NELAN Privacy Policy
Last updated: October 12, 2026
NELAN is a task, calendar, reminder, focus, and planning app published on Google Play by ZoroAstra. In this policy, "NELAN", "we", and "us" refer to the NELAN service as published by ZoroAstra. This policy explains what the NELAN Android app accesses, collects, uses, discloses, retains, and deletes.
User support and privacy-request handling are provided by Zarvaan: nelan@zarvaan.co.site
Summary
- Core task features work locally without an account.
- We do not sell personal data, show ads, or include a behavioral analytics SDK.
- Cloud sync, account services, and online AI require data to be sent to Google Firebase and Google Cloud services.
- Location, microphone, calendar, notification, and exact-alarm access is requested only for the related optional feature. Photos are read only when you attach one.
- You can delete local tasks in the app and permanently delete your account and associated NELAN cloud data.
Data NELAN handles
| Category | Examples | Purpose and destination |
|---|---|---|
| Tasks, events, and planning data | Titles, notes, dates, times, durations, priorities, categories, projects, subtasks, reminders, recurrence, completion history, focus state, tags, locations attached to items, and planning preferences or habit signals. | Stored in separate private device stores for the guest space and each signed-in Firebase account. Signing out hides that account's local data. If cloud sync is enabled while signed in, task and event records, sync metadata, streak, and Home focus state are sent to account-scoped Google Cloud Firestore storage. |
| Account data | Email address, Firebase user ID, sign-in provider, and Google profile name or email when Google sign-in is chosen. Firebase also processes IP address, app identifiers, and user-agent information for authentication and abuse prevention. | Used by Google Firebase Authentication for sign-in, account security, password reset, cloud ownership, and access to eligible online services. |
| AI inputs and outputs | Text submitted to Wise Capture; selected task titles and planning fields; dates, duration, priority, category, and device-local habit signals; and external-calendar busy time ranges without meeting titles or descriptions. In Task chat, a photo or PDF page you choose to attach is resized, re-encoded as a JPEG, and sent with your message. Requests can include the signed-in Firebase user ID, app/version identifiers, model name, and technical request metadata. | Sent through an authenticated, App Check-protected NELAN Cloud Function to Google's Vertex AI Gemini service only when an online Wise feature is used. An attached photo is sent only for that one request; NELAN does not keep a copy of it on its servers. The gateway verifies server-authored plan access and reserves the account's monthly and short-window request allowance before sending the prompt. Google processes the prompt to return a draft, review, breakdown, or plan. Generated results return to the app for review; NELAN does not apply generated changes without the feature's confirmation flow. |
| Diagnostics | Crash and ANR stack traces, app state, timestamps, installation identifier, app version, Android version, and device model. A problem-report email adds app/build version, Android version, and manufacturer/model. | Firebase Crashlytics receives automatic reliability reports. NELAN does not deliberately attach task, calendar, account, or location content to them. Problem-report emails are sent only after you choose to send them and may contain whatever you add or attach. |
| Purchases | Product, offer, purchase status, purchase token, and subscription entitlement. | Google Play processes payment details. NELAN does not receive full card details. The app sends the purchase token through an authenticated, App Check-protected Cloud Function, which verifies it with the Google Play Developer API before granting access. NELAN stores the verified entitlement and a one-way token hash linked to the Firebase account to provide and restore paid features and prevent the same purchase being claimed by another account. |
| AI content reports | The displayed generated-output excerpt, selected report reason, optional details, app version, report status, and submission time. | Sent only when you submit Report AI content. The private Firestore moderation record does not store your email or Firebase user ID, although Firebase processes authentication, App Check, IP, and request metadata to secure the submission. |
| Security and configuration | Play Integrity attestation token, Firebase/App identifiers, SDK and device metadata, remote feature flags, and account-scoped AI request-count records. | Firebase App Check helps reject unauthorized clients. Firebase Remote Config safely controls online-feature availability. Server-owned Firestore records enforce monthly and rolling per-minute limits across devices; the app cannot modify or reset those authoritative records. |
Live voice and Quick Start
Talk with NELAN is an optional live AI conversation for eligible paid Pro accounts. After the voice disclosure and microphone permission, microphone audio, recognized text, responses, and task or event context requested by supported tools are sent through NELAN’s authenticated Cloud Run relay to Google Cloud’s Vertex AI Live service. This can include event names and dates when you ask about events. End or close the conversation to stop streaming; NELAN does not listen in the background. Drafts need your confirmation to save.
Recent conversation text stays in memory during the dialog. NELAN does not store voice recordings in its database. Google’s processing and security logging follow its service terms and data governance policies. Account-scoped counters, connection leases and signed tickets enforce voice allowances; they contain no recordings. Technical logs can include error codes and usage metadata. Content excerpts are stored only when you submit an AI content report, as described above.
Quick Start in the app and website uses prepared narration and sample screens, not your real tasks or a live AI conversation. It needs no microphone access, sends no voice for analysis, and consumes no AI or voice allowance. Website hosting receives ordinary HTTP request information to serve the guide. Playback starts when you choose Start.
