Privacy on NetworkOS
← BackNetworkOS holds your private notes about the people you know. Notes like that only work if they stay private, so this page says plainly what we store, who can see it, how it's encrypted, and how to delete it. This page is a commitment: if it ever changes, it will be to give you more control over your data, not less.
The short version: your notes are visible to you and no one else, and encrypted with a key unique to your account. They are never sold, never shown to other users, and never used to train AI. The founder does not read them. When you delete your account, your data is actually removed.
What we store
- Whatever you choose to add: the people you save, and any notes, details, photos, or screenshots you attach to them.
- Your email address, to sign you in, but not a password.
- Basic product events (for example, “a note was created”) to see whether features work. These never include the content of your notes.
Who can see your data
Only you. Every account's data is kept completely separate. The database itself[1] refuses to hand one account any data belonging to another, even if there is a bug in our code. We cover this with automated tests that run against the live system.
Your notes are never shown to other users. There is no feed, no matching, no discovery. Photos and screenshots are stored privately[2] and are only accessible to you while signed in.
We do not sell your data. Not to advertisers, not to anyone.
How your data is encrypted
- In transit, while it moves between your device and our servers, it is encrypted with HTTPS[3].
- At rest, your content is encrypted twice. Once on disk by our infrastructure provider[4], and once by us: your content is encrypted with a key unique to your account[5] before it reaches the database. If someone opened the database directly, they would see unreadable ciphertext where your names, notes, and details should be.
- Signing in is handled by a trusted authentication service[6]: a magic link sent to your email, or Google sign-in. We never see or store a password.
How AI is used, plainly
NetworkOS turns raw notes into something useful. Save a messy note about three people you just met, and it sorts them into separate contacts, details, and follow-ups. Search “who do I know in climate” and it finds the right people even if you never used that word. That work is done by AI (Anthropic's models).
To do it, the app decrypts your note in memory and sends it to Anthropic's API. That content is not used to train their models. The result comes back to you and your data is stored encrypted again. This only happens when you take an action, like saving a note or running a search, never in the background.
Looking people up on the web (optional)
Capture has an “Enrich from the web” switch. It is off by default and applies only to that capture; nothing is ever looked up unless you turn it on. When you do, NetworkOS searches the public web (via the same AI provider) for things like a contact's role, company, and public links, using the name and details you already saved to find the right person.
What it finds waits for your review on that contact's profile, each item with its sources, and is never added to a contact unless you accept it. You can reject anything, and undo an acceptance. Pending findings are stored encrypted with your account key, the same as your notes, and are deleted with your account like everything else. The search reads public web pages only, and only the contact's name and basic details (role, company, links) are used as search terms. Your notes themselves are never published or shared anywhere in the process.
Texting with Network (SMS)
NetworkOS can give you a phone number to text — save it as “Network” and text it anyone you meet: a name and number, a screenshot, a forwarded message, or a contact card. Texting is optional, and it only works one way: we receive exactly what you choose to send to that number, and nothing else. Forwarding a message shares that one message. We cannot see your other texts, your message history, or who you talk to.
What you send is used for one purpose: building your records. Your message is delivered by our messaging provider (Twilio), read by the same AI that processes your in-app notes (Anthropic's models — your content is not used to train their models), turned into a contact, note, or task, and then stored encrypted like everything else. Screenshots and photos you text us are stored encrypted on the contact they belong to, and are deleted when you delete that contact or your account.
Your phone number and the content of your messages are never shared with third parties or affiliates for marketing or promotional purposes. Message frequency varies based on how you use it. Message and data rates may apply. Text STOP at any time to stop all messages, or HELP for help.
The founder does not read your notes
In the database, your content is stored as unreadable ciphertext, and the master key that could unscramble it lives outside the database, so a stolen database or backup is useless on its own.
There is no tool that surfaces your notes to the founder, and the founder does not read them. What we can see is the shape of usage (that an account exists, when it was last active, how many contacts it holds), never the content of what you wrote.
Deleting your data
You can delete your account any time from Settings. Deletion removes your data from the live system and destroys your account's encryption key. Destroyed, not hidden. Copies that exist in routine backups are unreadable without that key and age out on a rolling schedule.
For the technically curious
- Row-level security (RLS) in PostgreSQL: a database feature that filters every query by account, enforced by the database engine itself, not just by application code.
- Private storage: photos and screenshots are kept in a non-public bucket and encrypted with your account key. They are only reachable through an authenticated request tied to your account, never a public link.
- HTTPS (TLS): encrypts data traveling between your device and our servers.
- Encryption at rest: stored data is also encrypted on disk by our database and storage provider (Supabase).
- Application-layer encryption: we encrypt your content with AES-256-GCM, using a data key unique to your account that is itself wrapped by a master key held outside the database. The “GCM” part adds a tamper check: if encrypted data is altered, decryption fails entirely rather than returning wrong information.
- Authentication: login is handled by Supabase Auth; Google sign-in uses OAuth. We never see or store your password.
Last updated: 9 July 2026 (added the web-enrichment section).