Privacy

Last updated 7 October 2026

The short version: Nylo keeps what you send it on a server, and to answer questions about it he shows a few of your saves to OpenAI. With Pro, OpenAI also watches the reels and looks at the posts you send. Nothing is sold, nothing is used to advertise to you, and nothing is used to train anybody's model. This page says exactly what goes where.

Please do not send Nylo passwords, bank details, one time codes or anything else you would not want a company to hold. Nylo is for reels, links, notes and plans.

What Nylo is

You send Nylo things on WhatsApp or Instagram, or from the app. He keeps them, and later you can ask him about them in your own words. There is one Nylo across all three: the same saves, the same account.

What is stored, and where

The thing you sent: the link, reel or post, its caption, and any words you typed.
A copy of the picture of what you send: a post's picture (or, for a video post, one frame of it), and once you have an account, the cover of each reel or link. Instagram's own picture addresses stop working within days, so Nylo keeps its own copy to show it to you. It is deleted when you delete the save.
When you sent it, and which chat it came from, so it ends up in your Nylo and nobody else's.
Your name and email, once you make an account.
Your conversation with Nylo in the app.
When Nylo sorts your saves into buckets: the short line about each save, and the names of the buckets Nylo makes, are kept encrypted on Nylo's server and deleted with your account.

It is kept on Cloudflare, in a database in their network, and Cloudflare encrypts what is on their disks. Your own photos and videos are not saved; the only pictures kept are those of the public posts, reels and links you send. Meta delivers the messages, and handles them under its own terms, which is worth remembering: a WhatsApp message to a business is not end to end encrypted the way a message to a friend is.

WhatsApp saves are encrypted on top of that

The link, the caption and the note of every WhatsApp save are scrambled before they are written down, with a key kept somewhere else entirely that never sits in the database. If somebody stole a copy of the database, your WhatsApp saves would be unreadable to them.

Instagram saves are not scrambled this way. Those are public reels, posts and links.

The part where your words leave

Nylo cannot search what you saved, or answer a question about it, without a language model. That model is not on your phone and it is not mine. It is OpenAI's, and it is reached over the internet.

Here is every single thing that goes to OpenAI, and when:

Once per save: the words of it. The caption, the title, anything you typed, and the account handle. This is what makes it findable later.
Every time you ask something: your question, the last few things you and Nylo said to each other, and the words of the handful of saves that matched.
Also every time you ask something, a short note about your account, so Nylo can answer questions about it and call you by your name: your name, how many things you have saved and whose posts you save most, the names of your buckets with their dates and steps, which chats are joined (your Instagram username, and the last three digits of your WhatsApp number), whether you have Pro, and which reminders are on.
Every message you send in a chat: the text of it, so Nylo can tell a question apart from something to keep.
Once per reel, with Pro: the sound of the reel and four still pictures from it (the cover and three moments), so Nylo knows what is said in it, what is written on screen and what is shown. The video is fetched, used for this and never kept.
Once per post, with Pro: the post's picture, so Nylo knows what is written on it and what it shows. For a video post, its sound and a few still pictures from it, and the video is deleted within a day.
When Nylo sorts your saves into buckets: he reads each save once, up to 40 at a time. That is the same words as above (the caption or title, what you typed with it or the note itself, the account that posted it, a link's address) and, for a reel or post he has looked at, the start of what is said, written and shown in it. From that he writes one short line about what the save is. After that, only those short lines and the names of your buckets are sent, to decide which belong together.

What does not go: your email address, your full phone number, or any photo of yours. The only pictures sent are from the public reels and posts you chose to send.

Under OpenAI's API terms, what is sent is not used to train their models, and it is deleted within thirty days. OpenAI is the only company that sees your words or your saves.

How a reel is fetched

Instagram does not hand Nylo a reel's video, even when you share it to him. So with Pro, the video is fetched through Apify, a company that collects public web pages. Apify is given the reel's public link and nothing else: not your name, not your handle, not which account saved it.

This is why the line at the top matters. Do not send Nylo a password, a bank detail or a one time code. Send him the reel, the link, the note and the plan.

