Privacy

Draft for user and legal review before launch.

This notice describes current newsletter practices, desktop downloads, beta app analytics, and error reports. It is not a final privacy policy and may change before public launch.

When you subscribe to the newsletter we collect your full name, email address, optional nursing program (ADN, BSN, MSN/DNP, or Other), and optional school name.

We also store a website source value, a consent version that records the disclosure shown beside the form when the address was first submitted, a consent timestamp, and non-PII confirmation-email delivery metadata.

The newsletter database does not store note content, health information, IP addresses, user-agent strings, or Cloudflare Turnstile challenge tokens.

Cloudflare Turnstile, Vercel, Supabase, GitHub, PostHog, and Sentry may process technical request data under their services.

When you are signed in to the Nexly Notes beta app, we record usage and performance events, such as opening a note or how long a suggestion took to appear, and store them in Supabase.

Each event holds an event name, your account user id, and limited metadata: a metric name, a number, and an internal note identifier (not the note title). Events never include note content.

Beta release builds may also send these same events to PostHog for product analytics such as retention. Events are sent only while you are signed in; nothing is sent while you are signed out.

Some events record that you used a specific button or feature, such as choosing a Boost option or changing the library view. Automatic click capture is turned off, so other clicks and taps are not recorded.

PostHog never receives note content, your name or email address, page URLs, referrers, device details, or session recordings. PostHog keeps an identifier in your browser's local storage so it can link events to your account.

We configure our PostHog project to discard client IP addresses rather than store them.

Beta release builds send a report to Sentry when the app hits an error or crashes, whether or not you are signed in.

Each report holds the kind of error, where in the app code it happened, the app version, whether it came from the website or the desktop app, and the name and version of your browser or operating system. If part of the desktop app crashes, the report says only which part stopped and why, never what it held in memory.

Error reports never include note content, error messages, your account user id, your name or email address, page URLs, or session recordings.

We configure our Sentry project not to store IP addresses.

We use newsletter details to send occasional product update emails and one transactional confirmation email when you subscribe.

Subscribing does not create a Nexly Notes account, grant access to the app, or reserve a place.

You can unsubscribe at any time by replying to a newsletter email or emailing support@nexlynotes.com.

An existing email is treated as the same signup rather than a new row.

Vercel hosts the website.

Supabase hosts the newsletter API and stores newsletter records in the existing Nexly project.

Cloudflare Turnstile provides bot protection. Tokens are verified on the server and are not stored.

Resend sends the confirmation email from a verified nexlynotes.com sender, with support@nexlynotes.com as the reply-to address.

GitHub Releases serves the desktop app downloads. The download page also asks GitHub's public API for the latest release from your browser, so GitHub receives your IP address and browser details under GitHub's privacy statement.

PostHog provides beta product analytics. It receives your account user id, event names, and the limited event metadata described under Beta app analytics.

Sentry provides error monitoring. It receives only the error reports described under Error reports.

Questions about this notice can be sent to support@nexlynotes.com.