Privacy Policy
Last updated: August 2, 2026 · Effective date: August 2, 2026
NutHub is operated by Post Clarity LLC, a New Mexico limited liability company trading as Post App Clarity ("Post Clarity," "we," "us," or "our"). This Privacy Policy explains what information NutHub (the "App") and this website at nuthub.app collect, how it is handled, and the choices you have.
The single most important thing to understand about NutHub is this: your content is end-to-end encrypted on your device with a key we never receive. We cannot read, recover, decrypt, or hand over the substance of what you store — not for law enforcement, not for support, not for anyone, including you if you lose your credentials. The rest of this policy explains exactly what that means and what limited information we do handle.
If you have questions, contact us at support@nuthub.app.
1. The short version
- NutHub is a private, single-user vault. It is not a social network, a dating service, or a matchmaking tool. There is no way for you — or anyone — to look up, browse, or discover another user's entries. Each account is walled off from every other account.
- Your entries — names, notes, stories, photos, locations, ratings, dates, and any personal details you enter about yourself or others — are encrypted on your device before they are uploaded. Our servers store only unreadable ciphertext.
- We cannot see your content. Because encryption happens with a key derived from your password (and stored only on your device), we have no technical ability to access it.
- We do not sell your data, share it with advertisers or data brokers, use it to train AI models, or serve you ads.
- The limited information we can actually see is your account email, subscription status, and basic operational metadata (timestamps, record counts) needed to run the service.
- You can delete your account and all associated data from within the App at any time.
- This website collects one thing and one thing only: if you join the waitlist, your email address and the platform you picked, used solely to tell you once that the App has launched on that platform (see Section 4.4).
2. Who we are and how to reach us
Data controller / operator: Post Clarity LLC (New Mexico, USA), trading as Post App Clarity, publisher of NutHub. Contact for privacy questions, requests, and legal notices: support@nuthub.app
3. What NutHub is (and is not)
NutHub is a personal memory app: a private, encrypted place for an individual to record and recall personal relationships and experiences. Everything you enter is for your own reference only.
NutHub does not:
- let you search for, view, or match with other users;
- maintain any shared, public, or cross-account directory of people;
- facilitate introductions, hookups, or communication between users;
- publish, broadcast, or transmit your entries to anyone else.
We mention this because it shapes what data exists and how it can (and cannot) flow.
4. Information we collect
Because of NutHub's architecture, it helps to separate the information into four buckets: content we cannot read, account and operational data we can see, information handled entirely on your device that never reaches us, and the one thing this website collects, which is separate from the App entirely.
4.1 Encrypted content — stored, but unreadable to us
The substance of what you put into NutHub is encrypted on your device before it leaves it. This includes, without limitation:
- names, nicknames, and notes about people you add;
- your written or dictated stories and their details;
- photos you attach;
- locations, cities, dates, ratings, birthdays, and relationship details;
- any personal or sensitive attributes you choose to record about yourself or others (see Section 8).
We store this content only as ciphertext. On our servers it is an unreadable blob. We do not possess the key, and we cannot produce, search, analyze, or disclose the underlying content. This is a structural property of the system, not merely a policy commitment.
4.2 Account and operational data — information we can see
To run the service, we process a small amount of information that is not end-to-end encrypted:
- Account identifier. Your email address, or — if you use Sign in with Apple with "Hide My Email" — the private relay address Apple provides to us. We use this to authenticate you and to send essential service and account communications.
- Authentication metadata. Login timestamps and session information managed by our authentication provider.
- Subscription / entitlement status. Whether your account is on the free or a paid tier. Payment itself is processed by Apple; we do not receive your card number or full billing details (see Section 7).
- Operational metadata. Non-content technical data required to store and sync your encrypted records — for example, record identifiers, creation timestamps, record counts, and the storage paths of your encrypted files. This metadata does not reveal the substance of your entries.