Subscriptions

Whether your subscription is active is handled by RevenueCat. Those requests carry an anonymous id for this install, the country your App Store is set to, and what you bought. They never carry a save, a question, your name or anything you asked. Apple handles the payment and Nylo never sees your card.

If you buy Pro on the web

On app.heynylo.com the sale is made by Dodo Payments, an online reseller. At its checkout you give Dodo Payments your name, your email, your billing address and your card. That goes to Dodo Payments and not to Nylo: Nylo never sees your card. Nylo gives Dodo Payments one thing, a random id for your account, so it knows whose subscription it is. Dodo Payments tells Nylo whether the subscription is live, which plan it is and when it is paid up to.

Nylo then tells RevenueCat that your account has Pro, so the two agree. That carries the same random id, that it was bought through Dodo Payments, which plan, the subscription's reference number, whether it is live, and the date it is paid up to. It never carries your name or your email.

When you delete your account, the subscription is cancelled first, and that id is removed from RevenueCat.

What I can see

I am one person and I run this, so I will say it plainly rather than dress it up.

WhatsApp: my admin pages show how many things you have saved, what kinds they are and when they arrived. They never show your links, your captions or your notes.
Instagram: my admin pages show the reels and links people send, because those are public posts anyway. Typed notes are never shown.
Your details: your WhatsApp number or Instagram username, and your name and email if you made an account.
Your answers in the introduction: the choices you tapped there, beside your name and email, so I can see what people want from Nylo.
The honest part: I run the server, so I could write code to read WhatsApp saves. I do not, and no tool I use shows them to me. Anyone who tells you their app is different is either holding a key they cannot use or not telling you the whole story.

Nothing you send is sold, shared with anyone else, or used for advertising.

When something goes wrong

If a message arrives in a shape Nylo does not understand, a copy is kept for seven days so I can fix what broke, then it deletes itself. Messages Nylo understood are never copied like that.

How long it is kept

Without an account: seven days, then deleted by a job that runs every night.
With a free account: kept until you delete it.
Login links: one hour, or until you use them.
Join codes: ten minutes, or until used.
Staying logged in on the web: one hundred and eighty days from your last visit, unless you log out.

Agreeing to this

Before Nylo keeps anything for you, he shows you this page and asks you to agree, in the app and in the chat. That agreement is recorded with the date and the version of this page you agreed to. If this page changes in a way that matters, he asks again.

Your Nylo account

An account is free. It exists so your saves are kept instead of deleted after seven days, and so you can use Nylo in the iPhone app and on the web at app.heynylo.com.

What it holds

Your name and your email, as Apple or Google gave them, or as you typed them. You can change the name in My account.
The picture on your account. Until you choose one, it is one of twelve drawn faces, picked from your email, and nothing is stored for it. If you choose a face, only which face is stored. If you upload your own photo, a small square copy of it is kept on Nylo's server. It is shown only to you, it is never sent to OpenAI or to anybody else, it is deleted when you replace it, and it is deleted with your account.
Which chats belong to you: your WhatsApp, your Instagram, or both.
What you tapped when Nylo introduced himself: what you save most, where you keep things now, what you want him to do for you, and the name you asked to be called. These are kept so I can see what to build next. They are never sent to OpenAI, and they are deleted with your account.

How logging in works

There is no password. You sign in with Apple, with Google, or with a six digit code sent to your email. Nylo can also send a link inside your own chat, which is the proof that it is you: only you can read your messages. That link works once and for one hour. When it signs a browser in, your chat is told somebody just logged in, with a button that logs out every browser at once.

On the web, your browser is given one cookie holding a random key. The scripts on the page cannot read it, and Nylo keeps only a scrambled form of it. The cookie is used for one thing: knowing it is you. It is not advertising, it is not shared, and it follows you nowhere else.

Nylo on the web runs only Nylo's own code. There is no analytics, no tracker, and nothing loaded from any other company.

Reminders in a browser

If you switch reminders on in a browser, your browser gives Nylo an address to send them to. Nylo keeps that address with your time zone and your three reminder switches, and nothing else. Each reminder is locked so that only your own browser can read it: the company that delivers it (Google, Apple or Mozilla, whichever makes your browser) cannot. Switching reminders off, or logging out, removes the address.

