Your information, clearly explained

Navas Moideen trading as NMO Digital operates yourOS as a sole trader. yourOS is a personal organiser. Contact hello@nmodigital.co.uk with questions about your information or this notice.

What we store and why

We store the account information needed to sign you in, including your name, email, verified status and authentication records. We store the tasks, notes, applications, plans, finances and other records you deliberately add so that the organiser can work. Health, financial and demographic information is optional; it is not required to create an account.

Setup preferences include your chosen tools, colour and optional purposes. We record the version of the terms you accept when you choose Continue or Skip personalisation after seeing the terms and privacy notice. New setup does not collect an age confirmation or date of birth. Earlier pilot accounts may retain their historical age confirmation; it is not an access requirement.

Personal and shared information

Personal records are scoped to your account. Content you add to a shared space is available to the people with appropriate membership in that space. Check who is in a space before adding sensitive information. Removing a member prevents future authorised access; it cannot remove copies they already made.

The product owner can manage account access and handle support requests without a product interface for browsing your personal records or impersonating you. Infrastructure operators may need operational access to maintain the service, recover backups or investigate incidents. yourOS does not provide end-to-end encryption or a zero-knowledge guarantee.

Connected assistants

You can optionally connect an assistant to yourOS. Sign in to yourOS and review its requested permissions before approving a connection. These permissions can cover personal records in tools enabled for your account, and Projects in shared spaces where you are a member. Write permissions allow creating and updating records. Connecting does not give family members automatic access to your personal information or include other people’s private records. Fitness access also requires your separate Fitness consent in yourOS; connecting an assistant does not give that consent.

The assistant’s provider receives the records returned when it uses the connection. That provider handles them under its own privacy terms, which you should review before connecting. Manage permissions and revoke access in Connected assistants. Revocation stops further access through that connection; it cannot remove copies the provider has already received. Connecting an assistant is separate from optional product analytics and Fitness consent.

Assistant context is an optional private document of goals, preferences and current plans that you choose to save. You can read, edit or clear it in yourOS. An assistant needs separate permission to read or update it; connecting does not automatically collect your conversations. Connector write summaries expire after 30 days, while request fingerprints remain until account deletion to prevent duplicate changes. Operation audit metadata is retained for up to 90 days and excludes your record contents.

Your Fitness choice

Fitness is optional and needs your separate explicit consent before yourOS uses your workout, nutrition, weight, measurement, sleep, energy or fitness-related profile information for private plans and summaries. Choosing tools, accepting the terms or enabling analytics does not give this consent. You can use the other tools without it.

Existing Fitness records stay paused when there is no current consent; the consent update itself does not erase them. You can export your personal data from Privacy & data. To stop Fitness processing and remove its active records, use Withdraw consent and delete Fitness data. This deletes your Fitness entries and summaries and clears health fields in Profile. The action asks for a recent sign-in and clear confirmation. You may consent again later; deleted entries are not restored.

A minimal versioned consent and withdrawal record remains to honour your choice. Removing active data does not immediately erase older backups. Restores must replay confirmed deletions before ordinary access is reopened. See the backup retention details below.

Optional analytics

Product analytics are off unless you opt in. They record event type, tool, time and a pseudonymous account identifier. They do not include your note text, task descriptions, job details, financial or health information. There is no session recording or automatic capture of private content.

Raw product events are retained for up to 90 days. A minimal summary records your first and most recent meaningful action and whether you returned in the second or fourth week. This summary remains until you withdraw consent or delete your account. Optional purpose choices may contribute to aggregate counts for consenting members.

You can decline or withdraw in your preferences without losing access. Withdrawal stops optional collection and removes your retained raw product events and engagement summary. Essential authentication, security, support and payment records are separate from this choice.

Support, custom work and payments

Messages and attachments you deliberately send to support are available to the team handling your request. Review attachments before sending and remove information you do not intend to share. Internal administrative notes remain separate from your conversation.

If you buy Pro, choose optional support or accept paid custom work, the payment provider handles payment details. yourOS records access dates and the transaction information needed to reconcile payments and refunds; it does not need your full card details. Complimentary access is recorded separately. Account deletion removes complimentary grants and internal grant reasons. Minimal purchase records and their original account reference may remain for reconciliation, purchase ownership and legal obligations, linked to a non-login former-member record.

Service providers and communications

The service uses hosting, database, network and email providers to operate. Verification, password recovery and other essential service emails may be delivered through Amazon SES. Google receives the information needed for their sign-in flow if you choose Google. Payment processing, when available, uses Stripe. These providers also handle information under their own applicable terms.