4.3 Device permissions and information handled on your device
NutHub asks for a small number of device permissions, each one tied to a specific feature. In every case, the information the permission gives the App access to is used on your device and is not transmitted to us. Where a feature results in something being saved — a photo you attach, a story you dictate — that becomes ordinary encrypted content under Section 4.1, unreadable to us like everything else.
- Device location. If you grant location permission, NutHub may use your device's location to center a map or to sort entries by distance. This is used on-device for display only; your live location is not stored on our servers or associated with your account.
- Diagnostics. If you opt in to diagnostics, the App may show you technical status information (counts, version numbers, feature flags) on your own screen. This is not transmitted to us.
- Biometric data. If you enable Face ID or Touch ID for the App lock, the biometric match is performed by Apple's Secure Enclave on your device. We never receive your biometric data.
- Contacts. If you grant contacts permission to import people into your roster, the App reads your contacts on your device and imports only the entries you tick. Your address book is not uploaded, copied to our servers, or scanned. The people you do import become ordinary encrypted entries like anything else you type in.
- Calendar. If you ask NutHub to add a date you have planned to your calendar, it requests write-only calendar access. This is a structural limit rather than a promise: the App has no ability to read your calendar, so it cannot see your existing events, and no calendar information reaches us.
- Photos and camera. If you attach a photo — chosen from your photo library or taken with the camera — only the items you select are used. Your photo library is not browsed, indexed, or uploaded, and the App cannot see anything you do not pick. A photo you do attach is encrypted on your device before it is uploaded and stored as ciphertext, exactly like your text (see Sections 4.1 and 12).
- Microphone and speech recognition. If you dictate an entry rather than typing it, the App uses your microphone and your device's speech recognition to turn speech into text on your device. We do not receive the audio or the transcript; the resulting text becomes an encrypted entry like anything else you write.
Every one of these permissions is optional, is requested only at the moment the feature needs it, and can be revoked at any time in your device's Settings. Declining one disables that feature and nothing else.
We do not embed third-party advertising or analytics SDKs that track your behavior.
4.4 The waitlist form on this website
This website — nuthub.app — is separate from the App and shares none of its data. The one place it collects anything is the waitlist form, and it collects exactly two things:
- your email address; and
- the platform you chose, which is either iPhone or Android.
Submissions are stored by Netlify, which hosts this website and runs its form service (see Section 10).
The only thing your email address is ever used for is a single message telling you that NutHub is available to download on the platform you picked. That is the entire purpose. There is no mailing list, no newsletter, no marketing, no product updates, and no sharing with anyone. The platform field is what makes that possible: because we know whether you asked for iPhone or Android, you are written to when your platform launches rather than being added to a blanket send.
You can ask to be removed from the waitlist at any time by emailing support@nuthub.app, and we will delete your entry.
5. How our encryption works, and what it means for your rights
When you create an account, NutHub generates an encryption key on your device. That key is protected by a key derived from your password (and, on supported devices, backed up through your Apple iCloud Keychain and/or protected behind your App lock). The key is never sent to us in a form we can use.
Consequences you should understand:
- We cannot recover your content if you lose access. If you forget your password, you can regain access using the one-time recovery code shown to you when you set up your account. If you lose both your password and your recovery code, your content is unrecoverable — not difficult to recover, not recoverable through an appeal, an identity check, or a support escalation. Nobody can restore it: not Post Clarity, not Apple, not our hosting providers, because none of them holds the key. There is no backdoor, no support key, and no internal tool that decrypts an account. This is the honest cost of the architecture, and the App prints it too. Please store your recovery code somewhere safe and separate from your device.
- We cannot fulfill certain data requests in the usual way. Because we cannot read your content, we cannot produce a human-readable copy of it in response to an access or portability request, and we cannot correct it for you. Instead, you access, edit, export, and delete your own content directly within the App, where it is decrypted locally for you. This is a feature, not an evasion: it is the same property that keeps the content private from us.
