Privacy policy

Who runs it

Nexus is a small private service run by one person for friends and family, who join by invite. This page explains what it collects, why, who else handles it, how long it's kept and how to have it deleted.

Questions or requests: email artic@drakkar.cc

What it collects

• Your account: your name, email address, cell number, phone company and phone type, and your password, stored only as a scrambled hash. If you turn on two-step sign-in, its secret is stored encrypted.
• Sign-in records: the internet address you signed in from and when, so the person running the service can spot someone else using your account.
• Calls to your screening line: the caller's number and name when known, the time, what the AI decided (for example spam or allowed) and a short summary. Callers are told the call is being screened and may be transcribed. What a caller says is turned into text, and voicemail is recorded.
• Your corrections: when you tell the AI it got a call wrong, what that caller said is kept so it can do better next time.
• Billing: Stripe handles payments. This site gets a customer reference and whether you've paid, never your card number. Stripe also keeps a record of any free month added to your account.
• Friends you send: if you share your own link, we note which friends came through it, and whether they've paid for their first month, so we can give you your free months. You only see how many friends have counted, never their names or anything about their calls.
• Usage counts: how often parts of the site get used, like the Voicemail tab or the Spam button, counted as totals for everyone. To count how many people used something without keeping who, each of your uses is noted under a scrambled code instead of your name, and that note is deleted after 30 days without use, or with your account. Nothing about your calls is counted this way: no numbers, names or what was said.
• Alerts: if you allow browser alerts, the address your browser gives for sending them.
• Visitor counts: the public pages (the home page, about, this page and the wait list) count visits with Umami, which runs on Nexus's own server, not a company's. It notes the page, the time, the kind of browser and device, the screen size, the language, the site you came from, and roughly where you are, such as the country, worked out from your internet address. It uses no cookies, doesn't keep your internet address, and can't follow you to other sites. It's skipped if your browser asks not to be tracked (Do Not Track or Global Privacy Control). It's never used on your own pages after you sign in, or in the app.
• Error reports: when something on the service breaks, a note goes to GlitchTip, an error tracker on Nexus's own server, so it can be fixed. It says only what kind of error it was, where in the code, and for the app, its version. Personal details are taken out before it's sent: no phone numbers, names, emails, settings, internet addresses or anything about a call, and nothing that says whose account or phone it was.

The Android app

• It reads your contacts and call history on your phone to decide who rings straight through: people in your contacts, people you've called in the last 30 days, and every call for 24 hours after you call 911. Your contacts and call history never leave your phone.
• For each incoming call, it sends the caller's number to your screening line, either so the screener can answer the call or so a caller you miss can leave a message. It also says whether that caller is one of your contacts, but never who. The screener holds that number for about a minute.
• It reports to this service whether its settings are on (such as contacts, call screening and alerts), its version, when it screened a call, and if it crashed, the type of error and where in the app it happened. That's so setup and problems can be shown to you. No contact names or call history are sent. A crash's type, place and app version are also passed on to the error reports below, without saying whose phone it was.
• It uses the call screening role Android gives one app at a time. It doesn't show ads and contains no tracking or analytics code.

iPhone

Setup imports your contacts' phone numbers, so people you know can skip the AI. Only the numbers are kept, never names, and you can remove them any time. If you choose to email your contacts in instead, the whole file, names included, goes through Resend, our email provider, and stays in the email account this service uses for about 30 days. If you send your contacts file to the person running the service so they can import it for you, they get the whole file, names included. Only the numbers are imported, and they're asked to delete the file afterward.

The wait list

If you join the wait list, we keep your name, email, who it's for (you, or a parent or relative), whether you asked for help setting it up, which link you came from (a short tag in the wait list address, like ?ref=ph), and what you wrote about how you heard of Nexus. The wait list doesn't ask for your cell number, kind of phone or phone company. You give those when you sign up with your invite. Entries made before November 9, 2026 also keep the cell number, kind of phone and phone company asked for then. Only the person running the service sees it, so they can invite people. When you join, we send one email to say you're on the list. Our copy of that email, with your address, is deleted 30 days after it's sent, or sooner if your entry is. Nothing else is emailed to you until there's a spot. We delete your entry when we invite you, when we decide not to, or after 6 months, whichever comes first. If we invite you, the invite keeps your name until you use it, or until about a month after it runs out. To be taken off the list sooner, email artic@drakkar.cc.

