Nibhaus Privacy Policy

Published by NovusKey Labs LLC (the data controller). Version 1.0, effective as of the App's first public release.

Nibhaus is built local-first: your handwriting is yours, and it stays on your device unless you send it somewhere. This policy is short because the answer to most privacy questions about Nibhaus is the same: we never receive your data at all.

What Nibhaus stores, and where

Your ink. Pages, strokes, notebooks, transcripts, bookmarks, and voice notes are stored in a local database on your device. They are never uploaded to us. We operate no servers that receive your content, and the app contains no analytics, telemetry, advertising, or tracking SDKs of any kind.
Pen details. The app remembers which pens you've paired (name and Bluetooth identity) and, only if you turn on "Remember password," your pen's unlock password. That password is encrypted with hardware-backed keys on your device and automatically forgotten after 30 days.
Settings. Your preferences (theme, handwriting size, sync configuration) are stored locally.

What leaves your device, only at your explicit request

Sync and export. If you configure a sync destination (a folder on your device, or a server you control), Nibhaus writes your pages there. You own the destination, the credentials, and the data. We are not a party to that connection and cannot see it.
Sharing. When you share or email a page, Nibhaus hands the file to the app you choose. Nothing is shared without your tap.
Handwriting-to-text. On-device conversion runs entirely on your device. If you configure your own conversion server (an advanced option), page images are sent to that server you chose. They never come to us.
Feedback and crash reports. "Send feedback" composes an email in your own mail app, addressed to feedback@novuskeylabs.com. Before you decide to send it, you see the entire contents: a description you write, basic device and app information, and a crash log if you chose to include one. Nothing is sent automatically.

Permissions Nibhaus asks for, and why

Bluetooth and nearby devices: to find and stay connected to your smartpen. It is not used for location and does not scan for anything but pens.
Notifications: pen connection status and low-battery alerts.
Microphone (optional): only if you record voice notes. Recordings stay on your device and are excluded from device backups.

Backups

Your device's system backup (Google or OEM) is set to exclude Nibhaus's note database, secrets, and recordings. A new device starts clean instead of silently copying your vault through a cloud you may not have considered. Moving your data is always an explicit export or sync action.

What we collect about you

Nothing. No accounts, no identifiers, no usage statistics, and no crash telemetry. If you email us feedback, we receive that email. That is the complete list.

Your rights and who is responsible

The data controller is NovusKey Labs LLC (Alaska, USA), reachable at support@novuskeylabs.com. Because your notes stay on your device and we receive none of your content, you exercise the data-subject rights under the GDPR, CCPA/CPRA, and similar laws (access, correction, deletion, and portability) directly. Your data lives in the App and the destinations you chose, fully under your control. Export it, edit it, or delete it (including by uninstalling the App) at any time. We hold no personal data about you to retrieve or delete on your behalf, and we do not sell or share personal information, because we have none to sell. If you email us feedback, you may ask us to delete that email at any time.

This website

Everything above covers the Nibhaus app. The novuskeylabs.com website is separate, and simpler: it collects nothing. There is no analytics, no tracking script, and no cookies that identify you. The Contact page opens a pre-filled email in your own mail client; we see nothing you write until you choose to send it. The site is served through Cloudflare, which sees the standard request logs any hosting provider sees (things like IP address and page requested) to keep the site running and secure. We do not have access to those logs beyond what Cloudflare's own dashboard shows us.

Children

Nibhaus is a general-audience productivity tool and is not directed at children under 13.

Changes

If this policy changes, the updated version ships with the app update that changes the behavior, with the change noted in the release notes. We will never change the core promise retroactively: data collected under "we collect nothing" stays uncollected.

Contact

support@novuskeylabs.com