Legal
Privacy Policy
What Natus collects, why we use it, and the choices you have.
This Privacy Policy explains how Natus Blueprint (Natus, we, us) collects, uses, discloses, stores, and deletes personal information for the Natus iOS app and natusblueprint.com. It is written for the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you use Natus from another country we launch in, local privacy law may give you extra rights, and those rights still apply where they cannot be excluded.
1. Who we are and what this policy covers
Trading name: Natus. Natus is operated from Australia.
Privacy requests: privacy@natusblueprint.com. Support: support@natusblueprint.com.
This policy covers people who use the Natus iOS app, visit natusblueprint.com, join the email list, or email us. It does not cover job applicants or staff records. It also does not cover other companies' sites that we link to.
This policy works with our Terms of Service. It tells you how we handle personal information. It does not take away rights you have under the Privacy Act or the Australian Consumer Law.
2. What Natus does not do
Natus is a private journal. We do not run Natus as an ad network. In particular, we do not:
- sell your personal information
- use your journal, chats, readings, or Blueprint to train or fine-tune our own models, or to let a provider train their public models on your private writing
- share your journal or chats with advertising networks, data brokers, or influencers
- build an advertising profile from what you write
- use IDFA, App Tracking Transparency tracking, or cross-app advertising IDs
- record your mouse, keystrokes, or session replay on the website
- collect precise GPS unless a future feature asks you first and you agree
Providers that generate a reply for you see the text needed for that request. That is so Natus can answer you. It is not permission to advertise with your writing or to train a public model on it.
3. How we collect information
We collect personal information in these ways:
- directly from you: onboarding, journal, Ask, photos you attach, voice, support email, waitlist signup
- from your device: a private Natus account identifier, app version, crash and security events, permissions you grant (microphone, camera, photos, notifications)
- from Apple: Sign in with Apple (if you use it), App Store subscription status
- from RevenueCat: whether your paid plan is active, so the app can unlock the right features
- automatically on the website: ordinary server logs (IP address, browser, pages requested) and, if switched on, optional page-view tools described in section 12
If you do not give information a feature needs, that feature may not work. For example, without a birth date we cannot prepare a Blueprint. You can still leave the site without creating an account.
4. Account information
Natus may create a secure account from a private device identifier when you start the app. If you save or restore your account, we may also receive:
- your email address
- your Sign in with Apple identifier, and a private relay email if you hide your address
- an internal Natus user identifier
- authentication and account-status information
We do not receive your Apple ID password. A Face ID or passcode lock you turn on in Natus stays on your device. We do not receive your face data.
5. Personal foundation information
To create your starting personal context, Natus may collect:
- your name or preferred name
- date of birth, and time and place of birth when you know them
- current city, if you enter it
- reader preference such as woman, man, or another option, used for pronouns in writing
- onboarding answers and notification timing
Natus does not need to watch your live location. City or birth place is information you type so the Blueprint and timing can work.
6. Journal, Ask, and generated writing
Depending on how you use Natus, we may process:
- journal entries
- Ask questions and replies
- Daily Notes, First Reading, Preview, Sunday Reading, and Blueprint writing
- saved personal context and corrections you make
- photos or attachments you choose to add, including photo scan of a page
- drawings or other journal content the app supports
You control what you write. Journal content can include sensitive information (for example health or relationships) if you choose to include it. We only handle that because you submitted it so Natus can provide the service. Do not enter another person's private details unless you have the right to share them. Some sketches or photos may stay on your device until you choose a feature that uploads them.
7. How AI processing works
Natus uses AI services to write your replies and readings. What you write and say in Natus is sent to those services so they can answer you. That includes journal entries, Ask messages, and your saved personal context. Photos you attach may be sent too, so a model can read them.
We send this to the Vercel AI Gateway, which passes each request to the model provider that handles it. We only use models that do not train on what we send. Natus does not allow model providers to train on your journal, chats, or readings.
Voice is handled in two steps. Your audio goes to a transcription service (Soniox) and comes back as text. The text then goes to the model providers like anything else you type. See section 8.
