Privacy Policy
Last updated: 2026-05-22
Overview
Nibit is committed to protecting your privacy. This privacy policy explains what data the app collects, where it is stored, and how it is used.
Data Collection and Storage
What We Store
- Snippets: Text templates you create, including titles, content, trigger phrases, and tags
- Clipboard History: Text items captured from your clipboard (only when clipboard history is enabled)
- Actions: Quick links and actions you configure, including names, targets, and icons
- Transforms: AI text transform definitions you create, including names and prompt templates
- TOTP Tokens: Authenticator secrets and metadata you import or create, stored in an encrypted local vault
- Usage Logs: Local records of which items you've used and when, to power recency sorting
- User Preferences: App settings and configuration
Where Data is Stored
- On-Device: All data is stored locally on your device using a private app database. TOTP authenticator secrets are stored in an encrypted vault and never leave your device.
- Cloud Sync (optional): If you create an account, your snippets, actions, transforms, push items, and device settings (such as whether push is enabled) are synced to our servers so you can access them across devices. Your account is identified by email address. TOTP secrets are not synced to our servers.
- Device Info: When syncing, your device name and type are stored on our servers to identify which devices are connected to your account
AI Features
Nibit supports AI-powered text transforms and dictation cleanup. When you use these features:
- Text Transforms: Text content (including selected text, clipboard context, and document context) is sent to our servers and forwarded to third-party AI providers to generate a response.
- Dictation: Voice input is processed using Android's built-in speech recognition. The app prefers on-device processing where available. Audio is not recorded or stored by Nibit.
Push Notifications
If you enable push features (Cloud Pro), Nibit uses a push notification service to deliver notifications to your device. Push notification payloads are end-to-end encrypted — our servers and the notification provider cannot read their contents. You can disable push notifications at any time in the app or in Android system settings.
Permissions
- RECORD_AUDIO: Required for voice dictation. The microphone is only accessed when you actively trigger dictation.
- CAMERA: Used to scan QR codes when importing TOTP authenticator tokens. The camera is only accessed when you initiate a QR scan. No images are stored.
- Accessibility Service: Used to detect the active app, expand snippet triggers, and insert text into input fields. Nibit does not log keystrokes or read screen content beyond what is needed to provide these features. No accessibility data leaves your device.
- POST_NOTIFICATIONS: Used to deliver push notifications for cross-device features. You can deny this permission or revoke it at any time.
- REQUEST_IGNORE_BATTERY_OPTIMIZATIONS: Nibit may ask you to exempt it from battery optimization so that push notifications and background sync are delivered reliably. This is optional and you can decline or change it in Android settings.
- INTERNET: Required for account sync, AI features, and push notifications.
- BILLING: Used for in-app purchases via Google Play.
Data Sharing
We do not sell or share your data with third parties. Specifically:
- No data is used for advertising. We explicitly disable the Android Advertising ID.
- No data is sold or monetized in any way
- Synced data is stored on our servers and is only accessible to your account
- AI requests are routed through our servers — we do not share your content with third parties beyond what is necessary to fulfill your request
Analytics
We collect anonymous product analytics to understand how features are used and to improve the app. This includes:
- Product analytics: We track product events such as feature usage, app opens, and install attribution. We do not track your behavior across other apps or websites. Analytics can be linked to your account if you are signed in, but we do not sell or share analytics data.
- Crash reports and performance monitoring: We collect crash reports and app performance data to identify and fix bugs. These may include device model, OS version, and stack traces, but do not include your content.
- What we do not do: We do not use analytics for advertising. We do not track you across other apps or websites. Usage logs for features like recency sorting are stored locally on your device only.
User Rights
- Access: View all your data within the app
- Export: Export your snippets and settings as a backup file
- Delete: Delete individual items or clear all local data
- Account Deletion: Contact us to have your account and synced data permanently deleted from our servers
Data Retention
- Local data remains on your device until you delete it or uninstall the app
- Synced data remains on our servers until you delete your account or the data otherwise expires. Some data, such as push items, may have a time-to-live and will be automatically deleted after it expires.
Children's Privacy
Nibit is not directed at children under 13. We do not knowingly collect data from children.
Changes to This Policy
We will notify users of any material changes to this privacy policy by updating this page.
Contact
For privacy concerns or questions, please email [email protected].
By using Nibit, you agree to this privacy policy.