Sometimes a few spots skip the wait list. If you claim one, we email you an invite right away instead of the email saying you're on the list. Your entry is kept, marked that way, so the person running the service can see who asked for help setting up. It's deleted after 6 months, or sooner if your account is deleted.

If a friend's link brought you here, we note who sent you. The person running the service sees this. The friend who sent you doesn't see your details.

Who else handles it

• Twilio provides your screening number, carries the calls, turns what callers say to the screener into text, and keeps voicemail recordings. For most accounts it also holds call history.
• Nexus's own server, run by the person behind this service, answers calls for some accounts. For those it keeps call history, settings and imported numbers, and makes the spoken messages itself. Twilio still keeps a backup copy of their settings, names and imported numbers, and their call history stays with Twilio for about a week after the switch. If that server is down, Twilio takes a message instead, and turns it into text.
• Deepgram, when it's turned on, turns voicemail messages into text for accounts on Nexus's own server. Otherwise Twilio does. It gets only the recording, keeps it only as long as it takes to make the text, and is told not to use it to improve its models.
• Nexus's monitoring server, also run by the person behind this service, holds the visitor counts and error reports described above. Neither goes to any other company.
• Anthropic (Claude AI) reads what a caller said to decide what to do with the call. Anthropic doesn't use it to train its models.
• Stripe handles payments.
• Resend sends account emails, like password resets, billing notices and the email saying you're on the wait list. They never contain anything about your calls.
• Spam list: a number the AI catches as spam on more than one person's line is blocked for everyone, along with numbers from public FTC complaints. Only the number is shared, never what was said. Your contacts are never blocked.
• Scam warnings: when the AI is sure a call is a scam, it picks what kind of trick it was from a fixed list, like "says you owe an unpaid toll bill, asks you to press a number". Nothing the caller said is kept with it, and no number or name. Which kinds of trick your line caught, and on what day, are copied to this service's server for up to 90 days, so it can tell when two or more people's lines caught the same one. Only then is that kind of trick shared with everyone's screener, without saying whose line it came from. It helps the AI spot that trick sooner. It never blocks anyone, and your contacts are never blocked.

Nothing is sold or used for advertising.

What the person running it can see

Who called you, when, and what the AI decided. Their admin screens don't show what callers said or your voicemail. They can see your account details and sign-in records, and how many contacts an iPhone imported. They can see which kinds of scam trick are being shared, but not whose line they came from. They can also see who sent whom with a referral link, and whether that friend has paid. They see usage counts only as totals for everyone, never whose they are.

How long it's kept

• Call history and voicemail: 30 days by default, and you can delete a voicemail sooner. Your corrections are kept for the same time, and you can remove them under Settings.
• A number caught as spam is remembered for 90 days, but not what was said.
• A scam trick your line caught is kept for 90 days, then it's gone unless it's caught again.
• App reports: 30 days. Usage notes under your scrambled code: 30 days after you last used that part of the site. Totals for everyone, by day: about 13 months, then they're added into running totals with no date. Some totals are split by phone company and phone type, but none of them name anyone.
• Error reports: 90 days. Visitor counts: up to a year.
• If a friend you sent counts toward a free month, a scrambled code made from their cell number is kept, even after accounts are deleted, so the same number can't earn a free month twice. It can't be turned back into the number without this service's secret key. Everything else about referrals is deleted with the account.
• Everything else: until your account is deleted.

Deleting your account and data

Sign in, go to Account and end your service. 7 days after service ends, your screening number, call history, voicemail, imported numbers and account are deleted, along with your saved card at Stripe. You can come back any time before then. You can also ask for deletion using the contact above.

The verification and setup test calls to your cell are placed from the service's main Twilio account, so those records, with your cell number, stay with Twilio for its normal log period.

Security and children

Your phone, your browser and the app reach the service only over encrypted connections. Passwords are stored as hashes, and connection keys and two-step sign-in secrets are stored encrypted. The service isn't meant for anyone under 18.

Changes

When this page changes, the date at the top changes too.