Nabra Privacy Policy
Last updated: 29 October 2026
Nabra ("the app") is a desktop assistant for Windows made by Don's Lab ("we", "us"). This policy explains what information the app handles, where it goes, and the choices you have.
The short version: Nabra keeps your things on your PC. We don't track you, we don't sell anything about you, and the app sends our servers only what the table below lists. Information leaves your PC only when you use a feature that needs an online service, and only to that service.
1. What stays on your PC
Nabra stores the following only in your own Windows account (in %APPDATA%\Nabra), and never sends it to us:
- your settings, including any API keys you paste in;
- clipboard history (unless you turn "Keep clipboard history after restarting" off, in which case it is kept
only while Nabra is running), to-dos, notes, calendar events you add, and things you ask Nabra to remember;
- a short local history of which apps, sites, games and commands Nabra started for you and when (
routines.json), used only to suggest
"Your usual" at the right time; it is not sent anywhere and stops when you turn off "Tips and suggestions";
- the last 200 spoken or typed requests that Nabra did not understand when AI is off (
misses.txt), kept only on this PC so the list of wordings it knows can be improved; it is not sent anywhere; - a local log file (
nabra.log) used to troubleshoot problems; - recordings of your voice, which are turned into text on your PC and are not kept afterwards.
Nabra respects apps that mark clipboard content as private (for example password managers): that content is not recorded in the clipboard history.
2. When information leaves your PC
| Feature | What is sent | Sent to |
|---|---|---|
| AI (talking to Nabra, typing a request, Select & ask, tidying up dictation) | What you ask; your recent conversation; any screen area you select; and, when the AI uses a tool to help you, the result of that tool (for example file or folder names it looked up, your calendar events, a screenshot it took at your request, system information, notes you asked it to remember) | The AI provider whose key you paste: Google (Gemini), Anthropic (Claude), OpenAI, xAI (Grok), Groq, DeepSeek, Mistral or OpenRouter (which passes it on to the model you pick). With "Local" (Ollama) or with AI turned off, nothing is sent. |
| Voice files (first start only) | Nothing about you; a download | GitHub (the Kokoro voice, about 120 MB). Spoken replies are made on your PC and never leave it. |
| Local AI setup (only if you choose "Local") | Nothing about you; downloads of the Ollama installer and of the AI model you pick | ollama.com (Ollama) |
| App updates | Nothing about you beyond the licence request above; the new installer is downloaded | Our server on Cloudflare |
| Weather | The city you entered, then that city's coordinates | Open-Meteo (open-meteo.com) |
| Games tab, cover art missing | The Steam game's number (e.g. 730), once per game, to fetch its cover picture. For games from other launchers (GOG, EA, Ubisoft, Xbox, added by hand) the game's title, once, to find that number | Steam's store (Valve) |
| Currency conversion (when you ask, e.g. "100 dollars to dinars") | Nothing about you: a request for today's exchange rates, saved on this PC for 12 hours | open.er-api.com (ExchangeRate-API) |
| Weather, no city set | Your internet address, once a week, to guess your city (city level only) | ipwho.is, or ipapi.co if that fails |
| Web search and reading web pages (when the AI does this for you) | The search terms or web address | Search providers through DuckDuckGo, and the website being read |
| Calendar link (optional) | A request for the calendar address you pasted | The calendar service behind that address (for example Google Calendar) |
| Update checks | Your licence code, a device identifier (below) and your Nabra version (installed copies); a request for the latest version number (copies run from source) | Our licence server on Cloudflare (installed copies); GitHub (from source) |
| Feature counts (on unless you switch off "Help improve Nabra" in Settings → Privacy & safety; about once a day) | Names of the features you used and how many times each (for example "timer: 4", "tab:clipboard: 2"), with your licence code, device identifier and Nabra version. Never what you say, type, copy, open or ask. | Our licence server on Cloudflare, stored per day so we can improve the features that get used and remove the ones nobody uses |
| Website visit counts (trynabra.com; none if your browser sends Do Not Track or Global Privacy Control) | A plain total per day for events such as "page viewed" or "buy button clicked". No cookies, nothing stored on your device, no ID, no IP address stored (Cloudflare sees it to deliver the page, and our server holds it for a few minutes only to block abuse) | Our server on Cloudflare |
| Launch email list (only if you type your email into the website box) | Your email address and the time. Used for one confirmation email (a link to confirm the address; unconfirmed addresses are deleted after 7 days) and one email when the official release opens, then deleted (within 12 months at the latest, or sooner if you ask) | Our server on Cloudflare |
| Emails with us (support, the launch email) | Your address and the message | Cloudflare (routing), Google (our inbox), Resend (sending) |