Providers only get what a single request needs, and only so Natus can answer you. We do not sell it and we do not use it for advertising. Generated writing is for personal reflection, and AI can be wrong.
8. Voice information
If you use voice journaling or voice input, Natus may process an audio recording, the transcript, and the link between that text and your journal or question.
Unless you have turned on on-device voice, audio is sent securely to our transcription provider, Soniox, to turn it into text. If Soniox cannot return a result, the audio goes to the model gateway described in section 7 instead. We delete the audio file and the transcription job at Soniox as soon as the text comes back. The text may be stored as part of your journal or conversation. Raw audio is kept only as long as needed to provide the feature, unless a screen clearly tells you the recording will be saved. If you download the optional English voice model in Settings, your voice is turned into text on your phone and no audio leaves your device.
9. Subscription and payment information
Paid plans are billed by Apple through the App Store. List prices are in US dollars (USD). Apple shows the charge in your local currency, which may include tax. We may receive the product you bought, trial and renewal status, entitlement identifiers, and limited history needed to restore access.
Natus does not receive or store your full card number, billing address, or Apple ID password. Apple's privacy rules apply to the payment itself. RevenueCat helps us confirm that your plan is active.
10. Usage and technical information
We collect limited information so we can see whether Natus is working, including app and iOS version, device and user identifiers, screens used, button events, entitlement state, crashes, network errors, approximate region from IP address, and security events.
PostHog receives product events: event names, simple properties such as counts and on-off flags, and a hashed user identifier. It also receives which Apple ad campaign brought the install, as campaign numbers only. It does not receive journal text, chat text, names, emails, or birth data. Sentry receives crash reports and error reports so we can fix bugs. We set Sentry not to collect personal information by default, and we strip the device name and sign-in headers before a report is sent. We do not use this information to track you across other companies' apps for advertising.
11. Support, waitlist, and marketing email
If you email us or use a support form, we collect your message, reply email, name if you give one, and technical details you include. Do not send passwords, card numbers, or private journal pages.
If you join the website email list, we collect your email so we can send you updates and your First Reading preview. That list is stored with our email provider (Resend). You can unsubscribe using the link in the email or by writing to us.
Service emails (account, security, legal) are not marketing. Marketing email, if we send it, follows Australia's Spam Act 2003. Consent is not required as a condition of buying Natus.
12. The website, cookies, and the Meta pixel
natusblueprint.com is a marketing and information site. You do not need an account to read it.
The site uses ordinary hosting logs (IP address, browser, pages requested) to deliver pages and stop abuse.
The site loads the Meta pixel, also called the Facebook pixel, from Meta. When it runs, Meta receives the pages you view on the site, the time of your visit, your IP address, and a cookie or similar identifier that Meta sets in your browser. It also records when you tap a link to the App Store from the site.
We use the Meta pixel to measure how our ads perform. This tells us which ad led to a visit and to an App Store tap. Meta may combine this with other information it already holds about you, and may use it to show ads to people who could be interested.
The Meta pixel only runs on the website. Your Natus journal, your chats, and your readings are not sent to Meta from the app.
You can opt out of Meta using your activity for ads at https://www.facebook.com/adpreferences. You can also block cookies in your browser. The site still loads. Some measurement may then be incomplete.
We do not use session-replay tools that record typing or mouse movement. The site can also load Google Analytics when we switch it on. If it runs, Google may receive page views and a cookie or similar identifier.
13. Why we use information (APP 6)
We use personal information for the purposes you would reasonably expect, including to:
- create and maintain your account
- build your Blueprint and starting personal foundation
- prepare First Reading, Preview, Daily Notes, Sunday Reading, and Ask replies
- store and sync your journal
- transcribe voice and handle photos you attach
- remember relevant context across conversations so replies stay consistent
- manage subscriptions and restore purchases
- send service notices and, if you opted in, waitlist or product email
- provide support
- protect accounts, prevent abuse, and diagnose crashes
- understand which product features work, using de-identified or limited analytics
- comply with law, including a valid legal request
- enforce our Terms of Service
Natus does not make solely automated decisions that have a legal or similarly significant effect on you (for example, refusing a loan). Generated writing is for personal reflection. It is not a substitute for a doctor, lawyer, or other professional.