Optional device permissions and external services
- Microphone: Wise Voice Capture starts only after you tap it and grant permission. Android's speech-recognition service processes the audio and returns a transcript. NELAN does not save an audio recording. The transcript may be sent through the NELAN Cloud Function gateway to Vertex AI when Wise Capture is used.
- Photos and camera: NELAN reads a picture only when you attach one in Task chat, either by choosing it in Android's photo picker or by taking it with your device's camera app. NELAN does not request broad photo-library or camera permission and cannot browse your other photos. The picture is resized on the device and sent through the NELAN Cloud Function gateway to Vertex AI to answer that request, and is handled by Google under its Vertex AI terms. Do not attach pictures that contain information you do not want processed this way.
- Precise or approximate location: used for a one-shot current location during an app session, weather, and location picking. Coordinates may be sent over HTTPS to Open-Meteo for weather and to OpenStreetMap/Nominatim for place labels. Map tile requests also disclose network and viewed-map information to OpenStreetMap infrastructure. NELAN does not request background location.
- Calendar: with permission, NELAN reads the names, account labels, event titles, and times of calendars already synced to Android. This supports the calendar display, conflict warnings, and availability. NELAN never writes to an external calendar. AI receives only busy time ranges. If you explicitly import an external event, the copied NELAN event follows the local and cloud rules above.
- Notifications, vibration, exact alarms, and boot events: used to deliver reminders at the requested time and re-arm them after reboot, time, timezone, or app-version changes.
- Network: required for account, sync, AI, weather, maps, support, subscription, and optional Home wallpaper features. When wallpaper display is enabled, NELAN downloads and locally caches a Bing daily image; Microsoft receives normal request data such as IP address and user-agent information. See the Microsoft Privacy Statement.
Where data is stored and disclosed
Local app data is stored in NELAN's private Android storage and separated by guest or signed-in account ownership. If an upgrade finds data written by an older NELAN version to a shared device store, the app keeps it hidden until the user explicitly assigns it to the current account or the guest space. If Android backup or device transfer is enabled, Android may back up or transfer this local app data under your Google account settings; Firebase authentication session material is excluded from NELAN's Android backup rules.
We disclose data only as needed to operate requested features: to Google and Firebase for authentication, Firestore, Cloud Functions, Crashlytics, App Check, Remote Config, AI, Play Billing, speech recognition, and Android backup; to Open-Meteo and OpenStreetMap for weather/location/maps; to Microsoft for optional wallpapers; to your email provider and ours when you contact support; and when legally required. These providers process data under their own terms and privacy policies. We do not sell data or disclose it for cross-app advertising.
NELAN Cloud Functions and Vertex AI use are governed by Google's cloud and generative-AI service terms. Depending on project configuration, Google may retain sampled prompts, generated responses, and usage or performance metadata in Cloud Logging for AI monitoring. Avoid placing highly sensitive information in task text submitted to an online AI feature. See Vertex AI data governance and Google's Privacy Policy.
Retention and deletion
- Active local tasks, events, settings, and planning data remain until you edit or delete them, clear NELAN data, or uninstall without restoring a device backup.
- Full completed-task content is retained locally for the 3–12 month period selected in Settings. After that, titles, notes, locations, and other task content are removed; content-reduced monthly completion and behavior totals may remain for Insights.
- Account-scoped cloud data remains while the account and sync data are active, until records are deleted through app use or the account is deleted. Service-provider operational backups and diagnostic records follow the provider's security and retention schedules.
- Support emails are retained as needed to answer the request, prevent abuse, and meet legal obligations. You may ask us to delete a support conversation when applicable.
- AI content reports are kept only while needed to investigate, improve safeguards, document moderation action, and prevent repeated unsafe output, then removed according to the moderation schedule.
- Account-scoped AI allowance records retain the current month's request count and short rolling rate-limit timestamps. They are replaced for a new month and deleted when the NELAN account is deleted.
To permanently delete a signed-in account, open Settings → User profile → Delete account. After cloud deletion succeeds, this deletes the Firebase Authentication login, NELAN cloud backups and synced account data, the account entitlement, AI-usage, and purchase-verification security records, and that account's data and reminders from the current device. It does not delete the isolated guest space or another account's device data. If you cannot use the app, visit the NELAN account-deletion page. Support cannot remotely erase local-only data on a device it cannot access. Deleting a NELAN account does not cancel a Google Play subscription; cancel it separately in Google Play.
Security and international processing
NELAN uses HTTPS for network requests, Firebase Authentication and account-scoped access rules, App Check with Play Integrity, and restricted app storage. No system is perfectly secure. Service providers may process data in countries other than yours, subject to their contractual and legal safeguards.
Children
NELAN is not directed to children under 13, and we do not knowingly collect personal data from a child under 13. Contact us if you believe a child provided personal data so we can investigate and delete it.
Your choices and policy changes
You can use core features without an account, deny optional permissions, select which calendars are read, disable cloud sync or optional wallpaper display, clear AI context data, adjust completed-task retention, delete tasks, and delete your account. Permission choices can also be changed in Android Settings.
We may update this policy as NELAN changes. The updated date above will change, and material changes will be communicated in the app or store listing when appropriate.