Privacy policy

Nimbus is a desktop browser with an AI agent. In this policy, "Nimbus", "we" and "us" mean the team that makes Nimbus.

This page says what the Nimbus app and this website collect, where it goes and what you can do about it. If something here is not clear, write to anil@usenimbus.app.

In short

• Nimbus keeps your browsing, your Memory and what you type on your computer, not on our servers.
• When the agent works, Nimbus sends your request and the page to the AI provider you chose. It does not go through us.
• If you sign in, we keep your email address and your plan.
• Dodo Payments takes your card. We never see your card number.
• When Nimbus has an error or crashes, it sends a report to Sentry. It first removes the personal data that it can find.
• We do not sell your data. Nimbus has no ads and no ad trackers.

What stays on your computer

Nimbus keeps these in its folders on your computer. It does not upload them to us. The one exception is a crash report, which can hold parts of them. See Error and crash reports.

• Your browsing: history, cookies, sign-ins to websites, tabs and sessions.
• The logs of your agent tasks.
• Your model API keys, in the settings file of Nimbus.
• Your Nimbus sign-in, if you sign in: your email address, your name, your plan and the tokens that keep you signed in. Nimbus encrypts them with a key that your system keeps, such as the Keychain on a Mac. Your ChatGPT sign-in and a Jev key are kept the same way. Sign out, and Nimbus removes your Nimbus sign-in from the computer.

Memory

Memory is part of Pro. It runs on macOS only, and it is off until you turn it on.

When Memory is on, it records your browsing in Nimbus. It reads your Codex and Claude Code sessions and their commits. If you allow Accessibility, it records other apps too. It skips password fields, and the apps and sites on its never list. You can change the list in Settings.

• It keeps an index of your tasks on your Mac. It can also keep a copy as Markdown files on your Mac. You can turn the copy off in Settings, with "Keep a copy as Markdown files".
• It seals what you type, click and copy in a separate store on your Mac. The Keychain protects the key of that store. Memory keeps it for 30 days. It never puts it into the index, a model request or a log.
• It keeps the events it records for about 30 days. Your threads and notes stay until you delete them.
• Forget removes one item, an activity, a day or a thread. "Erase all memory" in Settings removes everything that Memory keeps.
• If you connect your own agents to Memory's local server, they can read your threads. They cannot change them. What those agents do with what they read is up to them and their providers.

What leaves your computer

To the AI provider you choose

The agent works by asking an AI model. At each step, Nimbus sends the model what it needs for your task: your request, the text and layout of the page, screenshots of the page, the earlier steps of the task, and files you attach.

This goes from your computer to the provider you set up in Settings: Google (Gemini), OpenAI, Anthropic, OpenAI through your ChatGPT subscription, or a model server that you add. It does not go through us. The terms and privacy policy of that provider apply.

Memory's notes each night

Notes are off by default. If you turn them on, Nimbus sends the record of each day to the model you choose for notes. The request holds what you asked your agents in each task, the last answer of the agent and the subjects of your commits. It never holds pages, apps, or what you typed, clicked or copied. Nimbus holds back text that looks like a secret.

Jev, if you turn it on

Jev is an optional model that helps the agent choose a control on a page. It is off unless you add your own Jev key and turn it on. Then Nimbus sends Jev the address and title of the page, the step to do and the controls it can choose from. If Memory uses Jev to sort your browsing into tasks, Nimbus sends it short titles of the pages and of your tasks. It sends no page addresses and nothing you typed.

Error and crash reports

When Nimbus has an error or crashes, it sends a report to Sentry, a service for error reports, in the United States. A report holds the error, the place in the code where it happened, recent events in the app, the version of Nimbus, your system and its version, and a random ID made for this copy of Nimbus.

If Nimbus crashes, the report can include a crash dump. That is a copy of part of the program's memory at that moment. It can hold parts of what Nimbus was showing or working on.

Before a report leaves your computer, Nimbus removes the email addresses, passwords, keys and tokens that it can find. It removes text that came from Memory. It never sends a picture of a window. It never sends the crash dump of Memory's engine. Nimbus also tells Sentry when it starts, and whether that run ended in a crash, so that we can count crashes.

