Compliant by Design
Most apps promise to protect your data. Nexus was built so we never have it.
Compliant by Avoidance
Your contacts, notes, and interactions never reach us. They stay on your device and in your private iCloud account — we run no server that receives them, no database that stores them, and no analytics that watch them. Most privacy regulations exist to control what companies do with your data; for the data this app is about, we removed the question. The one thing we do hold is an email address, and only if you typed one into a form on this site.
One more thing, and it is not an address. To keep a form from being submitted a thousand times, we count submissions against a one-way hash. We cannot turn it back into an address, we never read it for anything except counting, and it deletes itself after two hours.
Until August 31, 2026, this site recorded the identification string your device sends with each request. It names your browser, your operating system and version, and your device type. Your device sends it everywhere; we recorded it only when someone followed a QR link or a tracked link, never on an ordinary page view. We stopped that day. We cannot delete what was already written: Cloudflare keeps it for three months and gives us no way to remove it sooner, so the last of it clears on November 30, 2026. We would rather say that than let this page claim something it cannot honestly claim until then.
- ✓ Nothing of yours to breach — we don't hold your contacts, notes, or photos
- ✓ Almost nothing to delete — only a newsletter email, if you gave us one; remove it yourself any time
- ✓ No cross-border transfer concerns — your data stays in your iCloud region
- ✓ No tracking or profiling — no analytics in the app at all; this website counts form submissions and which page they came from, never who you are
Compliant by Proxy
The infrastructure Nexus does rely on — Apple's iCloud and Cloudflare's CDN — carries world-class security certifications. Your data is protected by the same standards that serve governments and Fortune 500 companies.
Apple
Cloudflare
Regulation Coverage
| Regulation | Jurisdiction | Status |
|---|---|---|
| GDPR | European Union | ✓ Compliant |
| CCPA/CPRA | California | ✓ Compliant |
| DPDP | India | ✓ Compliant |
| Apple App Store | Global | ✓ Compliant |
| COPPA | United States | — Not applicable |
| CAN-SPAM | United States | — Not yet applicable |
How It Works
Your Device
All processing happens here. Contacts, notes, journals, reminders.
Your iCloud
Sync between your own devices. Apple-encrypted, Apple-certified.
Our Websites
Hosted by Cloudflare. No app data passes through them — only an email address, if you type one into a form.
There is no fourth column. We run no server that holds your contacts.
Processor Transparency
Apple (iCloud/CloudKit)
Syncs your Nexus data between your devices
Apple (App Store)
Handles app distribution and subscription billing
Cloudflare
Hosts our websites (nexuscontacts.com, commonnexus.com) and stores the newsletter / business-inquiry list
Microsoft 365
Delivers email sent from our website (newsletter confirmations, business-inquiry notifications) — the same mail system that runs our company email
Full detail, including what the mailing list holds and how to delete it, is in the privacy policy.
Your contacts deserve better than a server.