Privacy Policy
neboola
Effective date: 18 June 2026
Last updated: 18 June 2026
This Privacy Policy explains how SuperPug 3000 LLC ("SuperPug 3000," "we," "us," or "our") handles information in connection with the neboola mobile application (the "App"). We built neboola so that the things you create stay yours: your ideas, notes, and tasks live in your own private Apple iCloud account, not on our servers. The information we ourselves collect is deliberately minimal.
If you have any questions, contact us at hello@neboola.app.
1. A quick summary
- Your content stays in your iCloud. The ideas, notes, tasks, titles, and mood colors you create are stored in a private database inside your personal iCloud account and on your device. We cannot read them.
- We don't sell your data. We never sell or rent personal information, and we don't use your content to build advertising profiles.
- We collect a small amount of analytics and crash data to understand how the App is used and to fix problems. We keep this minimal and privacy-conscious.
- Voice input is handled by Apple on your device. When you dictate, Apple's speech recognition turns your speech into text. We never receive or store your audio.
- Subscriptions are handled by Apple. We don't see your full payment details.
The sections below give the detail.
2. Who is responsible for your information
The data controller for the purposes of this Policy is:
SuperPug 3000 LLC
New York, United States
Email: hello@neboola.app
3. The information involved, and where it lives
It helps to separate the information you create from the information we collect, because they are handled very differently.
3.1 Content you create (stored in your iCloud — not by us)
When you use neboola you create content: ideas, notes, tasks, note entries, titles, highlights, groups, mood colors, and related metadata such as creation and modification times and ordering.
This content is stored in:
- Your device, in a local encrypted database (protected at rest by iOS file protection while your device is locked); and
- Your private Apple iCloud account (Apple CloudKit private database), so it is backed up and syncs across your devices.
This content sits in your personal iCloud container. We do not operate a content server, and we cannot access, read, or retrieve the things you create. Apple processes and stores this data under Apple's own terms and privacy policy. Your iCloud account is a requirement for using the App.
If you sign out of iCloud or switch iCloud accounts, the App removes the local copy of your content from the device; content already synced remains in the iCloud account it belongs to.
3.2 Information we collect (analytics and diagnostics)
To run and improve the App, we collect a limited set of usage and diagnostic information through the third-party tools described in Section 5:
- Product analytics (via PostHog): in-app events and interactions — for example, that an idea was created, a note was added, the paywall was shown, or a screen was viewed — together with technical context such as app version, device model, operating-system version, language/region, a randomly generated installation identifier, and approximate session timing. We use this to understand drop-off points and improve the experience. We configure analytics to be minimal and do not capture the text of your ideas, notes, or tasks.
- Crash and performance diagnostics (via Firebase Crashlytics): when the App crashes or misbehaves, we receive a crash report — for example, the stack trace, app version, device model, operating-system version, and the state of the App at the time of the crash. This does not include the content of your ideas, notes, or tasks.
We do not collect your name, email address, contacts, photos, precise location, or advertising identifiers, and we do not include any advertising SDKs.
3.3 Subscription and purchase information
Subscriptions and the free trial are processed by Apple through the App Store and StoreKit. Apple handles your payment; we never receive your full payment-card details. We (and our analytics) may record non-sensitive facts about your subscription state — for example, whether a trial or subscription is active — so the App can unlock the right features and so we can measure conversion in aggregate.
3.4 If you contact us
If you email hello@neboola.app (for support or feedback), we receive your email address and whatever you choose to include in your message, and we keep that correspondence to respond to you.
4. Why we use information, and our legal bases
We use the limited information we collect to:
| Purpose | Examples | Legal basis (EEA/UK GDPR) |
|---|---|---|
| Provide the App | Storing your content in your iCloud, syncing across devices, unlocking subscribed features | Performance of a contract |
| Keep the App working | Diagnosing and fixing crashes and bugs | Legitimate interests / contract |
| Improve the App | Understanding which features are used and where users drop off | Legitimate interests (and consent where required) |
| Handle payments | Managing your subscription and free trial through Apple | Performance of a contract |
| Communicate with you | Responding to support and feedback emails | Legitimate interests |
| Comply with the law | Meeting legal, tax, and regulatory obligations | Legal obligation |
Where local law requires your consent for analytics, we will rely on that consent and you may withdraw it (see Section 8).
5. Third parties who process information for us
We share the limited information in Section 3.2–3.3 with a small number of service providers ("processors"), who may only use it on our behalf and under contract:
- Apple Inc. — iCloud/CloudKit (storage and sync of your content within your own account) and the App Store/StoreKit (subscriptions and payments). See Apple's Privacy Policy at https://www.apple.com/legal/privacy/.
- PostHog, Inc. — product analytics. See https://posthog.com/privacy.
- Google LLC (Firebase Crashlytics) — crash and performance diagnostics. See https://firebase.google.com/support/privacy.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We may disclose information if required by law, to enforce our terms, or to protect the rights, safety, or property of our users or others. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
6. International data transfers
We are based in the United States, and our service providers may process information in the United States and other countries. Where information is transferred out of the EEA, the UK, or other regions with data-transfer rules, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) where required. Your content stored in iCloud is handled by Apple in accordance with Apple's own policies and infrastructure.
7. How long we keep information
- Your content persists in your iCloud and on your device until you let it go (delete it) or until you remove the App or sign out of iCloud. Its lifetime is controlled by you and by Apple, not by us.
- Analytics and diagnostic data is retained only as long as needed for the purposes above, after which it is deleted or aggregated.
- Support correspondence is kept as long as needed to handle your request and for a reasonable period afterward.
8. Your privacy rights
Depending on where you live, you may have some or all of the following rights regarding personal information we hold about you (this does not extend to the content in your iCloud, which we cannot access):
- Access — request a copy of the information we hold about you.
- Correction — ask us to correct inaccurate information.
- Deletion — ask us to delete information we hold about you.
- Objection / restriction — object to or restrict certain processing.
- Portability — receive certain information in a portable format.
- Withdraw consent — where we rely on consent, withdraw it at any time.
- Opt out of analytics — ask us to stop collecting analytics about your use of the App.
To exercise any of these rights, email hello@neboola.app. We will respond within the timeframe required by applicable law. You will not be discriminated against for exercising your rights.
EEA/UK users: you also have the right to lodge a complaint with your local data protection authority.
California users (CCPA/CPRA): we do not sell or share personal information as those terms are defined under California law. You have the rights to know, delete, correct, and opt out described above; you may submit a request at hello@neboola.app.
To delete your content, let go of your ideas inside the App, or sign out of iCloud and delete the App; you can also manage your iCloud data in your device's iCloud settings.
9. Children's privacy
neboola is not directed to children. You must be at least 13 years old (or 16 in the EEA/UK and anywhere else local law sets a higher age for digital consent) to use the App. We do not knowingly collect personal information from children below the applicable age. If you believe a child has provided us information, contact hello@neboola.app and we will delete it.
10. Security
We take reasonable measures to protect information. Your local content is stored in a database protected by iOS file protection while your device is locked, and your synced content is protected by Apple's iCloud security. Analytics and diagnostic data is transmitted over encrypted connections. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice (for example, in the App or on neboola.app). Your continued use of the App after an update means you accept the revised Policy.
12. Contact us
SuperPug 3000 LLC
Email: hello@neboola.app
Web: https://neboola.app