Privacy

Last updated 22 October 2026

The short version.

Norte keeps what you tell it: todos, reminders, recipes, the shopping list, the things you ask it to remember, the thoughts you braindump. That is the whole product.
Your messages go to Anthropic, in the United States, so they can be answered. It's the most important line on this page.
Only the last 12 messages of a conversation are kept. Older ones drop off as you keep talking, and nothing is kept past 90 days.
One person runs Norte. No company, no advertising, no third-party analytics, nothing sold. During your first month Norte notes which features you use, never what you wrote in them.
Everything about you goes with /deleteme in the bot, and /export hands you the lot as a file.

Who is responsible

Norte is built and run by one person in the Netherlands. There's no company behind it. For anything on this page, whether that's a question, a copy of your data or deletion, write to hello@norte.chat and it reaches them directly.

Under the GDPR that person is the data controller for everything described here. If you need their name and address, say to make a formal request or complain to a regulator, ask at that address and you'll be given them.

What Norte stores

Norte is a Telegram bot. It never sees your phone number, your contacts, or anything else on your device. What it holds is what you typed into it, plus whatever it needs to answer you.

Your account	Your numeric Telegram user and chat id, your Telegram username and first name, and which household you're in.
What you write	Todos, categories, reminders, recipes, the shopping list, the meal plan, facts you ask Norte to remember, and the names of people your household's things are about — a child without a phone of their own, say. Stored exactly as you wrote them. Thoughts you braindump are stored as you wrote them too, beside a tidied-up version, a category and a date if they named one.
Conversation	The last 12 messages of each conversation, so Norte can follow a thread. In a family group that's one shared thread, and the whole room's messages land in it.
Settings	Language, timezone, the times you picked for the morning briefing, the overdue nudge and the weather, and if you set one, your location, as a place name and its coordinates.
Calendar	Only if you link Google Calendar: an access token, a refresh token, the list of your calendars and which ones you picked. The events themselves are read from Google when they're needed. They aren't copied into Norte's database.
Incoming webhooks	Only if you create one with `/webhooks`: the endpoint and its secret, plus the last 50 messages sent to it, so you can set a reminder on their exact wording.
Usage and billing	One row per AI request, saying which model, how many tokens and what it cost. No message content in it. Then your household's balance, its ledger, and a record of each Telegram Stars payment, including the confirmation Telegram sends.
Your first month	During a household's 30-day trial, a short record of what was used and on which day: that a message was answered and which kinds of thing it did (added a todo, set a reminder), which list was opened, that a partner joined or a calendar was linked, that a plan was looked at. Labels and counts only, never what you typed, what a todo says or anyone's name. It's how the one person running Norte sees where new households get stuck.
Feedback	If you use `/feedback`: what you wrote, and the reply you got back.

No advertising, no third-party analytics, no tracking pixel, no profiling, and nothing about you is used to decide anything about you. The first-month record above is read by the operator, as counts, and never leaves Norte. This website sets no cookies.

Who else sees it

Norte couldn't work without these. They're listed with what actually reaches each one, rather than as a row of company names.

Anthropic	Your messages are sent to Anthropic's Claude API, in the United States, to be answered. So is the context Norte puts together for each reply: your open todos and their categories, your active reminders, your recipe titles, the facts you asked it to remember, your household's meal plan, the names your household has given the people its todos are about, and the events in your linked calendar over the next few days. Each thought you braindump is sent on its own to be tidied up and sorted, and the ones waiting are sent again together to write your digest. A question in your braindump may be looked up with a web search; the search terms come from the question. Two things here are easy to miss. In a family group, messages that weren't addressed to Norte get sent too, briefly, along with the last few for context, so it can work out whether a reply was wanted. And when a question needs current information, Claude may run a web search. The search terms come from your question.
Telegram	Every message to and from Norte travels through Telegram, under Telegram's own privacy policy. Payments are handled entirely by Telegram Stars, so Norte never sees a card number.
Google	Only if you link a calendar. Norte asks for permission to read and change your Google calendars, which is what lets it show you your week and move an appointment when you ask. Revoke it whenever you like in your Google account permissions.
Open-Meteo	For the weather message. Your coordinates go out to fetch a forecast, and a place name goes out when you set a location. There's no account or key involved and nothing that identifies you.
Railway	Hosts the bot and its database.
Vercel	Hosts this website. It's a static page and it doesn't talk to the bot or its database.

Anthropic is in the United States, so using Norte means your messages leave the EU. Nothing is sold to anybody, and nothing is shared outside this list.

How it is protected

Your Google tokens and your webhook secrets are encrypted before they're stored, so a copy of the database on its own won't open your calendar or your webhooks.

Everything else sits unencrypted in the database: your todos, your conversation, your remembered facts. What protects it is access control and the hosting provider's own safeguards, and access is limited to the operator. That's a real limitation, so it says so here.

Norte is built so one household can never read another's, and so work and personal items never show up in a family group. The operator's support tools show counts, timestamps and balances. They can't show the contents of anyone's lists or messages.

How long it is kept

Conversations: only the last 12 messages. Older ones go automatically as you keep talking, and anything older than 90 days is deleted nightly whether you're still talking or not.
Webhook messages: the last 50 per chat, and nothing older than 90 days.
Everything you created, so todos, reminders, recipes and remembered facts, stays until you delete it or ask for your account to go. Completed todos stay until they're archived.
Braindumps stay until you ask for your account to go. Archiving one takes it out of your digests; it does not delete it.
The first-month record is kept for 12 months, then deleted nightly, and goes with you straight away if you ask for your account to be deleted.
Usage and billing records are kept while the account exists. Payment records are kept after that where tax law says they have to be, with the personal details stripped off them.

Why it is allowed (legal basis)

To provide the service you asked for: storing your todos, answering your messages, sending your reminders. That's performance of a contract.
Your consent, for anything optional: linking a calendar, setting a location, creating a webhook. Withdraw it by unlinking, clearing it, or asking.
A legal obligation, for keeping records of payments.
Legitimate interest, for the first-month record: finding out which parts of Norte new households use and where they give up, so it can be made better. It holds no content and is deleted after a year. You can object to it at hello@norte.chat.

Your rights

You can ask for a copy of your data, ask for it to be corrected, ask for all of it to be deleted, ask for it in a portable form, or object to the whole thing. Those are your rights under the GDPR and they don't depend on anything.

Two of them are commands in the bot, and they work right away. /deleteme asks you to confirm and then deletes your account: your lists, your conversation, your remembered facts and your Google link, with your household going with you if you're the last one in it. /export sends you everything Norte holds for you as a JSON file — your own rows and your household's shared ones, with credentials left out on purpose.

Both are private-chat only, because both are about your own data and a family group is a room other people are in. Payment records are kept after a deletion where tax law requires it, with your name and your household taken off them.

For anything else — a correction, a question, or a request you'd rather make to a person — email hello@norte.chat, either from the Telegram account in question or naming it. Requests are answered inside 30 days and usually much sooner.

You can also stop at any point by blocking the bot in Telegram, though that leaves your data where it is. Ask for deletion if you want it gone. If you think your data has been mishandled, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Children

Norte isn't meant for children under 16, and there's no way to sign up for it without a Telegram account.

A household can name a child so that a todo or a reminder can be about them — "Lotte's swimming kit". That is a name and nothing else: no age, no birthday, no account. It belongs to the household, anyone in the household can remove it, and it goes when the household does. Todos about them stay the household's when the name is removed.

Changes

If this page changes in a way that matters, the date at the top changes with it and Norte tells you in the chat. The page doesn't just quietly get edited.

Contact

hello@norte.chat, or /feedback in the bot, which reaches the same person.