Some screens load company and broker logos directly from Google’s favicon service, or company initials from UI Avatars. Saved custom logo URLs are requested from their own image host. These requests can share your IP address, browser details, the requested domain or initials, and the app’s origin with that provider. They do not automatically include your account balances, note text or other private records.

Notes load YouTube videos when you select “Load YouTube video”. Opening the editor for a note that already contains a video also loads the embedded player. Fitness screens may load YouTube thumbnails when you open an exercise or its demonstration, and load YouTube, Vimeo or a linked video host when you open or play that demonstration. These providers receive technical connection information and the video identifier or URL. YouTube’s privacy-enhanced domain is used for Notes; it still connects to YouTube.

yourOS uses essential authentication cookies. Optional notifications require your choices and, for push notifications, your browser permission. Lock-screen messages should avoid personal content. The public demonstration uses invented examples and does not read your account.

Essential email delivery and feedback records are retained for up to 90 days. A hash of an email address may remain on an essential suppression list after account deletion, so we can honour delivery failures and complaints and avoid unwanted emails. This list does not store the address in plain text and is separate from optional product analytics.

Retention, export and deletion

We keep your organiser records while your account remains in use, unless you remove them or request account deletion. Use Privacy, export & account deletion to download your records or request deletion. Contact support for help with access or correction. Shared-space ownership and other members’ records may require a transfer or a separate decision before deleting an account.

Scheduled backups retain seven daily snapshots. Retention and deletion of frozen historical Neon and Vercel copies are not yet verified. Essential security or transaction records may remain for a limited operational or legally required period. We do not promise that removing a live record immediately removes every backup. We will explain any applicable retention when handling your request.

Account deletion removes your private organiser records and disables sign-in. Shared records may remain so other members can keep their history and balances, with your account represented as a former member. We retain a minimal account reference for this purpose rather than removing records belonging to other people.

Changes and questions

This notice describes the public pilot. Material changes to how we use your information will be communicated before they take effect. Future AI features or native apps require a separate product and privacy decision.

For help or a privacy request, use support. You can also raise a concern with the UK Information Commissioner’s Office.

Optional Study AI: privacy addendum, 2 November 2026

This addendum applies only to the optional Study AI prototype in the web app, for people aged 18 or over. It provides course explanations, translations, narration and a study tutor when offered for your account and study plan. Before enabling it, you must explicitly confirm that you are 18 or over and agree to the processing described here. We record this confirmation, its date and the Study AI notice version. We do not infer your age or permission from sign-in, general terms acceptance, earlier account information, analytics or Fitness choices.

When you request an explanation or translation, the selected course page text and source references are sent to Anthropic. When you send a tutor question, your question, selected language and relevant course excerpts from the selected section or both books are sent with chapter and page references. These requests use Anthropic's commercial API, with retention of up to 30 days under the current account policy. Your unrelated health, finance, profile and other organiser records are not retrieved or attached. Any personal details you put in a question are part of the question you choose to send, so avoid unnecessary sensitive details.

When you choose Prepare audio, the selected original course text, generated explanation or tutor answer, language and voice instructions are sent to Google's paid Gemini API to create narration. Google does not use paid API content to improve its products or train its general models. It retains prompts, context and generated output for 55 days for abuse monitoring and policy enforcement. These are separate provider retention periods; Study AI does not offer a zero-retention guarantee.

Generated explanations, translations, tutor questions and answers, saved audio and reading or listening preferences remain private to the authorised account and plan. yourOS stores them until you request their deletion or delete your account. Disabling Study AI stops new cloud requests but keeps saved material available to read or replay. It does not erase content already received by a provider or shorten that provider's retention period. Saved playback does not generate the audio again. The backup and account-deletion limits in this notice also apply.

Microphone recording is a separate explicit action. Browser transcription depends on your browser, device and language support, and may send audio to the browser's speech-service provider under that provider's terms. It is not guaranteed to run on your device. Check and edit the transcript before sending it to the tutor; recording never sends a tutor question automatically. yourOS does not keep raw microphone recordings for this prototype. Device voice playback, when available, is supplied by your browser or operating system and is not saved as course audio.

You can use the course reader without enabling Study AI. To export or delete your account, use your privacy controls. For deletion or correction of specific Study AI material, contact support. Generated explanations and answers are labelled and can be inaccurate; check the original course and ask your instructor where needed.