Privacy Policy
We do not collect anything.
Naastenka has no accounts, no analytics and no servers of ours in the path. This page says exactly what that means, including the one place where the app is currently weaker than it should be.
Last updated 19 September 2026
This policy covers the Naastenka apps for macOS and iPhone, published by Sidekala Oy (“we”), and the website at naastenka.sideka.la. Questions go to naastenka@sideka.la.
What we collect
Nothing. The app contains no analytics, no crash reporting, no advertising identifier and no third-party SDKs of any kind. It makes no network request to any address belonging to us. We do not know that you have installed it, how often you open it, or what you write in it.
Apple gives every developer aggregate App Store statistics — downloads per country, and similar. Those are Apple’s figures, counted by Apple, and they never identify anybody. That is the whole list of information we receive.
What stays on your device
Naastenka keeps, in its own app container on your Mac or iPhone:
- Your boards — for each one, the name you gave it, the server address and port, the namespace, the username and password if the server needs them, and the name you sign your notes with.
- The notes it last fetched, so a widget has something to draw before it has managed to reconnect.
This is stored unencrypted in an App Group container shared by the app and its widget, with the protection the operating system gives every app’s private storage. It is not backed up to anything of ours, not synced by us between your devices, and none of it is ever sent to us. Deleting the app deletes all of it.
What leaves your device, and where it goes
When you write a note, the app sends the text, the name you sign with and the time to the server whose address you typed in, and to nowhere else. When it reads the board it asks that same server. There is no intermediate service, no relay and no fallback host; the app ships with no server address in it at all.
We do not operate that server. It belongs to you or to whoever invited you. Whoever runs it can read everything written on it and decides how long it is kept, who else can reach it, and what is logged. If you did not set it up yourself, those questions are for the person who sent you the invite — we cannot answer them and have no access.
How the connection is protected
Today the app talks to the server over an unencrypted connection. Anyone able to observe the network between your device and that server — another machine on the same Wi-Fi, an internet provider along the way — can read the notes and the password as they pass.
So: run the server on a network you trust, or reach it through a VPN such as WireGuard or Tailscale, and do not use a board for anything that would matter if a stranger read it. Encrypted transport is the next thing being built, and this page will be updated — with a new date at the top — on the day it ships.
We would rather say this than let you assume otherwise. A privacy policy that overstates what an app does is worse than the limitation it is hiding.
Permissions the app asks for
- Local Network (iPhone) — only to reach a server on your own network. It is not used to discover devices or scan anything.
- Camera (iPhone) — only while you are pointing it at a board’s QR code. No photo is saved, and nothing from the camera leaves the device.
Sharing a board
An invite link or QR code contains the server address, the namespace and the password, encoded so it fits in a link. That is encoding, not encryption: anybody who gets the link can join the board. Send one the way you would send a door key, and use the check phrase the app shows to confirm with the other person that you both ended up on the same board.
Children
Naastenka is not directed at children and has nothing in it aimed at them. Since we collect no data at all, we do not knowingly collect data from children either.
Your rights
Under the GDPR and comparable laws you have rights of access, rectification, erasure and portability over personal data a company holds about you. We hold none, so there is nothing for us to hand over or delete. Where notes on a board count as personal data, the operator of that server is the controller, not us — that is who a request has to go to. Write to naastenka@sideka.la if you want this confirmed in writing, and we will send it.
Changes
If this policy changes, the date at the top changes with it and the previous wording stops applying from that date. Anything that would make the app collect information it does not collect today would be announced here first, and in the app’s release notes.
Contact
Sidekala Oy · naastenka@sideka.la · sideka.la