Security and privacy
Your network is yours.
What you know about the people in your life stays encrypted on your device. Our server only holds what you share with others or what chats and calls technically need.
- Network only on your device
- Chats and calls end-to-end
- No ads, no tracking
Wow, how many people fit in there?
600 standing, easily. Perfect for your summer party!
Yesterday
Let’s have a call next week.
Today
Sure! Does Thursday at 6 pm work?
I’ll bring the floor plans too.
At a glance
The essentials.
Your network stays on your device
Contacts, notes and how close someone is to you never go to our server. The app encrypts everything on the device.
Chats and calls end-to-end
Only you can read your chats and hear your calls. We have no key for them.
Nodi works only on your device
Nodi, the assistant in the app, sends nothing to a server, not even to us, and does not read chats.
Only you see your strength
Strength shows you what you build with people you meet. It’s optional, off by default and calculated only on your device.
No ads, no tracking
No advertising identifiers, no analytics tools, no selling of data. We only count how many accounts there are and how many are active.
Servers in the EU
Database and files are with Supabase in Ireland. The call servers are with Hetzner in Helsinki and in Ashburn (USA).
Only on your device
What stays with you.
The app stores this data only on your device. It does not go to our server, and we cannot see it.
- Your network
- The people in your network and their details, such as role, company, city, how you know each other and what someone can help with. Plus contact channels, who knows whom, your notes and when you last contacted whom.
- Keep in touch
- How often you want to be in touch with someone. Only your app calculates and shows this.
- Your goals
- They stay on your device unless you explicitly share a goal with your network.
- Imported contacts
- From your device’s contacts (only the people you choose).
- Quick Capture and speech
- Your device reads screenshots and shared content itself. What you say is turned into text on the device.
- Chat history and call list
- Messages, received pictures, videos, voice messages and files, your private folder, drafts and the notes about calls.
- How it is protected
- The app encrypts this data on the device. The keys are kept in the iOS keychain, for this device only, and are not synced. The files can only be read while your device is unlocked and are not in backups.
- A new device
- Because this data is not in the backup, a new device starts empty. Export your network beforehand as a CSV file: Settings › Data & Storage › Export Network. Your account, card and connections are back after you sign in; chats start empty.
In full in the Privacy Policy, section 2.
On our server
What is on the server, and why.
Only what you share with others or what chats and calls technically need. Every access is checked: whoever is signed in only sees what they are allowed to see.
- Account
- Your email address or your sign-in with Apple or Google. Your password only in unreadable form (a so-called hash), never in plain text. Plus the age level of your account (16 or 18), but no date of birth.
- Card and profiles
- Exactly the details you release, with your pictures and videos. You decide per profile what others see.
- Links and QR code
- A random code per link that does not reveal your user ID. You can replace a link for several, your bio link and your QR code at any time.
- Requests, connections, meetings
- Who is connected with whom, open requests, blocks and, if you meet again as connections and swap cards, that and when it happened.
- Chats
- Only encrypted messages and files on their way to the recipient: messages until delivery, files until the message expires, each for at most 30 days. Scheduled messages wait until their time. The server sees metadata such as who writes to whom and when, but no content.
- Shared goals
- Only if you switch on “Share with your network” for a goal. Then the server can read the text, and your connections see it under “Insights”.
- Communities
- Posts, pictures and memberships. They are not end-to-end encrypted, so that moderation works (see below).
- Reports and support
- What you report or write to us through “Support & Feedback”, so that we can review and answer it.
All details and retention periods: section 3 and section 9 (How long we keep data) of the Privacy Policy.
End-to-end encryption
Only you can read your chats.
Your device creates its keys itself. The private keys stay in this device’s keychain; our server only knows the public ones.
Every message is encrypted and signed on your device for the recipients’ devices. Only those devices can open it. This applies to one-to-one chats and groups. We have no key and can neither read nor hand over content.
Use the security code to check that it really is just the two of you in a chat. Compare it with each other. In a call, the app shows the same code.
In the app: Chat › name at the top › Privacy › Encryption
What encryption protects, and what it doesn’t.
End-to-end encryption protects the content in transit and on our server. It has limits, and we tell you what they are.
End-to-end encrypted
- Texts, pictures, videos, voice messages and files in chats and groups
- Polls, appointments, tasks and time capsules
- Sound, video and a shared screen in calls and rooms
- The content of notifications: Apple only delivers “New message” and encrypted data
What is still visible
- Metadata: who writes to whom and when, the approximate size, for time capsules the opening time and an extra key the server only hands out then
- Group titles and everything in communities
- Messages someone explicitly attaches to a report
- What recipients do: save, forward, take a photo of the screen. Anyone in a call can record it with another device
More in section 4 and section 3.7 of the Privacy Policy.
Calls and rooms
Calls through our own servers.
Every call, including calls between two people, and every room in a group runs through a call server we operate ourselves, with Hetzner in Helsinki or Ashburn (USA); the app picks the location that answers fastest. Your device only connects to this server, never directly to the other person’s device. That is why the other person never sees your IP address.
Sound, video and a shared screen are encrypted on your device before they leave it. The call server only passes on packets it cannot open. We record nothing and keep no call history on the server.
- Only your connections. Only people you are connected with can call you, and in rooms the members of your group. You don’t need a phone number.
- You decide. Under Settings › Calls › “Calls From” you choose “All Connections” or “No One”. Blocked people never reach you.
Communities
Communities are not end-to-end encrypted.
