Privacy Policy
Last updated: April 12, 2026
Nowadays ("we", "our", or "the app") is built with privacy as a core principle. This policy explains what data the app accesses and how it is used.
Data We Access
Nowadays requests access to the following on-device data:
- Calendar Events (via Apple EventKit and optionally Google Calendar API) — event titles, dates, times, locations, and calendar names. Used to build your on-device knowledge graph.
- Photo Library — creation dates and GPS metadata are read to match photos to calendar events. Photos are analysed on-device using Apple Vision framework. Photos are never uploaded.
- Location (When In Use) — optionally, to show place names for photos taken nearby.
Data Storage
All calendar and photo data is processed entirely on your device. Nowadays does not operate servers, does not upload your data to any cloud service, and does not store your personal data externally.
The following data is stored exclusively on your iPhone:
- All calendar events (from Apple Calendar and Google Calendar)
- All photos and photo metadata
- The knowledge graph (projects, venues, observations)
- Your notes and file attachments
- Location name lookups (reverse geocoding) are performed using Apple's on-device CoreLocation framework.
- Your Anthropic API key and Google OAuth tokens, if provided, are stored securely in your device's Keychain and are never transmitted to us.
Google Calendar (Optional)
If you connect your Google account, Nowadays requests read-only access to your Google Calendar data:
- We request only the
calendar.readonlyscope — we cannot modify, delete, or share your Google Calendar data. - Authentication uses OAuth 2.0 with PKCE — Nowadays never sees your Google password.
- Events fetched from Google Calendar are stored only on your device in the same on-device knowledge graph as Apple Calendar events.
- No Google user data is sent to any third-party server.
- OAuth tokens are stored in your device's Secure Keychain.
- You can disconnect Google Calendar at any time from Settings, which revokes the token and deletes all stored credentials from the device.
Nowadays' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
AI Features (Optional)
Nowadays includes optional AI-powered search and reflection features. These are powered by the Anthropic Claude API and are entirely opt-in.
- To use AI features, you must provide your own Anthropic API key in the app settings.
- When an AI query is made, anonymised structured text descriptions of events are sent to Anthropic's API. Raw event titles, attendee names, and locations are not sent — only generalised descriptions.
- Photos are never transmitted. On-device Vision framework extracts text descriptions, and only those descriptions are included.
- If you do not provide an API key, no data is ever sent externally.
- Please refer to Anthropic's Privacy Policy for details on how they handle API requests.
Third-Party Services
- Google Calendar API — used only when you explicitly connect your Google account. Subject to Google's Privacy Policy.
- Anthropic Claude API — used only when you provide an API key. Subject to Anthropic's Privacy Policy.
No other third-party analytics, advertising, tracking services, or SDKs are included in the app.
Children's Privacy
Nowadays is not directed at children under the age of 13. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this privacy policy from time to time. Changes will be reflected on this page with an updated date.
Contact
If you have any questions about this privacy policy, please contact us at: