1. Who we are
Nightingale is operated by Four and Three Inc., doing business as Four & Three. This policy covers the Nightingale app, website, support, and beta program. Our privacy contact is levin@fourandthree.com. The app’s local AI and encrypted vault are separate from the technical information processed when you visit this website or use Apple services.
2. Your financial records
The app processes the expenses, income, notes, project names, messages, receipt images, and attachments you enter or select. It stores vault content in encrypted form on your device and uses Apple Keychain to protect encryption keys. When you unlock the app, it decrypts the information needed to show your records and perform your requested actions. Four & Three does not receive your vault contents through a developer-operated backend. Only include information you are authorized to process.
3. AI, receipt reading, and voice
Nightingale uses Apple’s on-device language model to interpret entries and assist with questions about your records. Receipt text recognition and the app’s transcription feature run on device. Nightingale does not send these inputs to OpenAI, a remote AI API, or Apple’s Private Cloud Compute for its own AI features. Model and language availability depend on your device and system settings; manual entry remains available. The app does not upload your financial entries to train a developer-run AI model. Apple’s separate services and optional system analytics are governed by Apple’s privacy information and your settings. Keyboard dictation and other system tools you invoke can have their own processing rules.
4. Optional iCloud sync
Local recordkeeping is available without enabling sync. If you opt in to iCloud sync, Nightingale uploads encrypted vault payloads to your private iCloud database so your compatible devices can sync. Apple handles the underlying CloudKit service and, where enabled, synchronized Keychain items. We do not operate a server that receives the vault decryption keys. Encryption does not hide all service metadata: Apple may process your account information, opaque identifiers, object sizes, connection details, and timing. Availability depends on the build, your Apple Account, and iCloud settings. Turning sync off stops future app syncing; it is not a request to erase copies already stored in iCloud. See Apple’s Privacy Policy.
5. Permissions, exports, and backups
The app requests camera, microphone, speech, photo, or file access only for the features that need it. You can decline or revoke permissions in system settings, with corresponding features becoming unavailable. Choosing an export or share destination sends the selected information to that destination under its own rules. Plain CSV or JSON exports are readable outside the vault; encrypted recovery bundles require their separate recovery secret. Keep that secret private and separate from the bundle. Files you export and device or cloud backups you create are outside the app’s vault controls.
6. Website, cookies, and support
This marketing website displays fictional sample records. It has no Nightingale sign-in, payment form, advertising pixel, or developer-added analytics tracker, and its demonstrations do not collect financial entries. Its hosting service, OpenAI Sites and supporting Cloudflare infrastructure, may process IP addresses, browser and device details, requested URLs, timestamps, and security or delivery logs to serve and protect the website. Hosting infrastructure may use essential cookies or similar technical storage; the site adds no advertising cookies. Your browser controls cookies and local storage. If you email levin@fourandthree.com, we receive your email address and the message and attachments you choose to send. We use them to respond, investigate problems, and maintain relevant support records. Please redact financial details from screenshots and never send passcodes or recovery secrets.
7. TestFlight and diagnostics
If you test Nightingale through TestFlight, Apple automatically collects crash logs and usage information and shares it with us. This can include device and OS details, installs, sessions, crashes, and, depending on how you joined, your name and email. Feedback and screenshots you submit are also shared. We use this information to diagnose problems and improve Nightingale in accordance with Apple’s restrictions, and do not share TestFlight information with third parties. This is separate from vault syncing. Read TestFlight & Privacy. The current app includes no third-party advertising or analytics SDK; system diagnostics are still subject to Apple’s settings and policies.
8. Uses and disclosures
We use information we receive to deliver and secure the website, answer support requests, operate beta testing, fix problems, and meet legal obligations. We do not sell or rent personal information, use vault records for advertising, or publish your content for marketing without permission. Hosting and email providers process the limited information needed for their services. Information we actually hold may be disclosed where required by law, to protect rights and security, or in a business transfer subject to applicable protections and provider restrictions. We cannot disclose plaintext vault content we do not possess. This policy does not authorize routine monitoring of your encrypted records.
9. Retention and deletion
Your records remain under the app’s local and optional iCloud storage controls until you remove them. Deleting an entry may leave encrypted revision or recovery information until the app’s cleanup completes. Use the vault-erasure flow for full vault removal, and let any required iCloud erasure finish; an interrupted operation may need to be resumed. Uninstalling alone does not necessarily remove cloud copies, Keychain items, exports, or backups. Manage those copies separately. We retain support correspondence and developer-held beta information only as long as reasonably needed to resolve the issue, maintain the beta, meet legal obligations, and handle disputes, then delete or de-identify it where possible. Apple and hosting providers maintain their own retention controls. Contact us about information we hold; we cannot remotely edit or decrypt your local vault.
10. Security and international processing
We use encryption, device authentication, and access controls appropriate to the information involved. No system guarantees protection against every loss, unauthorized access, compromised device, or software defect. Keep your operating system updated and maintain independent backups. Website, email, and Apple service providers may process their service information in Canada, the United States, or other countries with different privacy laws. This does not mean local AI requests are sent to those providers.
11. Your choices and rights
You can use manual entry, manage device permissions, choose whether to enable available iCloud sync, export records, and use app deletion and erasure controls. Depending on applicable law, you may request access, correction, deletion, or a copy of personal information we hold; withdraw consent; object to certain processing; or complain to a privacy regulator, including the Office of the Privacy Commissioner of Canada. Contact levin@fourandthree.com. We may need proportionate identity verification and may retain information where law permits or requires it. Withdrawing consent does not undo earlier lawful processing and may affect the services we can provide. Requests about Apple-held account data can also be made through Apple’s Data and Privacy portal.
12. Children and changes
Nightingale is intended for adults. We do not knowingly seek personal information from children. Contact levin@fourandthree.com if a child has sent us information so we can address it. We may update this policy when the product or our practices change, showing a new effective date and providing notice or obtaining consent where required.