Who is responsible
SUPERMIND PTE. LIMITED is responsible for the personal information processed to provide Nico. This policy covers the website, accounts and Nico services. Contact support@nico.app with a privacy question or request. App-related processing described below applies when those features are available and used; downloads and purchases are not currently open.
Account and service information
Email sign-in processes your email address, verification information and account session. Account services also process device authorizations, security events, subscription status and usage information needed to provide access and prevent abuse. If paid subscriptions become available, payment providers process payment details; Nico receives the customer, transaction and subscription references needed to manage billing.
This information is used to authenticate you, provide and secure the service, manage your account, respond to support requests and meet applicable legal obligations. It is not used for cross-site targeted advertising.
Content used by AI and speech services
Cloud conversations send the text, audio and context needed for the request through Nico’s servers to model or speech providers. Context can include selected screen content, files, conversation history and relevant memories. Processing a request is different from where a file or memory is stored.
Task requests can also go directly from your Mac to the AI provider whose account you connect. Those providers apply their own terms and data-handling rules. This policy does not promise that all providers retain no data or never use data for training. Review the provider’s settings and terms before sharing sensitive information.
Local data and synchronization
Chat history, task records and generated files are stored on your Mac. Model and connected-account credentials are managed locally, including through macOS Keychain where supported. A task can send relevant content to a provider or destination you authorize.
Memory synchronization can store encrypted copies in cloud storage. Encryption of stored copies does not mean that Nico’s servers never process memory: relevant memory and context can be included in a cloud conversation request.
Browser extension
The Nico extension for Chrome and other Chromium browsers communicates only with the Nico app on the same Mac. The extension itself does not send information to Nico’s servers or any other server.
The extension gives the Nico app the addresses and titles of open tabs, and the position, size and front tab title of each window. For a page Nico works on at your request, it also provides the page’s text and structure, screenshots, saved PDFs and downloaded files, and whether you are clicking or typing on that page, but not what you type or where you click. Incognito windows are not included. The extension refuses debugging commands that read cookies or site storage and does not access your browser account. In the browser profile, it stores a random identifier for the profile, an identifier for the current browser session and whether you allow Nico to use the browser.
The Nico app uses this information to find and work on the right tab and to list your browser profiles in Settings. For this, it can also read the browser’s profile names and the extension’s identifier from the browser’s files on your Mac, and the titles of browser windows. Page content used in a task is handled like other task content and can be sent to the AI provider performing the task, as described above.
While Nico works on a tab, the browser shows its debugging notice. You can stop Nico on a tab from that notice or the extension’s popup, turn off “Allow Nico to use this browser” in the popup, turn off “Allow tasks to use browsers with the extension” in Nico Settings, or remove the extension.
Cookies, local storage and diagnostics
The website uses cookies needed for authentication and session security. It can cache public prices in browser local storage, but does not store account access tokens there. The website does not use third-party analytics or session replay.
Operational information helps diagnose failures and protect the service. When diagnostic log uploads are available in the production Mac app, they are on by default. You can turn them off in Nico Settings; turning them off stops further uploads. Uploaded diagnostic logs are intended to exclude conversations, model replies, tool and file content, and credentials, and are retained for 14 days.
Newer Mac versions upload only fixed structured diagnostic events in both production and staging; they do not upload old text log segments. Older staging versions can upload redacted text log segments, and provider errors may echo request content into those logs. Redaction does not guarantee that older logs contain no sensitive information.
The production and staging Mac apps also report usage events to an analytics service that we operate ourselves, such as app starts, onboarding steps, whether a permission was granted, how long a conversation or task took and how it ended, which connectors were connected, and app updates. Each event is a fixed name with fixed values or numbers, is tied to your account ID rather than your email address, and contains no conversations, model replies, tool or file content, or credentials. This setting has no switch in the app.
Service providers and international processing
Information is shared as needed with hosting, email, AI, speech and payment providers to supply their services, with support staff handling your request, and when required by law or necessary to protect rights and security. We do not sell personal information.
Providers may process information outside your country. Applicable data-protection requirements govern these transfers. The services you connect directly may have separate responsibilities under their own privacy policies.
Retention, deletion and security
Information is kept for the purposes described here, including account operation, security, payment records and legal obligations. Retention depends on the type of information and the applicable requirements. Backups, payment records and information needed for legal obligations may remain after an account is disabled or a deletion request is made.
Account sign-out, device revocation and account deactivation are not the same as erasing all data. Request deletion through support; local files and data held independently by a connected provider may need to be removed separately. Access controls, encryption and other safeguards reduce risk, but no system is completely secure.
Your choices and rights
You can manage connected accounts, revoke device access and change macOS permissions. Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing. Contact support@nico.app; we may need to verify your identity without asking for your password or verification code.
You may also contact the relevant data-protection authority. Material changes to this policy will be communicated through the website, the app or your account email as appropriate.