Nodus Reader privacy

When you import a document, Nodus Reader creates a copy in its private app storage. It keeps the document, its cover and metadata, collections, reading progress, bookmarks, highlights, notes, pronunciation rules and reading preferences. The original file you selected is not changed or deleted.

Generated narration can be cached on the device for later playback. Voice models, downloaded voices, generated audio and document-processing caches are not synchronized with iCloud. Device backups are handled separately by Apple according to your settings; downloaded models and generated caches are excluded from backup.

Document extraction, text recognition, PDF reading order and narration run on your device. Books and audio are not sent to an external service for processing.

On supported devices, recaps, character summaries and automatic Immersive Audio scene selection use Apple Intelligence’s on-device model. Nodus Reader does not use Private Cloud Compute. These features process the relevant reading passages locally and store their results on that device.

Precise word timing uses Apple’s on-device speech recognition to analyze narration generated by the app. It does not record ambient sound.

On Mac, you can create a Ming voice from a recording or an audio file you choose. Microphone recording starts only after you select Record and grant permission. The reference clip, transcript and voice data stay on that Mac and are not synchronized. You can delete a custom voice in Studio.

Synchronization is off by default. When you enable it, Nodus Reader uses your personal iCloud account: a private CloudKit database stores library metadata, collections, reading positions, annotations, pronunciation rules and preferences; iCloud Drive stores documents and covers.

Nodus Research does not operate a library server or have access to your private iCloud library. Apple provides these services under its own terms and privacy policy.

Voice models, downloaded voices, custom voice recordings, generated audio, document-processing caches, Hugging Face credentials and device-specific settings are not synchronized. Turning synchronization off keeps the local library available; it does not delete copies already stored in iCloud.

Nodus Reader connects to external services for the following purposes:

• Voice models and voices: downloads from Hugging Face when you choose a model. Some Phonon models require you to accept the publisher’s terms and sign in with your own Hugging Face account.
• Hugging Face sign-in: authentication takes place on Hugging Face’s page. Nodus Reader does not see your password. An access token is stored in the device Keychain and sent only to Hugging Face. You can remove it in the app or revoke access in your Hugging Face account. Hugging Face can retrieve the app’s public sign-in configuration from jsDelivr.
• Immersive Audio: optional music and ambience packs download from Hugging Face or the project’s GitHub release. The app checks its public sound catalog while the feature is in use or when you select Check now. Audio packs are downloaded when you request them and can then play offline.
• Shared web content: when you share a web page or file link to Nodus Reader, the Share Extension requests that content from its source website so it can be imported.
• Apple services: optional iCloud synchronization and, where needed, the operating system’s download of a speech-recognition model for word timing.
• Links you open: the privacy policy, support pages, source code and model pages open in your browser.

These services receive the information needed to handle their requests, such as network connection details and, for authenticated Hugging Face requests, your access token. Their privacy policies apply to those connections. Nodus Reader does not attach library content, reading activity or analytics to model and sound-pack requests.

The document picker provides access to files you select. The photo picker provides the image you choose as a cover. Nodus Reader does not request access to your location, contacts, calendar, health data or camera.

Narration uses the device’s audio playback facilities, including background playback and lock-screen controls. Microphone access is used only for a voice recording you start on Mac. Permissions can be managed in system settings.

Deleting a book removes its local document copy, library data and generated narration. When synchronization is enabled, the deletion is also applied to your iCloud library after confirmation. Your original imported file remains unchanged.

Remove Download deletes the local document copy while keeping the book in iCloud. Generated audio, downloaded models, sound packs, custom Mac voices and local scene analyses can be removed separately in their settings. Deleting a collection does not delete its books.

On iPhone and iPad, deleting the app removes its local container. On Mac, removing the application may leave library files and preferences behind; use the app’s library and storage controls to manage those data before uninstalling. Copies in iCloud and device backups are managed separately. Keychain credentials may remain after the app is removed; you can remove the token in the app before uninstalling or revoke its access through Hugging Face.

Apple handles App Store distribution, iCloud and system diagnostics under its own policies. During TestFlight testing, Apple may share crash reports, testing information and feedback you submit with the developer. Nodus Reader does not include a separate analytics or crash-reporting SDK.

If you contact support, the information you choose to send is handled by the email or support service you use. Do not include private documents or access tokens in a public issue.

For privacy questions, contact contact@nodusresearch.com. For product support, use the Nodus Reader issue tracker.

Changes to this policy will be published here with an updated date.

Related notices: website privacy and cookies and local storage apply when you visit this website.