Privacy policy
NOVA is a private personal assistant run on a server owned by its administrator, for their household and people they invite. It is not offered to the public. This policy explains what NOVA collects, why, where it is kept, who processes it, and how you can see or remove it. Contact: addramyr08@gmail.com.
Who is responsible
NOVA's administrator runs the server and decides how NOVA works. They are the only person who can create NOVA accounts. For anything in this policy, contact them at addramyr08@gmail.com.
What NOVA collects
Things you give it
- Your NOVA login (username, display name, a hashed password and, if you turn it on, two-factor sign-in).
- What you ask NOVA and its answers, in the web page, Telegram or on a phone call. Voice is turned into text to answer it.
- Notes, to-do lists, contacts, reminders and other things you keep in NOVA.
Data from Google (only if you connect a Google account)
You choose, per Google account, what NOVA may use, and whether it may only read. NOVA asks Google only for that access, and for read-only access if you choose read-only. You can connect more than one account (for example personal and work) with different choices for each.
| If you share | NOVA can | Used for |
|---|---|---|
| Email (Gmail) | Search and read your email. If the account isn't read-only, create drafts for you to review. NOVA can never send email. | Answering your questions about your email, your daily briefing if you turn it on, and spotting parcel deliveries if you turn that on. |
| Calendar | Read your calendars and events. If the account isn't read-only, add events you ask for. | Answering questions about your schedule, the daily briefing, and reminder calls before meetings if you turn them on. |
| Docs and Sheets | Find and read your documents and spreadsheets (Drive access is read-only, to find files). If the account isn't read-only, create a document or add rows you ask for. | Answering questions about, and working with, the files you point it to. |
| Contacts | Read your contacts (always read-only). | Copying them into your NOVA address book if you turn contact sync on, so NOVA knows who people are. |
NOVA also learns the email address of each Google account you connect, so it can show which one is which.
Things NOVA keeps to work well
- Recent conversation, so a follow-up question makes sense.
- Long-term memory: short facts NOVA learns from conversations (for example a preference). You can see and delete these. Anything read from a Google account you mark “keep out of NOVA's memory” is never added.
- A short activity log of requests (the request and the names of the tools used, never the answers or what a tool read), used to suggest shortcuts. Requests that touched a private account, money or locked folders keep no wording.
- Basic server logs needed to keep NOVA running securely.
How Google user data is used
NOVA's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular:
- Google data is used only to provide the features you have chosen, for you.
- It is never sold, never used for advertising, and never shared with data brokers.
- It is never used to train or improve AI models, NOVA's or anyone else's.
- No person reads it, except where you ask the administrator for help with something specific and agree to it, where needed for security (for example investigating abuse), or where the law requires it.
- It is transferred to others only as described under “Who processes your information”, only to do what you asked.
Where your information is kept
- On NOVA's private server and the household's own network storage, in the United Kingdom.
- Google sign-in tokens are stored only on that server, in files only NOVA can read. They never reach your browser.
- NOVA doesn't keep a copy of your mailbox, calendar or files. It reads what it needs when you ask. The exceptions are what you turn on: contacts you sync, and small details of parcels it spots (sender, subject and tracking details).
- The server is reachable only from the household's network, apart from the pieces needed for phone calls.
Who processes your information
To answer you, NOVA uses these services. Each receives only what is needed for that request.
- Anthropic (Claude), the AI that reads your request, and the information NOVA looks up for it, to write the answer. The administrator keeps the Claude account's setting that lets Anthropic use conversations to improve its models switched off.
- Telegram, if you use NOVA there: your messages and NOVA's replies.
- Twilio, if you use phone calls: the call audio, and the text of what's said.
- ElevenLabs, if NOVA speaks: the text of her replies, to turn into a voice.
- Google, for the Google features you connect.
- Exa (web search), if NOVA searches the web: the search query.
A reply can contain information from your connected accounts when you asked about them (for example “what's on my calendar today?” on Telegram).
How long it's kept
- Google access lasts until you disconnect the account, revoke NOVA in your Google account settings, or your NOVA login is deleted. Then the tokens are revoked at Google and deleted.
- Recent conversation is short-lived. Memories stay until you delete them. The activity log keeps roughly the last 3,000 requests.
- Everything else stays until you delete it or ask for your account to be deleted.
Your choices and rights
- Change or remove what each Google account shares at any time in NOVA (Tools & apps → Google accounts), or revoke NOVA at myaccount.google.com/permissions.
- Ask for a copy of your information, for it to be corrected, or for your account and information to be deleted: email addramyr08@gmail.com.
- If you are in the UK, you also have rights under UK data protection law, including complaining to the Information Commissioner's Office (ico.org.uk).
Security
Logins are protected by hashed passwords, with optional two-factor sign-in. Connections are encrypted. Sensitive areas can be locked with their own passwords. Access to the server is limited to the administrator. No system is perfectly secure, but NOVA is built to read as little as possible and keep as little as possible.
Children
NOVA is not intended for children under 13 unless a parent or guardian in the household sets it up and supervises its use.
Changes
If this policy changes, the date at the top changes too. Significant changes are told to NOVA's users directly.