Privacy Policy

Nab is designed so that we cannot see your files. When you capture or share something, it uploads directly from your Mac to a storage bucket you control. The bytes never pass through us, because there is nothing of ours for them to pass through. This is the whole idea behind the app, and it is the foundation of this policy.

The Nab macOS app runs on your machine and keeps your data there:

• Your screenshots, files, and shared text upload straight to your own S3-compatible bucket using a temporary signed URL. We never receive them.
• Your storage credentials live in the macOS Keychain on your device. They are not transmitted to us and are not stored in plain text.
• Your upload history is saved in a local file in your application support directory. It stays on your Mac. We have no copy of it.
• The app does not include analytics, tracking, or telemetry, and it does not phone home.

This website is a marketing and documentation site. Like most websites, our hosting provider may automatically record standard request information such as IP address, browser type, and the pages requested, in order to serve the site and keep it secure. We do not use this information to build profiles of visitors.

Two endpoints are worth calling out. The download link redirects you to the latest release and does not require any information from you. The license-verification endpoint, if you use it, receives the license key you submit so it can confirm whether the key is valid. It does not ask for your name, email, or any other identifying detail. We do not currently run user accounts, and we do not set advertising or cross-site tracking cookies.

For anything you capture or upload through Nab, you are the party responsible for that content under data-protection law. It is stored in your bucket, under your storage account, subject to your provider's terms. We do not act as a host or processor of that content, because we never receive or store it. If you need content accessed, exported, or deleted, do that directly with your storage provider. We cannot do it for you, and we have no copy to act on.

We do not sell your data. We do not share it with advertisers. We do not have access to the contents of your bucket, and we cannot retrieve or delete files on your behalf, because we never hold them.

Your files live with whichever storage provider you choose, such as Cloudflare R2, Amazon S3, Backblaze B2, or your own MinIO server. That relationship is between you and your provider, and their privacy policy and terms govern how they handle your data. This website is served by a hosting provider that processes basic request logs as described above.

Uploads use HTTPS and short-lived signed URLs, and credentials are kept in the macOS Keychain. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for your device security and for the access settings on your own bucket.

The website may be hosted on servers located in the United States or other countries. If you access it from elsewhere, you understand that the limited request information described above may be processed in those countries.

Depending on where you live, you may have rights to access, correct, or delete personal data about you. Because we hold essentially no personal data about app users, there is usually nothing for us to act on, and requests about your stored content should go to your storage provider. For any request relating to data this website may process, contact us using the address below.

Nab is not directed at children under 13, and we do not knowingly collect personal information from them.

If this policy changes, we will update the effective date at the top of this page. Meaningful changes will be reflected here before they take effect.

Questions about privacy? Email roshan.rengadurai@gmail.com.