Privacy Policy

Last updated October 24, 2026

Nod has no accounts. Your health answers stay on your phone, and the camera never records. We collect a random app id, usage events and crash reports to run reminders, improve the app and measure our ads. We never sell your data.

Who we are

Nod: Neck Pain Relief (“Nod”) is an iPhone app made by Jordan Gaston (“we”). This policy covers the Nod app and this website.

What stays on your phone

What you tell Nod about your health is stored only on your phone: your safety answers, pain levels, the spots you mark on the body map, how your neck feels, your neck score and your head-turn measurements. We never send these to our servers or to any other company. Your training plan, the details of each session and check-in, and your other settings also stay on your phone. We send only the dates and counts listed below.

The head-turn test and head tracking during sessions use the front camera and Apple’s ARKit face tracking. ARKit face data is used only to measure the angle of your head, live, on your phone. It is never stored, shared or used for advertising. Nod never records, saves or uploads video or photos.

What we collect

A random app id. Nod creates a random id when you first open it and keeps it in your iPhone’s Keychain, so a reinstall keeps your subscription. It is not tied to your name, email, phone number or Apple ID. It links the data below to your copy of the app.
Reminder data. If you allow notifications, Nod registers with our reminder server so reminders keep arriving when the app is closed. The server stores your app id, a push token, your platform and app version, your time zone, your reminder time, when you last finished a session or check-in, and, if you subscribe, your plan, trial start date and trial length. It uses these only to decide when to send a reminder. Like most web servers, it also logs each request, including your IP address and app id; its job queue also keeps a copy of recent reminder jobs. We keep these logs and old jobs for a limited period and clear them on a rolling basis.
Usage events. We record how people use the app: onboarding steps, screens viewed, sessions started and finished (with the session type, minutes and number of moves), check-ins done, reminders opened, paywall views and purchases. These events carry your app id and device details such as model, iOS version, app version, carrier and screen size. They never include your health answers or scores.
Crash reports. When the app crashes or hits an error, it sends a report with the error, device model, iOS version and app version, plus app session start and end times. Reports carry an anonymous Sentry id, but no health answers, screenshots, app id or record of what you tapped.
Purchases. When you subscribe, Apple handles payment. We never see your card details. We receive your subscription status, plan and price.

We never sell your personal information. We share data only with the service providers that help us run Nod:

Mixpanel receives the usage events above for product analytics. We turned off Mixpanel’s location lookup from your IP address, and we send no profile details about you.
Meta and Google (Firebase) help us measure our ads. From our code, each receives only three events: onboarding completed, trial started and purchase, with the plan, price and currency. Each SDK also sends device details and an anonymous id of its own. Firebase adds its standard automatic events, such as first open, app sessions, screen views and in-app purchases, and estimates a rough location from your IP address. Neither receives your health answers or the detailed events we send Mixpanel. Meta’s automatic events are off.
App tracking. Nod asks for your permission through Apple’s tracking prompt. If you allow it, Meta and Google may use your device’s advertising identifier to link these events to the ad that brought you to Nod, and Google may use them to personalize ads. If you decline, we never share your advertising identifier, Meta processes the events in its limited mode, and Google’s ad storage and ad personalization stay off. You can change this anytime in iOS Settings → Privacy & Security → Tracking.
RevenueCat manages subscriptions for us. It receives your app id, purchase history and device identifiers (the advertising identifier only if you allowed tracking). It may pass subscription events, such as renewals, to Mixpanel, Meta and Firebase so we can measure which ads lead to subscriptions.
Sentry receives the crash reports above.
Apple processes payments and delivers notifications. Expo relays notifications from our server to Apple and delivers app updates; to check for updates, the app sends Expo its platform, app version, the id of the update it is running, a random install id and, if the app crashed at startup, the error message. Our cloud hosting provider runs the reminder server and keeps its logs. PlanetScale hosts its database in the United States.

Each provider may use the data only to provide its service to us, under its own privacy policy. Our providers process data in the United States. We may also disclose information when the law requires it or to protect the safety of our users.

Your choices

Delete all data. In the app, go to the You tab and tap Delete all data. This erases your health answers, training plan, sessions and check-ins from your phone. It also deletes your record on the reminder server. Nod registers again only once you finish setting it up again and notifications are allowed; the new record holds only your app id, push token, time zone and reminder settings. Your app id and subscription stay, so you keep Nod Plus. Data already sent to Mixpanel, Meta, Firebase, RevenueCat and Sentry is not erased by this button; see below.
Notifications. Turn them off in iOS Settings and the reminders stop. Our server deletes your reminder record when Apple reports that Nod is no longer installed, when you tap Delete all data, or when you ask us.
Tracking. Allow or decline in Apple’s prompt, and change it later in iOS Settings.
Deleting the app removes your health data from your phone and stops all collection. Your app id stays in your iPhone’s Keychain, so a reinstall picks up your subscription.

Depending on where you live, you may have the right to access, correct or delete your data. Because Nod has no accounts, your records are tied only to your random app id. In Nod, go to You → Copy app ID and email it to us; we’ll delete the Mixpanel, RevenueCat and reminder-server data tied to it, except purchase records the law requires us to keep. Crash reports and Meta and Firebase events use those providers’ own anonymous ids, which we can’t match to you; the providers delete them on their own schedules. We respond within 30 days. See Data retention for how long we keep each kind of data.

Security

Data travels over encrypted connections. Our reminder server accepts changes to a record only with a secret token held by your copy of the app.

Children

Nod is for adults. We do not knowingly collect data from anyone under 18.

Changes and contact

If we make a material change to this policy, we will post it here and change the date at the top.

Questions? Email jordangaston1994@gmail.com.