EasyTech
HomeAppsGet in Touch

Privacy Policy - Nom: Cute Notes & Brain Dump

Last updated: October 17, 2026

1. Introduction

EasyTech Agency (EASYTECH SASU, 2 rue de la Libération, 74000 Annecy, France; "we," "our," or "us") operates the Nom: Cute Notes & Brain Dump mobile application, available on iOS and on Android (the "Service" or "App"). Nom is a companion that keeps what is in your head: you dump thoughts, notes, to-dos, links and photos, Nom files them, reflects back, suggests tiny quests, and shows your day, your energy and your calendar. This page explains what data we collect, why, and how we handle it.

2. Data We Collect

Nom has no sign-up wall: there is no email address, password or name to enter. On first launch the App creates an anonymous identifier with Firebase Authentication, and everything below is tied to that identifier.

  • Content you add: notes, to-dos, journal entries, energy and mood check-ins, focus-timer minutes, links, photos and voice recordings. It is typed, dictated or added by you in the App, and stored on our servers so it can be filed, found again and answered about.
  • Device settings sent with requests: your time zone and language, so dates and wording match your device.
  • Install source (Android only): when the App first opens, it reads the Google Play install referrer, a short campaign string that tells us which link or ad led to the install. It contains no personal data.
  • Usage data: which features are used (for example counts and kinds of actions, never the text of your notes), collected with PostHog analytics. Events are tied to the same anonymous identifier. We use them to improve the App.
  • Subscription status: whether you hold an active subscription, handled by Apple or Google Play and by RevenueCat.
  • Calendar (optional): if you allow access, the App reads today's events on your device to show them next to your to-dos, and adds events you approve. Your calendar is read on the device and is never sent to our servers, except an event the App itself noticed in a note you wrote, which travels as the text of that note.

The App may also ask for access to your microphone and to speech recognition (to record a voice note or to type what you say), your photos (only the pictures you pick), and notifications (reminders you ask for). You can change each permission at any time in the Settings of your iPhone or Android phone.

3. How We Use Your Data

  • To provide and operate the Service: store, file, tag and find your content, and answer your questions.
  • To transcribe your voice notes when you use the microphone.
  • To measure and improve the App through aggregated usage analytics.
  • To unlock your subscription.

We do not sell your data, and we do not use your content to train AI models.

4. AI Services and Your Permission

To work, Nom sends what you add to the following AI services, from our servers (not from your phone):

  • Google (Google Cloud Vertex AI, Gemini): receives the text of your notes, entries, check-ins and questions, and the photos and link content you add. It is used to file, tag and connect your content and to answer your questions. Google does not use this data to train its models, under its API data usage terms.
  • ElevenLabs: receives the audio of your voice recordings, and returns text (speech-to-text).

This data is sent only to provide the feature you are using. Before anything is sent, Nom tells you what is sent and to whom during onboarding, and asks for your permission. If you do not agree, nothing is sent. On iPhone, you can take your permission back at any time in the app: open Days, tap the gear (Settings), then AI and your data, then Turn off. From then on Nom sends nothing new to these services: what you add waits on your phone, or Nom asks again before sending, until you turn it back on. On Android, there is no separate switch: you can stop by not using the features that need these services, or by deleting your data and account (see section 7), after which Nom starts again as new and asks for your permission again before sending anything. What was already sent and stored stays until you delete it (see section 7). We only work with providers that protect your data in the same way as this policy.

5. Other Third-Party Services

  • Google Firebase Authentication: creates the anonymous identifier used to recognise your data.
  • PostHog (EU): product analytics.
  • Apple, Google Play and RevenueCat: process subscriptions. Payment is handled by Apple on iOS and by Google Play on Android; RevenueCat receives your purchase status and the identifier needed to unlock your subscription. We never see your payment details.
  • TikTok and Meta (advertising measurement): we may use the ad attribution tools of TikTok and Meta to measure which ads led to an install of the App. When they are in use, they receive a few events (finishing the first setup, starting a free trial, subscribing, with the price, currency and product) and technical information about your device. They never receive the content of your notes. On iOS, the tracking question that iOS asks controls whether your device advertising identifier is available to them; if you refuse, it is not. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking. On Android, the measurement uses your Android advertising ID, which you can reset or delete at any time in Android Settings → Privacy → Ads. We never sell your data.
  • Speech recognition on your phone: when you dictate, iOS (Apple) or Android (Google) may process your speech under their own privacy terms.

6. Data Hosting and Transfers

Your content is hosted on Google Cloud Platform in Belgium (europe-west1 region): our server, our database and the storage of your photos and recordings are all in that region, and Google Vertex AI (Gemini) processes your content in the same region. Some of the other services described in sections 4 and 5 (for example ElevenLabs, RevenueCat, TikTok and Meta) may process data outside the European Economic Area, including in the United States. Where that happens, the transfer relies on the safeguards provided by the GDPR, such as an adequacy decision (for example the EU-U.S. Data Privacy Framework) or standard contractual clauses.

7. Retention and Deletion

We keep your data for as long as you use Nom. You can delete it yourself, in the app, at any time: on iPhone, open Days, tap the gear (Settings), choose Delete my data and account, and confirm twice; on Android, open Days, then Your data and account, then Delete my data and account, and confirm. This permanently deletes the notes, to-dos, check-ins, quests, garden, photos and voice recordings stored on our servers, together with your anonymous account, and clears the app on your phone. It happens right away and cannot be undone; the app then starts again as new. Deleting your data does not cancel your subscription: manage or cancel it in your Apple Account (Settings, your name, Subscriptions) on iOS, or in Google Play on Android. Purchase records kept by Apple, Google Play and RevenueCat to show your subscription are not erased by this; write to us to ask for it. Usage statistics already collected by PostHog are tied only to the anonymous identifier, which no longer belongs to any account after the deletion; write to us if you want them erased as well. If you cannot use the app, you can ask us to delete your data by writing to contact@easytech-agency.net from the device concerned, mentioning the App; we delete your content and identifier within 30 days, except where the law requires us to keep something. Deleting the App from your device removes the local data stored on it, but not the content already stored on our servers: use Delete my data and account first. On Android, the App opts out of Google backups, so its local data is not copied to your Google account either.

8. Your Rights

Under the GDPR you have the right to access, rectify, delete and export your personal data, and to object to or restrict some processing. To exercise these rights, contact contact@easytech-agency.net. We respond within 30 days. You may also lodge a complaint with your data protection authority (in France, the CNIL). In the app, you can delete your data yourself (on iPhone in Settings, on Android in Days, then Your data and account), and on iPhone you can also withdraw your permission for AI processing in Settings.

9. Your Content

You keep full ownership of the content you add. You grant us a limited, non-exclusive licence to store, process and display it solely to provide the Service to you. We claim no intellectual property rights over it.

10. Children

Nom is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has used the App, contact us and we will delete the data.

11. Changes to This Policy

We may update this policy from time to time. The date at the top shows the latest version. Continued use of the App after a change means you accept the updated policy.

12. Contact

For any question about this policy or your personal data:
contact@easytech-agency.net

Back to Nom

© 2025 EasyTech. All rights reserved.

contact@easytech-agency.net