Nucleus privacy policy

Updated 30 October 2026 · Google Calendar disclosure

Nucleus has no Nucleus account, advertising, analytics or Nucleus-operated server. Your records are stored in private app storage on this phone. Cloud assistance and Google Drive backup are optional, with the data use described below.

What stays on this phone

Your timeline, tasks, recurring-task completion history, habits, mood, spending, notes, tags, chosen weekly actions and reflections are stored locally. Photo memories and voice recordings remain local unless you deliberately export or back them up. Private memory photos and voice recordings are not sent to AI. Findings and reports are calculated by local engines; observations do not establish causes and missing records are not treated as zeroes.

Local processing or cloud assistance

New users choose Local or Cloud assisted during onboarding. Local is the initial choice. Existing installations keep their saved AI setting. A restored backup cannot turn cloud assistance on unless this phone has already enabled it. You can change it in Settings > AI processing at any time.

When cloud assistance is enabled, selected capture or setup text, a task title you ask to break down, a scan photo you choose and text extracted from it, or a bounded summary for a briefing or answer may be sent over HTTPS through Firebase AI Logic to Google's Gemini API. Summaries can include spending totals, sleep/mood averages, counts and locally detected patterns. They exclude individual timeline records, private note text, your name and profile photo. The app shows a live summary preview in AI settings. Private memories are not cloud scan inputs.

Google handles those requests under its Gemini API Additional Terms and Google Privacy Policy. Unpaid service content may be used to improve Google's products; do not enable cloud assistance for content you do not want handled under those terms. Local processing remains available without an AI account or API key.

Release builds use Firebase App Check with Google Play Integrity to protect cloud AI. Google processes app/device-attestation metadata for that purpose. Nucleus does not receive biometric data.

Local correction memory and diagnostics

Nucleus can remember an exact capture phrase and the classification you corrected. This stays locally and never overrides amounts, dates or reminders. Saved capture templates are also local and always open a review. A bounded local interpretation log can retain the wording of corrected or abandoned captures. Erasing personal records removes this log and correction memory. The optional local crash report is shared only when you press Send; no remote crash reporting is enabled.

Health Connect

Health Connect is optional and read-only. You choose whether Nucleus may read sleep, steps and heart rate and can revoke access. The app imports daily summaries into a private cache and removes revoked categories. These summaries are included in backups you deliberately create. Optional cloud briefing summaries may include aggregates of these readings; private health data is not uploaded when local processing is selected.

Optional calendars

Calendar access is optional and read-only. Nucleus requests Android calendar permission only after you choose it in Calendar connections, then lets you select the calendars to display. Google, Samsung, Outlook/Exchange and other sources are available only when their sync adapters expose calendars to Android. Work-profile policies may prevent access. Teams meetings can appear through an accessible Outlook/Exchange calendar; direct Microsoft sign-in is not included in this version.

You can optionally connect Google Calendar directly using Google's consent screen. This requests the calendar.calendarlist.readonly permission to list calendars for your selection and calendar.events.readonly to read events from the calendars you select. Google describes the event permission as access to events on all calendars; Nucleus limits its event requests to your selected sources and a bounded planning window. It reads event titles, start and end times, all-day status and identifiers to display your plan, avoid duplicate events and check scheduling conflicts. Nucleus does not create, edit or delete Google Calendar events. API requests go directly from the phone to Google over HTTPS; Nucleus has no calendar server. Google handles those requests under its Google Privacy Policy. Calendar connections and selection preferences are separate from Drive backup.

Imported event titles and times are held in memory for the displayed planning window. Nucleus stores selection preferences locally, but does not include imported events in portable backups, AI prompts, personal findings, completion counts or share cards. Planned times for your own Nucleus tasks and routine groups are part of your local records and backups. Calendar refresh occurs on returning to the app, relevant phone-calendar changes or a manual refresh; background or instant sync is not promised. Last successful read times and failures are shown in Calendar connections.

Disconnecting clears the local imported view and stops that source's requests. It does not delete remote events or revoke Google's account permission grant; that can be managed in your Google Account. Erase personal records also clears Nucleus's calendar selections and imported cache. Nucleus never edits a remote meeting when you move a local task.

Google API data use

Nucleus uses Google Calendar data only for the calendar display and planning functions you choose. Calendar data is not used for advertising, sold, sent to AI or used to train AI models. Nucleus’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google authorization is optional; you can use Nucleus without connecting a Google account.

Backup and restore

Automatic Android cloud backup and device-to-device transfer are disabled. Local exports use a ZIP archive containing a readable JSON manifest and original memory media; older JSON backups remain restorable. The app streams export media and bounds imports to protect device memory. Check a backup validates its structure without restoring; this is not a guarantee of future storage availability. Restore previews content and replaces records only after confirmation.

Google Drive backup is manual and off until you connect a Google account. The drive.file scope gives access to files created or explicitly opened by Nucleus, not your entire Drive. An upload occurs when you press Back up now. Drive currently uses the portable JSON backup format. You can encrypt Drive copies with a passphrase using AES-GCM on this phone. The passphrase is not stored or uploaded; a forgotten passphrase cannot be recovered. Unencrypted exports are readable by whoever obtains the file.

Backups can include records, tasks, habits, memories, wearable summaries and restorable preferences. Your profile photo and Google account connection are excluded. Disconnecting Drive forgets the local connection, but does not delete Drive files or revoke the Google Account permission grant. Manage those in Drive and your Google Account. A canceled share chooser is not recorded as a completed backup.

Permissions and reminders

Notifications are requested when you enable a reminder feature, rather than at initial app launch. Task reminders request user-granted Alarms & reminders access for precision; without it Android may delay delivery. Habit reminders are optional and approximate. Voice recording requests microphone access when used. Photos use Android's picker or the camera app. Nucleus does not request location access and has no weather feature. Internet is used for optional cloud assistance, manual Google Drive operations and optional direct Google Calendar refresh.

App lock and deletion

Optional app lock gates content using Android biometrics or device credentials, relocks after leaving the app and protects recent-app previews. If device authentication is unavailable the locked app does not expose records; configure device security to regain access.

Settings > Privacy and app lock > Erase personal records removes timeline entries, tasks, habits, memories, finance setup, imported wearable cache, local correction history, templates, weekly actions and cached readings. Your profile and appearance preferences remain as disclosed in the confirmation. Exported or Drive copies are outside this action and must be deleted where you saved them. Uninstalling removes private app storage.

Children and contact

Nucleus is not directed at children under 13. For privacy questions, contact anas.rizvi89@gmail.com, or use the support contact on Nucleus’s Google Play listing. Permission, backup and local/cloud processing controls remain available in the app.