Compliant by Design

Most apps promise to protect your data. Nexus was built so we never have it.

Compliant by Avoidance

Your contacts, notes, and interactions never reach us. They stay on your device and in your private iCloud account — we run no server that receives them, no database that stores them, and no analytics that watch them. Most privacy regulations exist to control what companies do with your data; for the data this app is about, we removed the question. The one thing we do hold is an email address, and only if you typed one into a form on this site.

One more thing, and it is not an address. To keep a form from being submitted a thousand times, we count submissions against a one-way hash. We cannot turn it back into an address, we never read it for anything except counting, and it deletes itself after two hours.

Until August 31, 2026, this site recorded the identification string your device sends with each request. It names your browser, your operating system and version, and your device type. Your device sends it everywhere; we recorded it only when someone followed a QR link or a tracked link, never on an ordinary page view. We stopped that day. We cannot delete what was already written: Cloudflare keeps it for three months and gives us no way to remove it sooner, so the last of it clears on November 30, 2026. We would rather say that than let this page claim something it cannot honestly claim until then.

  • Nothing of yours to breach — we don't hold your contacts, notes, or photos
  • Almost nothing to delete — only a newsletter email, if you gave us one; remove it yourself any time
  • No cross-border transfer concerns — your data stays in your iCloud region
  • No tracking or profiling — no analytics in the app at all; this website counts form submissions and which page they came from, never who you are

Compliant by Proxy

The infrastructure Nexus does rely on — Apple's iCloud and Cloudflare's CDN — carries world-class security certifications. Your data is protected by the same standards that serve governments and Fortune 500 companies.

Apple

ISO 27001 ISO 27018 FIPS 140-3 Global CBPR

Cloudflare

ISO 27001 SOC 2 Type II PCI DSS Level 1 FedRAMP Moderate

Regulation Coverage

Regulation Jurisdiction Status
GDPR European Union Compliant
CCPA/CPRA California Compliant
DPDP India Compliant
Apple App Store Global Compliant
COPPA United States — Not applicable
CAN-SPAM United States — Not yet applicable

How It Works

📱

Your Device

All processing happens here. Contacts, notes, journals, reminders.

☁️

Your iCloud

Sync between your own devices. Apple-encrypted, Apple-certified.

🌐

Our Websites

Hosted by Cloudflare. No app data passes through them — only an email address, if you type one into a form.

There is no fourth column. We run no server that holds your contacts.

Processor Transparency

Apple (iCloud/CloudKit)

Syncs your Nexus data between your devices

Apple Privacy →

Apple (App Store)

Handles app distribution and subscription billing

Apple Privacy →

Cloudflare

Hosts our websites (nexuscontacts.com, commonnexus.com) and stores the newsletter / business-inquiry list

Trust Hub →

Microsoft 365

Delivers email sent from our website (newsletter confirmations, business-inquiry notifications) — the same mail system that runs our company email

Privacy →

Full detail, including what the mailing list holds and how to delete it, is in the privacy policy.

Your contacts deserve better than a server.