6. How we use information
We use the limited information described in Section 4.2 to:
- create and authenticate your account and keep you signed in;
- store and synchronize your encrypted records across your device(s);
- provide, maintain, secure, and troubleshoot the service;
- manage subscriptions and entitlements;
- detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms;
- send essential account and service messages (e.g., security or billing notices); and
- comply with legal obligations.
We do not use your content for any of the above, because we cannot read it.
7. Payments and subscriptions
Paid subscriptions are sold and processed through Apple's In-App Purchase / StoreKit. When you subscribe, your payment is handled by Apple under Apple's terms and privacy policy. We receive from Apple only what we need to grant your entitlement (for example, a confirmation that a subscription is active). We do not collect or store your credit card number, CVV, or full billing address. Please review Apple's Privacy Policy for how Apple handles payment information.
8. Sensitive and special-category information
NutHub lets you record categories of information that some laws treat as "sensitive" or "special category," such as details about sexual orientation, sex life, racial or ethnic origin, and precise dates — potentially about yourself and about other people.
Two points:
- We never have access to this information. It is encrypted on your device like all other content. We do not read it, infer from it, categorize you by it, or use it for any purpose.
- You control it. You decide what to record and can edit or delete it at any time within the App. By entering such information, you are choosing to store it in your own private, encrypted vault.
9. Information about other people
NutHub is a personal record, so you may enter information about other individuals ("third parties"). Please understand:
- That information is encrypted on your device the same as everything else; we cannot read it, and it is never shared with, disclosed to, or made visible to any other user or third party.
- As between you and us, you are responsible for the information you record about others, including having any rights or lawful basis required in your jurisdiction to record it. See our Terms of Service.
- Because the information is end-to-end encrypted and exists only inside your private account, we have no ability to identify, locate, access, or act on a specific third party's data, and we cannot respond to a third party's request to access, correct, or delete information a user may or may not have stored about them. Such requests should be directed to the individual user who controls that account. We will cooperate with valid legal process to the limited extent technically possible (which, for content, is effectively nil, because we hold only ciphertext).
10. How we share information
We do not sell your personal information and we do not "share" it for cross-context behavioral advertising (as those terms are defined under California law). We do not disclose your information to advertisers, data brokers, or AI developers.
We use a small number of service providers (sub-processors) strictly to operate NutHub and this website:
| Provider | Role | What they handle |
|---|---|---|
| Apple Inc. | App distribution, Sign in with Apple, In-App Purchase, on-device services | Authentication token (if you use Sign in with Apple), payment processing, app delivery |
| Supabase | Cloud hosting, database, authentication, and encrypted-file storage | Your account email, operational metadata, and your encrypted (unreadable) content |
| Netlify | Hosting for this website and its waitlist form | The email address and platform you submit through the waitlist form, and the ordinary request data (such as your IP address) that reaching any web server discloses. Netlify holds no App content and no account data |
Supabase stores your content, but only as ciphertext it cannot decrypt. Netlify serves this website and never touches App content or account data — the site and the App share a name and nothing else. All of these providers are bound by their own terms and are not permitted to use your information for their own purposes.
Three, and only three. There is no analytics vendor, no advertising network, no data broker, no crash-reporting service that receives your content, and no email marketing tool holding your address for anything beyond the single waitlist message described in Section 4.4. This website loads no third-party fonts, scripts, or trackers — the typeface it uses is served from nuthub.app itself, so visiting this site discloses your visit to nobody but the host named above.
We may also disclose information if required to do so by law, valid legal process, or to protect the rights, safety, and security of our users, the public, or Post Clarity. For content, any such disclosure is limited by the fact that we hold only unreadable ciphertext.
We do not currently transfer your account to a third party, but if Post Clarity is involved in a merger, acquisition, financing, or sale of assets, account and operational data may be transferred as part of that transaction, subject to this Policy.
11. Data retention and deletion
- We retain your account email, operational metadata, and encrypted content for as long as your account exists.
- You can delete your account at any time from within the App (Settings → Security → Delete Account). Deletion removes your account, your encrypted records, and your stored encrypted files, and cascades to associated data. Once deleted, your content cannot be recovered by anyone, including us.