14. Sensitive information
Australian law treats some information as sensitive, including health information. Natus does not require you to enter health details. If you write them in your journal or Ask, we handle that information only to provide the Service you asked for, to keep it secure, or as the law requires.
We do not use sensitive information for advertising. We do not sell it.
16. Overseas disclosure (APP 8)
Natus is operated from Australia. Some providers process information in the United States, Europe, or other countries where they run their systems.
Privacy law in those places may differ from Australian law. Before we disclose personal information overseas, we take reasonable steps so the recipient handles it in a way that is consistent with the Australian Privacy Principles, including contracts and provider choice.
If you use Natus, you understand that some processing happens outside Australia so the Service can run.
17. How long we keep information
We keep information while your account is active and for as long as reasonably needed to provide Natus, then delete or de-identify it when it is no longer needed, unless the law requires a longer period.
- journal, chats, and personal context: until you delete them or delete your account
- subscription records: as needed for accounting, fraud prevention, and Apple or tax rules
- support mail: while we resolve the request and for a reasonable record period
- security and server logs: only as long as needed for security and reliability
- waitlist email: until you unsubscribe or we close the list
Deleting the app from your phone does not delete server data. Use Delete my account in the app (You, then Settings, then Privacy & data, then Data & deletion), or email us.
18. Your choices and rights (APP 12 and 13)
You may ask us to give you access to personal information we hold about you, correct it, delete it, export a copy where practical, explain how it is handled, or withdraw consent where we rely on consent.
People in the UK, EU, or similar places may have extra rights under local law, including to object to certain processing. Ask us and we will handle the request in line with the law that applies to you.
Inside Natus you can edit profile details the app allows, delete journal entries, manage microphone, camera, photos, and notifications in iPhone Settings, cancel a subscription in Apple Settings, and delete your account. For other requests, email privacy@natusblueprint.com from the address on your account if you have one. We may need to verify it is you. We will not ask for your Apple ID password or card number. We will respond within a reasonable time.
19. Deleting your account
In the app: You, then Settings, then Privacy & data, then Data & deletion, then Delete my account. You can also email privacy@natusblueprint.com.
Deletion is intended to remove your Natus account, profile and birth information, journal, Ask conversations, saved context, First Reading and Preview, Daily Notes and Sunday Readings, Blueprint files, photos stored for your account, and linked previous Natus identities.
Deletion cannot be undone. Cancelling Apple billing is separate: do that in iPhone Settings, then your name, then Subscriptions. Limited backups or security records may remain until those systems expire. They are not used to restore your journal for ordinary use. We may keep information the law requires, or that we need for fraud, abuse, payment disputes, or a security incident.
20. Security and notifiable data breaches
We use safeguards designed to protect personal information, including encryption in transit, access controls, protected server functions, rate limits, restricted admin access, and monitoring.
No internet service can guarantee absolute security. Use your phone lock. Do not share your Natus account.
If a data breach is likely to cause serious harm, we will assess it under Australia's Notifiable Data Breaches scheme and notify affected people and the OAIC where the law requires.
21. Children
Natus is for adults. You must be 18 or older. We do not knowingly collect personal information from children.
If you believe a person under 18 has given us information, email privacy@natusblueprint.com and we will delete it where appropriate.
22. Notifications
If you allow notifications, Natus may send reminders such as Daily Notes or Sunday Reading on the rhythm you chose. Turn them off in iPhone Settings or in the app where that control exists. We do not send marketing push as a condition of using the journal.
23. Other companies' sites
Natus and the website may link to other companies. Their privacy rules apply when you leave Natus. Apple's rules apply to App Store payments and Sign in with Apple.
24. Changes to this policy
We may update this policy when Natus, our providers, or the law changes. The date at the top will change.
If a change is material, we will give extra notice where required, for example in the app, by email, or on this page.
25. Contact us and complaints
Natus is operated from Australia.
Privacy questions and requests: privacy@natusblueprint.com
General support: support@natusblueprint.com
If you are unhappy with how we handle your information, email us first so we can try to fix it. You may also complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.