Notifications on your iPhone

When you are signed in on an iPhone or iPad, Apple gives Nylo an address for that device. Nylo uses it for two things. One is the notifications you allowed: Apple delivers them, so their words, for example the caption of something you just saved, pass through Apple to reach your phone. The other is a silent signal that tells the app something of yours changed, so it is already up to date when you open it. The silent signal carries no words and nothing you saved.

The address is kept even if notifications are switched off, because the silent signal does not need them. Logging out, or deleting your account, removes it.

Deleting things

In the chat

One thing: swipe right on it and reply delete. Nylo asks first.
Everything: type heynylo, tap Delete everything. Nylo asks first.
On Instagram, unsending a message can delete Nylo's copy too. Nylo asks the first time and remembers what you chose. You can change it in Settings.

In the app

Settings, then Delete all my saves or Delete my account. Deleting the account removes your saves, your buckets, your steps and this phone's link to it.

On the web

Open your account and tap Delete all my saves. Every save from both chats goes. Your account, name and email stay, so anything you send next is still kept.

Everything about you

To erase your name and email as well, open Settings in the app and choose Delete my account. Your account and everything in it go straight away. If you would rather I did it, email shreyan@heynylo.com with the subject "Delete my data", from the email on your account or naming the WhatsApp number or Instagram username you message from, and I will remove it within 30 days and reply to confirm.

Feedback posts and pictures

Feedback, in the app, is the one public place in Nylo. What you post there, and any picture you add, is shown to everyone using Nylo next to your first name only. Nothing from your saves, buckets or chat ever appears there.

A picture is only read when you choose it from your photos to add to a post; nothing else in your library is opened. Pictures are stored on Cloudflare with the post and are not public on the web.

Before a post goes up, its words and picture are checked by OpenAI's moderation service for anything hateful, sexual, violent or harassing, under the same terms as above. Reports, blocks and removed posts are kept so the community rules can be enforced. Delete a post from its menu at any time; deleting your account deletes all of them.

Microphone and speech

If you hold the mic button to say something, your phone turns your speech into text on the device itself. The audio is not kept and it is not sent anywhere. Nylo asks for the microphone only when you first use that button, and if you say no, it simply does not offer it.

Calendar

If you turn Calendar on in Settings, Nylo reads today's events so the morning plan knows what your day already looks like. It is read on your phone, it is never sent anywhere, and nothing is added to or changed in your calendar.

Children

Nylo is not aimed at children under 13 and does not knowingly collect anything from them.

What changed, and when

This page said, until 26 September 2026, that the app kept everything on your iPhone with no account and no copy anywhere, and that nothing you sent would ever go to another company without you turning it on. That stopped being true when Nylo learned to answer questions, and the page should have changed on the same day. It says what is actually happening now.

The app no longer reads your screenshots at all. That was removed on 25 September 2026.

Until 4 October 2026 this page, and a line in the app, said your name and email were never sent to OpenAI. That was not true: so that Nylo can answer questions about your own account, each question carried a short note about it, and your name and email were in that note. From 4 October 2026 your email is no longer sent at all. Your name still is, so he can use it, and this page now lists exactly what the note holds. From the same day, the choices you tap in the introduction are kept with your account.

Until 4 October 2026 this page did not mention the address Apple gives Nylo to reach your iPhone. It does now, under Notifications on your iPhone.

From 5 October 2026 Pro can be bought on the web through Dodo Payments. What Dodo Payments and RevenueCat are given is under Subscriptions.

From 4 October 2026 you can change the name and the picture on your account. If you upload your own photo, Nylo's server keeps a small copy of it. Before that, Nylo kept no picture of yours.

From 7 October 2026 Nylo can sort your saves into buckets by what they are about. It is being switched on a few accounts at a time. What goes to OpenAI for it is listed under The part where your words leave, and what is kept is under What is stored, and where. It is the same words, sent to the same company under the same terms, so nobody is asked to agree again for it.

If this changes

If Nylo ever sends your content somewhere new, this page changes first, and he asks you to agree again before anything goes.