- Residual copies may persist in routine backups for a limited period before being overwritten; any such copies of content remain encrypted and unreadable.
- Waitlist entries (Section 4.4) are kept only until the single launch message for your platform has been sent, or until you ask to be removed — whichever comes first — and are then deleted.
- We may retain limited records where required for legal, tax, accounting, security, or fraud-prevention purposes.
12. Security
We design NutHub to protect your data by default:
- End-to-end encryption of your content, with keys held on your device.
- Encrypted photo storage — image files are encrypted on your device and stored as ciphertext.
- Row-level access controls so each account can only ever reach its own records.
- An optional App lock (PIN, Face ID / Touch ID) with an optional duress PIN and app-switcher privacy cover for additional on-device protection.
- Automatic wiping of decrypted material from the device cache when the App is locked.
No system is perfectly secure, and we cannot guarantee absolute security, but the architecture is built so that a breach of our servers would expose only unreadable ciphertext and limited operational metadata — not your content.
13. Children's privacy
NutHub is intended only for adults aged 18 and older. The App is not directed to children, and we do not knowingly collect personal information from anyone under 18 (or under 16 where a higher age threshold applies). If we learn that we have collected account information from someone under the applicable age, we will delete it. If you believe a minor has provided us information, contact support@nuthub.app.
14. Your privacy rights
Depending on where you live, you may have rights over your personal information. Because of NutHub's encryption model, the practical way to exercise most of these rights is directly within the App, where your content is available to you in decrypted form. We can act on requests concerning the account and operational data we actually hold.
14.1 United States (including California residents)
Subject to applicable law (such as the California Consumer Privacy Act, as amended by the CPRA), you may have the right to:
- Know / access the categories and specific pieces of personal information we hold about you. For account and operational data, we can provide this; for your encrypted content, you access it yourself in the App because we cannot read it.
- Delete your personal information — available in-App at any time.
- Correct inaccurate personal information — you correct your own content in-App; contact us for account data.
- Opt out of sale or sharing — not applicable, because we do not sell or share your personal information.
- Limit use of sensitive personal information — not applicable in the usual sense, because we cannot access your sensitive content and do not use it.
- Non-discrimination for exercising your rights.
We do not use your information for cross-context behavioral advertising, and we honor recognized opt-out preference signals (such as Global Privacy Control) to the limited extent they are relevant to the account data we process.
14.2 European Economic Area, United Kingdom, and Switzerland
If you are in the EEA, UK, or Switzerland, you may have rights under the GDPR / UK GDPR, including the rights to access, rectification, erasure, restriction, data portability, to object to processing, and to withdraw consent. You also have the right to lodge a complaint with your local supervisory authority.
- Legal bases. We process your account and operational data to perform our contract with you (to provide the App), to pursue our legitimate interests (securing and improving the service, preventing abuse), and to comply with legal obligations. Where we rely on consent (e.g., optional device permissions), you may withdraw it at any time.
- Practical note. For your encrypted content, access, rectification, erasure, and portability are exercised by you within the App, because we cannot decrypt it. For account and operational data, contact support@nuthub.app.
- International transfers. We are based in the United States and our infrastructure may store data in the United States. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
14.3 Making a request
Email support@nuthub.app. We will verify your request as required by law (typically by confirming control of the account email) and respond within the timeframes the applicable law requires. You may use an authorized agent where the law permits.
15. Do Not Track
Some browsers offer a "Do Not Track" signal. Because NutHub is a native mobile app that does not track you across third-party services, and because this website carries no advertising or behavioral tracking, there is no cross-site tracking for such a signal to disable.
16. Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice through the App or by email. Your continued use of NutHub after an update means you accept the revised Policy.
17. Contact
Post Clarity LLC, trading as Post App Clarity — publisher of NutHub Email: support@nuthub.app · Support
If you have concerns we have not resolved, EEA/UK users may also contact their local data protection authority.
