Nimbo
In short
Nimbo works on your iPhone. Scanning, conversions, web capture, your library and every PDF tool run entirely on your device and nothing is sent to us. The only exception is the AI features (Create with AI, Transform, Translate, edits to a paragraph and Ask a PDF), which have to be processed on a server. We have no accounts, no advertising, no analytics and no tracking.
What stays on your device
Your scans, photos, files, converted PDFs, library, folders, settings and signatures are stored only on your device (in the app's private storage shared with its Share Extension). When you convert a webpage, your iPhone loads it directly from that website; the address and content are never sent to us.
AI features: what is sent, and why
AI features work only when you use them. Create with AI sends the request you type. Transform and Translate send the text of the document you chose (text read on your iPhone from scanned pages included). Editing, shortening, rewriting or translating a paragraph sends that paragraph with a little of the text around it. Ask a PDF sends your question, your last few questions, and the pages of the document most likely to contain the answer. With each of these requests the app also sends an Apple-signed proof of your Nimbo Pro subscription and a random installation identifier created by the app. They are used only to check your subscription, apply the daily limits (30 AI documents, 200 edits and questions), avoid charging a retry twice, and return the result. Nothing is sent before you give your explicit permission: the app asks you once, before your first AI request, and you can withdraw that permission at any time in Settings (Privacy & Support). Without it, the AI features stay off and nothing leaves your device.
Who processes it
Our server runs on Supabase in the European Union (Ireland). To produce the result, it sends what the feature needs (listed above) to a third-party AI provider that acts as our processor. That provider processes the data only to return the result, does not use it to train its models, and may keep it for a limited period for abuse and security monitoring under its own terms. Your data is never sold or shared for advertising.
How long we keep it
We never store your request or your source document — only a one-way fingerprint used to detect duplicate retries. Generated documents are deleted from our server after 24 hours. Daily usage counters are deleted after 30 days. Subscription records are deleted 30 days after the subscription expires or is refunded. The PDF you save stays on your device until you delete it.
Purchases
Payments are handled entirely by Apple. We never see your name, payment details or Apple Account. We only receive the Apple-signed transaction needed to confirm your subscription.
Your rights
Depending on where you live (for example under the GDPR), you can ask to access, correct or delete data about you, or object to its processing. Because we have no accounts, most data is deleted automatically within the periods above; you can also stop using the AI features at any time. For any request, contact us via the link below. You can also lodge a complaint with your data protection authority (in France, the CNIL: www.cnil.fr).
Who is responsible
Nimbo is published by Kénaël Fasquel, an independent developer based in France, who is the data controller for the processing described on this page. Contact: contact@nimbopdf.com.
Legal basis
AI features: your explicit consent, asked in the app before the first request and withdrawable at any time (GDPR Art. 6(1)(a)). Checking your subscription, applying the daily limits and avoiding double charges on retries: performance of the Nimbo Pro contract (Art. 6(1)(b)). Security and abuse prevention: our legitimate interest in keeping the service reliable (Art. 6(1)(f)).
Transfers outside the European Union
Our server is in the European Union. The AI provider may process the data it receives in the United States. These transfers are covered by the European Commission's Standard Contractual Clauses and, where the provider is certified, by the EU–US Data Privacy Framework.
Children
Nimbo is not directed to children under 13 and we do not knowingly collect data from them. In the European Union, users below the age of digital consent in their country (15 in France) should use the AI features only with a parent's permission.
Changes
If this policy changes, we will update this page and its date.
Contact
Questions or requests: contact@nimbopdf.com