Private by build, not by promise.

Nova works on the most personal machine you own. Here is exactly where things live, what leaves, and what never does.

Stays on your device

Runs locally, stored locally, never uploaded.

  • Her hearing: speech to text with whisper.cpp, on your processor
  • Her voices, in both languages
  • Her memory, editable in plain words (press B)
  • Your conversation history and meeting notes
  • Camera frames for presence: looked at, never stored or sent
  • Her own browser profile and inbox contents
  • Your ElevenLabs key, if you add one

Goes to Nova Cloud

One request at a time, then forgotten.

  • What you asked, with the context that request needs
  • Passed to our AI model provider (in the United States today), answer returned to your device
  • The content of requests and answers is not stored
  • Only usage totals are kept, so allowances work
  • Your email, plan and renewal date
  • A random per-device identifier and a hashed key, never a serial number

The practices behind the promise.

  • Asks before acting

    Paying, deleting for good, installing, quitting your apps, changing the team, sending or posting from your accounts: your yes first, every time.

  • You type the secrets

    Passwords, card numbers and one-time codes are always typed by you. She never sees them and never asks for them.

  • Permissions in context

    The system asks for each permission the first time she needs it, in your own settings, and every one can be refused.

  • Sandboxed helpers

    The helpers that run commands for her work inside a macOS sandbox profile, kept to her workspace unless you say otherwise.

  • Keys per device

    Each device gets its own sign-in key, stored hashed on Nova Cloud. Losing one device never exposes another.

  • Payments we never see

    Lemon Squeezy is the merchant of record and handles cards, tax and invoices. Card numbers never touch our systems.

  • Infrastructure

    Nova Cloud and this site run on Cloudflare; sign-in codes go through Resend; thinking goes to our AI model provider in the United States, named in the privacy policy. Nothing else. A Saudi-hosted option is planned for companies.

  • Protected builds

    Her app code ships protected against casual copying, and only from heynovapro.com. Don't install her from anywhere else.

  • Delete everything

    Remove the app and the .nova folder from your home folder, and email us to delete your account. Gone, both sides.

Tell us first.

Found something?

We answer security reports within two working days, fix real issues first, and credit you here if you'd like. Please don't test against other people's accounts.

Write to

hello@heynovapro.com
  • Response within two working days
  • Credit on this page, if you want it
  • No legal action for good-faith research

Be first to get Nova.

Mac first, opening soon; Windows and phone next. Leave your email and Nova Cloud will send one message on the day, nothing else.

Windows and phone are on the same list, on the download page.