Error reports are on in every copy of Nimbus. Nimbus has no setting to turn them off yet.

Updates

When Nimbus starts, it asks our release server whether a new version exists. If one does, Nimbus downloads it. The server passes on files from GitHub and stores nothing about you.

Your plan

If you are signed in, Nimbus asks our account server for your plan when it starts, and every 6 hours while it runs. It also asks the server when you start a trial, upgrade or manage your subscription.

Websites you visit

The websites you open in Nimbus see your visits as they would in any browser. Their own policies apply.

Your Nimbus account

You need no account for the browser and its agent. You need one for Pro, a trial or a founding membership.

Sign-in runs through WorkOS. You sign in with Google or with a one-time code sent to your email. WorkOS keeps your sign-in: your email address, your name if it has one, and how you sign in. If you use Google, Google shares your name and email address with WorkOS.

Our account server runs on Cloudflare and keeps its data in a Cloudflare database. For each account it keeps:

• your WorkOS user ID, your email address and whether WorkOS verified it;
• your place among the founding members, if you have one;
• the length of the trial you can still start;
• your Dodo Payments customer ID and, for each subscription, its plan, status, seats, next billing date, the end of its trial and whether you cancelled it;
• changes to your balance of Nimbus credits, once credits are on sale;
• extras that we give by hand, such as a promotion;
• when each of these was made or changed.

When your account is made, the server checks your email against our waitlist, if WorkOS verified it. It only learns your founding place, or that you are on the waitlist. That sets your trial length. It also keeps the ID and type of each message that Dodo Payments sends it, so that it handles each one once.

Cloudflare keeps logs of the requests to our account server for a short time, so that we can find errors.

Payments

Dodo Payments is our merchant of record. It sells Nimbus plans to you as the seller, takes the payment and handles the tax. Its checkout and its subscription pages run on its own site.

You enter your card and billing details on the Dodo Payments page. We never see your card number.

To open a checkout, we send Dodo Payments your email address, your Nimbus account ID, the plan and the length of your trial. Dodo Payments then tells our account server your customer ID, your subscription, its status and its dates. The privacy policy of Dodo Payments applies to what it collects.

The waitlist and the founders wall

If you joined our waitlist, we keep your email address, the form you used, the time you joined, your browser's user agent, the address of the page you signed up on, and your country. The country comes from Cloudflare. We keep no finer location.

When you joined, Cloudflare Turnstile checked that you were a person. For that check, our server sent Cloudflare your IP address. Our server also used your IP address to limit how often one address could sign up. Your IP address is not in our waitlist.

The first 500 people who joined are our founding members. We keep their place, email address and sign-up time in a separate list that does not change.

The founders wall on our pricing page shows each place with only the first character of the address and the month of joining. It shows the ending of the address, such as .com, only when at least five founders share it. It hides everything else. To have your place hidden, write to us.

This website

usenimbus.app runs on Cloudflare. It sets no cookies and runs no analytics scripts. Its fonts come from Google Fonts, so your browser asks Google for them when a page loads. The download buttons take you to GitHub.

Who else handles data

How long we keep data

• Your account data: while you have an account.
• Your waitlist entry: until you ask us to remove it.
• Error reports: Sentry deletes them after a limited time.
• What is on your computer: until you delete it. Memory follows the limits above.

Your choices

• Use the browser and the agent without an account.
• Leave Memory and its notes off, or turn them off at any time.
• Use Forget or "Erase all memory" in Settings.
• Sign out in Settings, then Account.
• Cancel your subscription in Settings, then Account, then Manage subscription.
• Ask us for a copy of the data we keep about you, to correct it, or to delete it and your account. Write to anil@usenimbus.app. Dodo Payments keeps its own records of your payments under its own policy.

Changes to this policy

When Nimbus starts to collect or send something new, we change this page first and change the date at the top.

Contact

Nimbus
Email: anil@usenimbus.app