Communities are closed groups for many people, such as a club or a class. Unlike chats, they are not end-to-end encrypted: our server can read their posts so that moderators and we can enforce the rules and review reports. Everything is sent and stored encrypted, with Supabase in the EU (Ireland).
Communities cannot be searched for. Only people with a code, a link or an invitation get in. Only members see posts and pictures.
- Protection for new members. In their first 24 hours, new members post at most 10 times an hour and without links, pictures only after 7 days.
- 16+ or 18+. If you are 16 or 17, you start out invisible under “People” in communities, and strangers cannot send you a request there.
On the device
Nodi and strength run only on your device.
Nodi
Nodi is an AI that runs only on your device. From iPhone 15 Pro (8 GB of memory) it answers freely; on older iPhones Nodi answers the most important questions with fixed answers. The conversation and what Nodi remembers from it are stored encrypted on the device. Nodi does not read chats and sends nothing to a server, not even to us.
Nodi in the Privacy PolicyStrength and phases
Strength is optional and off by default. If you turn it on, the app calculates your phase (your level) and your circles only on your device: from meetings, from the days you reply to each other in one-to-one chats (never from content) and from the phase cards your connections show you. We don’t see your strength. Only if an invitation moves you up a phase once does our server note it. Phase and cards can end up in your device’s backup, reply days and circles can’t.
Strength in the Privacy PolicyService providers
Who processes your data on our behalf.
Our servers and databases are in the EU, except for one call server in the USA. For some tasks we work with companies, including outside the EU. These are they.
- Supabase
- Hosts our server: database, files, sign-in and server functions, in a data centre in the EU (Ireland). Supabase is based in Singapore; access from outside the EU is possible for maintenance and support, covered by EU standard contractual clauses.
- Hetzner
- Rents us the call servers in Helsinki (Finland) and Ashburn (USA). Only encrypted call data passes through them.
- Cloudflare (USA)
- Delivers this website and receives emails to support@nodbase.app for us.
- Resend (USA)
- Sends confirmation and password codes and our replies by email, sent from the EU (Ireland).
- Apple
- “Sign in with Apple”, delivery of notifications and call pushes, and the App Store.
- Only if you use “Sign in with Google”.
In full, with legal bases: section 6 and section 7 of the Privacy Policy.
No tracking
No ads. No tracking.
No ads
The app shows no ads and contains no advertising identifiers. We build no advertising profiles.
Only total numbers
The app counts nothing about how you use it. On the server we only count how many accounts there are and how many are active, without names.
No selling
We sell no data and do not track you across other companies’ apps and websites.
This website
No cookies, nothing is stored on your device, nothing is loaded from other providers.
More in section 12 and section 14 of the Privacy Policy.
Your control
What you can set yourself.
All right in the app, without asking us.
Lock the app
Protect the app with face recognition or a passcode: Settings › Privacy & Security.
Export your network
Settings › Data & Storage › Export Network. The CSV file is created on your device, and you decide where it goes.
Block
In a chat, tap the name at the top › “… block”. Undo it under Settings › Privacy & Security › Blocked.
Report
In a chat, tap the name at the top › “… report”. Report profiles, requests, introductions and groups right where you see them.
Withdraw a link
For a link for several or your bio link: Share › Share Link › “Withdraw Link”. The old link then opens nothing, and you get a new one.
Delete your account
You › Settings › Account › Delete Account. Any time, without writing to us.
All stepsReports and moderation
What happens after a report.
- We review it ourselves
- We are notified of new reports and review them as soon as we can. Depending on how serious it is, we remove content or suspend accounts.
- Anonymous for you
- The person reported does not learn who reported them.
- You decide what goes with it
- If you report from a chat, you can attach up to five of the latest messages. Only those can we then read. Pictures, videos, voice messages and files are never included.
- Calls
- Calls are not recorded. A report about a call contains your description and, if you like, messages from the chat.
- Notice by email
- We tell you about a decision that affects your account or your content at your account’s email address.
- Immediate danger
- Call the police or emergency services right away. Emergency calls are not possible through Nodbase.
More in the Community Guidelines and in section 3.9 of the Privacy Policy.
For people aged 16 and over.
Minimum age 16
Where a law requires it (such as in Texas), 18 applies. If we learn that an account belongs to someone younger, we delete it. We don’t store a date of birth.
Minimum ageYour rights
Access, correction, erasure and more. Write to us from your account’s email address at support@nodbase.app.
Your rightsRead it all.
The binding documents. What you read above is a summary.
Frequently asked questions
Can Nodbase read my chats?
No. Chats are end-to-end encrypted, and we have no key. Only if someone reports and attaches messages do we see exactly those. The server does see metadata such as who writes to whom and when.
Where are my contacts?
Only on your device, encrypted. Contacts, notes and relationships never go to our server. They are not in your backup either.
Who can see my strength?
Only you. The app calculates it on your device. Others only see the card you show on your profile, and a phase card shows that you have reached its phase.
What does someone with my link or QR code see?
If they have Nodbase, they see the profile you released for it, including pictures. Without the app, a page on nodbase.app opens that leads to the download. It shows nothing about you.
I found a security issue. Where do I report it?
Write to us at support@nodbase.app with a short description of how to reproduce it. Please don’t post it publicly before we have had a chance to reply.
Goes well with
More in the Help CenterGuides and answers for every feature.
Help Center
Private, no ads, no tracking.
Your network stays on your device. Nodbase is free.