Privacy Policy
Last updated: November 12, 2026
Nino Bot is an iPhone and iPad app for chatting with AI bots. This page explains what the app stores, what it sends off your device, who receives it and what you can do about it.
The short version
- There is no account. Your bots, chats and pictures are stored on your device.
- To answer you, the app sends the conversation to an AI provider: xAI, or OpenAI or Google when you choose one of their models. The app asks for your permission before it sends anything.
- Connected apps such as Gmail or Outlook are optional. Your sign-in for them is kept in the device keychain.
- Nino Bot has no ads, no analytics and no tracking, and does not sell your data.
Who is responsible
Nino Bot is made by Nino AI, an independent developer ("Nino", "we"). You can reach us at support@ninoai.io.
What stays on your device
- Your bots (name, role, persona, memory), your chats, photos you attach, pictures bots make, routines, settings and usage counts.
- The vault (contact details you choose to save for bots to use), any API key you add, your sign-ins for connected apps, and any saved logins (keys or passwords for services you let a bot call). These are stored in the iOS keychain.
Deleting the app removes all of it. Nino cannot see or recover it.
What is sent to AI providers
A bot can only reply if the conversation is sent to the company that runs its AI model. When you send a message, the app sends:
- the messages in that chat (yours and the bots'), including photos you attached;
- the bot's name, role, persona and memory;
- your first name and vault details, if you entered them and sharing is turned on;
- your language and time zone, so bots answer in the right language and know the date.
| Provider | When | Their privacy policy |
|---|---|---|
| xAI | Bots on a Grok model, including their web and X search and connected apps; pictures and reading aloud only when OpenAI cannot be reached | x.ai/legal/privacy-policy |
| OpenAI | Bots on a ChatGPT model, including their web search and connected apps; making pictures, and reading replies aloud in the natural voice, whichever bot you asked | openai.com/policies/privacy-policy |
| Bots on a Gemini model | policies.google.com/privacy |
Requests normally travel through Nino's server (hosted by Supabase in the United States), which adds the service's API key and passes the request on. Nino's server does not store ordinary chat requests or replies. If you add your own xAI API key in Settings, requests for Grok bots go straight from your device to xAI.
Each provider handles the data under its own terms and privacy policy, and may keep it for a limited time, for example to detect abuse. Nino does not use your content to train AI models.
The first time you use the app it asks you to agree to this sharing. If you do not agree, the app cannot get replies from bots.
What Nino's server keeps
- Scheduled tasks. If you schedule a task, its prompt, its schedule and a copy of the bot (name, persona, model, and memory when memory sharing is on) are stored on Nino's server so the task can run while your device is off. They are deleted when you delete the task or reset the app.
- Replies waiting for you. A reply from a scheduled task, or one finished in the background after you left the app mid-reply, is stored until your device collects it. It is deleted within 7 days after delivery, or after 30 days if it is never collected.
- A random device ID. Tasks and waiting replies are linked to a random ID created by the app. It is not your name, email, Apple ID or advertising ID. Resetting the app creates a new one.
- Server logs. Like most servers, Nino's hosting provider records technical details of each request (time, IP address, app version, and whether it succeeded) for a short period to keep the service running and to stop abuse. Logs do not contain your messages.
Connected apps
Connecting an app is optional. When you connect one, you sign in on that company's own page, and the resulting access token is stored in the keychain on your device, not on Nino's server.
When you ask a bot something that needs a connected app, the app sends that access token along with your request to the AI provider that runs the bot: xAI for Grok bots, OpenAI for ChatGPT bots. That provider's servers use the token to call the connected app, and what the app returns (for example the text of an email or the events on your calendar) is processed by that provider to write the reply. The token is used for that request and is not stored by Nino's server. Bots on Gemini models cannot use connected apps.
You can disconnect an app at any time under Connect apps. You can also revoke access from the other side, for example at myaccount.google.com/permissions for Google or account.live.com/consent/Manage for Microsoft.
