15. Contact

For privacy questions or to exercise a right, contact privacy@simplellc.com. For legal notices, contact legal@simplellc.com. For anything else, info@simplellc.com.

Simple, LLC, an Arizona limited liability company — 7042 E Portland St, Scottsdale, AZ 85257.