nod.
Open Nod →العربية

Nod Privacy Policy

Effective date: 21 October 2026.

Operator: Stuck In The Sand LLC, doing business as Unstuck Labs, 3100 Clarendon Blvd., #800, Arlington, Virginia 22201, United States. Privacy contact: hello@unstucklabs.com.

Nod lets adults connect in person, then ask a connected person to approve a short, specific question with a passkey. This notice covers the Nod website and iOS and Android apps. A passkey approval is not a legal identity check, deepfake test, or guarantee that a call or payment is safe.

What we collect

Your private passkey key remains with your passkey provider or device. Nod does not receive your fingerprint, face scan, screen-lock PIN, or private passkey key. Your passkey provider may synchronise credentials across devices under its own policies.

Optional app waitlist

The optional iOS/Android waitlist collects your email address, selected platforms, signup time and launch-email consent. We use it only for the requested app launch notifications and managing the list. This is separate from a Nod account; joining does not create an account or verify ownership of the email address. You can withdraw consent or request removal at hello@unstucklabs.com. We delete waitlist entries from the active database after 12 months from signup or 30 days after the last recorded launch notification, whichever comes first, with daily cleanup. Account deletion does not remove a separate waitlist entry; contact us to remove it.

Permissions and information we do not request

The native app requests camera access only when you choose to scan an in-person pairing code. Scanning is processed on your device; camera images are not uploaded or retained by Nod. You can paste a pairing link instead. Nod does not request location, microphone, address-book contacts, photo-library access, or access to your messages. It does not record calls, run advertising, use advertising identifiers, or include behavioural analytics or tracking SDKs.

When you share a Nod link, you choose the messaging app and recipient. That service handles the message under its own policy. The link identifies a check; it does not grant access or authorise an approval. The recipient must use an account you already connected with in person.

Why we use information

We use account, connection and check information to provide the service you request; establish and verify connected passkeys; route checks; show results; prevent replay and abuse; operate account controls; and provide support. We use access records to protect and operate Nod. We do not sell personal information, share it for cross-context behavioural advertising, or use it for targeted advertising.

Where European or UK data-protection law applies, the relevant bases are performance of our agreement with you for the service; our legitimate interests in security, abuse prevention and limited operational support; and legal obligations when applicable. Optional launch emails use your consent, which you may withdraw. A device permission is not blanket consent to unrelated uses. Where we need consent for a new optional use, we will ask first and explain how to withdraw it.

Who receives information

Your connected person receives the names, connection details, check question and result needed to use Nod. Supabase supplies the backend and database in the United States (currently US East/Ohio); the website hosting provider and platform providers process information necessary to host or distribute the service. Apple, Google and your chosen passkey provider handle their own platform functions. Messaging services receive links only when you choose to share them.

We may disclose information where legally required, to address a security incident or protect rights, or in a business transfer subject to applicable law and appropriate notice. We do not give contacts access to unrelated checks. No system can prevent someone from retaining a screenshot or message outside Nod.

Retention and deletion

The reply window is 90 seconds. Expiry ends the validity of a check; it is separate from deletion of its record. Check records are scheduled for deletion from the active database after 30 days, with daily cleanup. Expired authentication challenges and sessions are cleaned up after approximately 24 hours, with daily cleanup. Active account and connection records are kept until the account or connection is removed. Signed pairing evidence needed for an active connection remains while that connection exists. Unneeded pairing evidence is cleaned up after the pairing deadline passes: approximately 24 hours for incomplete connections, or 30 days for completed connections no longer in use.

“Delete my Nod” requires fresh passkey confirmation and removes your account, sessions, connections, policy-acceptance records and associated checks from the active Nod database. It also removes shared check records from your connected contacts' Nod history and the local identity and stored pins from that app/browser. Removal does not erase copies other people made outside Nod or passkeys retained by your platform provider. You can remove a retained passkey in the provider's settings.

Provider backups and technical logs may retain information for their normal security and recovery cycles. Those copies expire according to the provider’s applicable backup and log schedules; they are not part of the ordinary check history. Contact us for information about the schedules applying to the service. An active-database deletion does not mean immediate erasure of every recovery copy or security log. Any legally required retention will be limited to the information and duration required by law.

Security

Nod uses HTTPS, server-side access checks, short-lived sessions, context-bound passkey proofs, public-key pinning and database access restrictions. These measures reduce certain risks; they do not make Nod immune to compromise or prove physical presence remotely. Passkeys can sync, a device or provider account can be compromised, and a person can approve the wrong question. Never treat an approval as authority to transfer money, disclose secrets, or ignore other signs of fraud.

Your choices and rights

You can disconnect a contact, lock Nod, export your account data, or initiate account deletion from settings. The website provides an account-deletion path at `/delete-account.html`. If you lose access to your passkey, contact hello@unstucklabs.com; we will explain a proportionate way to verify a request and will not ask you to send a private key or passkey secret. We cannot restore a deleted account or bypass a passkey to verify identity.

Depending on applicable law, you may have rights to access, correct, delete or receive a portable copy of personal information, restrict or object to processing, withdraw consent, and appeal a denied request. We respond within the period required by applicable law and may verify your authority before acting. You may authorise an agent where law permits. You will not be discriminated against for exercising privacy rights. You can complain to the relevant data-protection authority or privacy regulator.

If California privacy law applies, the categories above include identifiers and internet/network activity; we collect them directly from you, your device, connected contacts and service providers for the purposes described. We do not sell or share personal information as those terms are defined for cross-context advertising, and do not use sensitive information to infer characteristics about you. Because Nod has no advertising or tracking uses, a Global Privacy Control signal does not require us to disable a use we do not perform. It does not prevent essential service and security processing.

International users

Information may be processed in the United States and other places where providers operate. This initial release is intended for adults in the United States. If data-protection law in another place applies to you, you may contact us about your rights and the safeguards relevant to your information. We will establish any additional safeguards or representatives required before specifically offering the service in a jurisdiction that requires them.

Age, changes and contact

This release is for people aged 18 and older. It is not directed to children. If you believe a child has provided personal information, contact us so we can investigate and take the action required by law. An age statement does not replace obligations that apply if we learn a child is using the service.

We will update the effective date when this policy changes and provide additional notice for material changes where required. For questions or rights requests, contact hello@unstucklabs.com.

Optional app notifications

If you enable app notifications, we store a delivery token, a hashed installation identifier, platform, language and last registration time to alert you to incoming Nods. Tokens are removed when you turn off alerts in Nod, delete your account, the provider reports an invalid token, or after 90 days without registration. Delivery jobs are removed after 24 hours. Expo, Apple and Google process notification delivery data; our alert text does not contain the sender’s name or question. Delivery data includes the request identifier and expiry time. Alerts are optional, may be delayed or suppressed by device settings, and never approve a check. Foreground chimes play on your device; Nod does not record audio.