| Licence check (when Nabra starts, about once a day while it runs, and when you use Nabra; also when you move your code to a new PC) | Your licence code; a device identifier (a one-way hash of Windows' machine ID, so a code works on one PC; it can't be turned back into anything about you); your Nabra version. This is required: without it the licence can't work. | Our licence server, run on Cloudflare (Cloudflare's privacy policy applies to the hosting) |
| Licence key bought from Payhip (the first time you enter it, and about once a day after that) | Your licence key. Our server asks Payhip whether the key is genuine and not refunded; Payhip answers with that and your purchase email, which we store next to the key. When you move a bought code to a new PC, the email you type is compared with Payhip's record of your purchase email (it is not stored). Nothing else about you is sent. | Payhip (payhip.com), through our licence server |
| Report a problem (only when you press Send, or say yes after a crash) | Your note; your licence code; Nabra and Windows versions; if you leave them ticked, the last few hundred lines of Nabra's log (API keys, tokens and passwords are removed first) and a screenshot only if you paste one yourself. You can see exactly what is sent before sending. | Our licence server on Cloudflare; kept until we have dealt with it |
Each of these services handles the information under its own privacy policy. We encourage you to read them:
- Google Gemini API: https://ai.google.dev/gemini-api/terms
- Anthropic: https://www.anthropic.com/legal/privacy
- OpenAI: https://openai.com/policies/privacy-policy
- xAI: https://x.ai/legal/privacy-policy
- Groq: https://groq.com/privacy-policy
- DeepSeek: https://platform.deepseek.com/downloads/DeepSeek%20Privacy%20Policy.html
- Mistral: https://mistral.ai/terms
- OpenRouter: https://openrouter.ai/privacy
- Microsoft: https://privacy.microsoft.com
- Open-Meteo: https://open-meteo.com/en/terms
- ExchangeRate-API: https://www.exchangerate-api.com/terms
- ipwho.is: https://ipwhois.io/privacy-policy
- ipapi.co: https://ipapi.co/privacy/
- DuckDuckGo: https://duckduckgo.com/privacy
- GitHub: https://docs.github.com/site-policy/privacy-policies
A note on free AI keys
On a free Gemini key, Google may use what you send (including screen selections) to improve its products, and people at Google may read it. Nabra warns you about this. Don't send passwords, bank details or other private information through a free key. A paid Gemini key or "Local" does not do this. Other providers set their own rules on keeping and using what you send (DeepSeek, for example, processes data in China); check the policy of the one you use.
3. What we collect
When you buy Nabra, the store we sell through (Payhip) processes your payment and gives us your email address, name and purchase details so we can send your licence key, provide support and handle refunds. We do not receive your full card details. We keep purchase records for as long as the law requires us to keep sales records.
If you email us for support, we keep that conversation so we can help you.
Besides that, the app sends us only what the table below lists: for example your licence code and a one-way device code for the licence check, feature-use counts (you can switch these off), and a problem report when you press Send. Nothing else leaves your PC for us.
We keep licence and usage records for as long as your licence is active, and we delete them when you ask us to (unless the law requires us to keep them). To have your records deleted, email support@trynabra.com. If you send us your nabra.log to report a problem, it may include file names, app names and error messages from your PC; we use it only to fix the problem and delete it afterwards.
4. Children
Nabra is not directed at children under 13, and we don't knowingly collect information from them.
5. Your choices and rights
- Turn AI off, or choose "Local", so requests never leave your computer.
- Choose the offline Windows voice for spoken replies.
- Clear your clipboard history from the Clipboard tab, and delete anything Nabra stores by deleting the
%APPDATA%\Nabra folder.
- To ask what we hold about you (purchase details, licence and usage records, support emails), or to have it
deleted (where we're not required to keep it), email support@trynabra.com.
6. Changes
If we change this policy we'll update the date above and, for important changes, mention it in the app's release notes.
7. Contact
Don's Lab · support@trynabra.com · Kuwait
8. Who we are and your rights
Don's Lab, Kuwait, decides how this information is used (the "controller"). Contact: support@trynabra.com. We use your information to provide what you bought (licence, updates, support, refunds), to keep the sales records the law requires, because you asked us to (the launch email, problem reports), and for our legitimate interest in keeping the service secure and seeing which parts get used (feature and site counts). We are in Kuwait, and our providers (Cloudflare, Payhip, Google for our support inbox, and Resend for sending email) may handle data in other countries, including the US. You can ask to see, correct, delete or get a copy of your data, object to how it is used, or withdraw consent at any time by emailing support@trynabra.com. In the EU or UK you can also complain to your data protection authority.