Google user data
If you connect Gmail, Google Calendar or Google Drive, Nino Bot asks Google for these permissions and uses them only for the features shown:
| App | Permission | What Nino Bot does with it |
|---|---|---|
| All | Your email address | Shows which account is connected. |
| Gmail | Read email; create drafts | Searches and reads messages when you ask a bot about your email, and saves draft messages you ask it to write. Nino Bot never sends email. |
| Google Calendar | View and edit events | Lists your events, and creates, changes or deletes an event when you ask a bot to. |
| Google Drive | View files | Searches your files and reads Docs, Sheets, Slides and text files when you ask a bot about them. Nino Bot cannot change or delete files. |
Requests to Google go through Nino's server, which passes them to Google with your access token and returns Google's answer. Nino's server does not store your Google data or your Google tokens. The data returned is sent to the AI provider that runs the bot you asked (xAI or OpenAI) only to produce the reply you asked for, as described above.
Nino Bot's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Nino Bot:
- uses Google user data only to provide the features you see in the app;
- does not sell Google user data or use it for advertising;
- does not use Google user data to develop, improve or train generalized AI or machine-learning models;
- does not let people read your Google data, unless you ask us to for support, it is needed for security, or the law requires it.
Microsoft account data
If you connect Outlook, Outlook Calendar, OneDrive, Microsoft To Do, OneNote or Teams, Nino Bot uses the access you grant only to do what you ask a bot to do: search, read and draft email (it never sends email), manage calendar events, find and read files, manage tasks, read and create notes, and read and send Teams chat messages. Requests go through Nino's server to Microsoft in the same way as for Google, and nothing is stored there.
Saved logins
A bot can ask for a key, token, or username and password for a service that has an API, so it can call that service for you. You enter it in a form in the chat, not in a message. It is stored in the keychain on your device and is never added to the conversation, so the bot and the AI provider that runs it do not see it.
When a Grok or ChatGPT bot calls that service, your saved logins are encrypted on your device so that only Nino's server can read them, and sent with the request. Nino's server adds the right login to the call, sends it only to the address you saved it for, removes the login from the response, and returns the rest to the bot. Nino's server does not store your logins or the responses. What the service returns is processed by the bot's AI provider to write the reply.
You can see and remove saved logins under Settings, Saved logins. Reset Nino Bot removes all of them.
Voice, photos and notifications
- Microphone and speech. If you tap the microphone, the app uses Apple's speech recognition to turn your speech into text. Apple may process the audio on its servers under Apple's privacy policy. Nino does not receive or store your audio.
- Reading replies aloud. With the natural voice (the default), the words of the reply being read are sent through the Nino server to OpenAI, which turns them into speech and sends the audio back. This happens whichever bot wrote the reply, including Grok and Gemini bots. If OpenAI's voice cannot be reached, the server may ask xAI for the audio instead. The Nino server passes the text and the audio along and does not store either; the audio is played and then deleted from your device. If you choose the iPhone voice under Settings, Voice, replies are read on your device and nothing is sent.
- Photos and camera. The app only accesses a photo when you choose one or take one to send to a bot.
- Notifications. Notifications are created on your device. The app does not use a push notification service.
What Nino Bot does not do
- No account, no sign-up and no advertising.
- No analytics or tracking software, and no advertising identifiers.
- No selling or renting of personal data, and no sharing it for advertising.
Your choices
- Turn off web search, X search, picture generation, vault sharing or bot memory under Permissions and Connect apps.
- Delete any chat or bot, or everything at once with Reset Nino Bot in Settings. Reset also deletes your scheduled tasks from Nino's server and forgets the device ID.
- Disconnect any connected app, or revoke its access from that company's account page.
- Ask us to delete anything Nino's server holds for your device, or ask any question about your data. Email support@ninoai.io.
Depending on where you live, you may have legal rights to access, correct, delete or object to the use of your personal data. Because the app has no account and keeps almost everything on your device, you can exercise most of these rights yourself in the app, and we will help with the rest.
Children
Nino Bot is not directed to children under 13, and we do not knowingly collect personal data from them.
Where data is processed
Nino's server is in the United States, and the AI providers process data in the United States and other countries. By using the app you understand that your data is processed there.
Security
All connections use encryption (HTTPS). Keys and sign-ins are stored in the iOS keychain. No system is perfectly secure, so please do not share information with a bot that you would not want an AI provider to process.
Changes to this policy
If this policy changes, the new version is posted here with a new date, and the app is updated to match. Significant changes are also announced in the app's release notes.
Contact
You can reach us at support@ninoai.io.