Privacy policy.

Nemeton is a Matrix client for Apple Watch, developed by Anthony Saint-Martin. This policy covers the Nemeton app and its default notification gateway. For privacy requests, contact support@watchstore.app.

Nemeton connects to an existing Matrix account. Your Matrix provider, the servers participating in your rooms and any call services you use also process information under their own policies.

1. Your account and conversations

The app processes your Matrix user ID, homeserver address, device identifiers and authentication information to sign you in and maintain your session. It synchronizes your rooms, messages, reactions, replies, attachments and related metadata so you can use them on your watch.

When you send a message, attachment, voice recording or location, it is sent through your homeserver to the people and rooms you choose. Participating servers may exchange this information through Matrix federation. Account registration, server storage and server-side account deletion are managed by your Matrix provider.

2. What stays on your device

Nemeton stores session credentials in the system Keychain. It also stores preferences, cached conversations, drafts, pending messages and the cryptographic state needed to use encrypted rooms on your device. The app uses encrypted local caches for its stored conversation state.

Local information lets the app restore your session and display previously synchronized content. Drafting or queuing a message offline does not deliver it; a network connection is needed to send it.

3. Encryption

In Matrix rooms that use end-to-end encryption, Nemeton encrypts outgoing message content and supported media before uploading them, and decrypts incoming content on your device. This depends on compatible rooms, homeservers and devices.

Not every room is encrypted. Encryption of message content does not hide all metadata, such as account, room and event identifiers, membership, connection information or timing. Other participants may also save or share content they receive.

4. Optional permissions and features

• Microphone: used when you choose to record a voice message or join an audio call. Temporary voice-recording files are removed after completion or cancellation.
• Location: used when you choose to share your position in a Matrix room. If you start live location sharing, updates may be sent for the active sharing session.
• Notifications: used to notify you about messages and calls when enabled. You can change notification permissions in your device settings.

You can revoke microphone or location access in your device’s privacy settings. The corresponding features will then be unavailable. Revoking permission does not delete information you have already sent to a room.

Audio calls use MatrixRTC and compatible call infrastructure, which may include LiveKit services selected by your room or server. These services process call signaling, participant and connection information, and audio traffic as needed to connect the call. Their operators and settings depend on the service you use.

5. Notifications and the push gateway

When push notifications are configured, Nemeton registers an Apple push token and notification settings with your Matrix homeserver. The homeserver sends notification requests to the configured gateway, which forwards notifications through Apple Push Notification service (APNs).

The default gateway is push.nemeton.watchstore.app, hosted on OVH infrastructure. It processes device push tokens, application identifiers, Matrix room and event identifiers, notification counts and delivery information. The current app requests Matrix’s event_id_only notification format, designed to leave message contents out of homeserver-to-gateway requests.

The gateway and hosting services may produce operational and security logs, including request times, connecting IP addresses, response codes and delivery errors. Notifications are not an anonymous or metadata-free service. If you configure another gateway, that operator’s data practices apply.

6. Diagnostics and support

The app produces local diagnostic logs for troubleshooting. These may contain account, room, event, device or call identifiers and network state. The logging system attempts to redact credentials and other secrets. Review a log before choosing to share it with support.

If you email us, we process your email address, the message and any attachments to respond and investigate your request. Please do not send passwords, access tokens or recovery keys.

Nemeton does not include advertising or third-party advertising trackers. It does not sell personal information or use it for targeted advertising.

7. Retention and deletion

Local session and conversation data is retained to keep the app working between launches. The app’s sign-out-and-wipe action clears the local session, cached account data and cryptographic state, and attempts to remove the server-side push registrations and end the server session. Those server requests require connectivity and a responsive homeserver.

Signing out or uninstalling Nemeton does not delete your Matrix account, messages already delivered to other people, or copies held by participating servers. Contact your Matrix provider to request account deletion or information about its retention rules. You can also revoke a remaining device session through another Matrix client.

Local diagnostic files are size-limited and rotate as new entries are written. Gateway and hosting logs follow their infrastructure’s retention and rotation settings. Support correspondence is retained as needed to handle the request and any related security or legal obligations. These records do not all have a single automatic deletion period.

To request access to or deletion of information held by the Nemeton developer, email support@watchstore.app. We may need to verify that the request comes from the person concerned. We cannot delete information held independently by your homeserver or other room participants.

8. Service providers and your choices

Depending on the features you use, recipients of information include your Matrix provider and federated servers, your chosen call services, the configured push gateway, OVH as hosting provider, Apple for APNs and App Store services, and the email providers used for support. Those services may operate in different countries.

Information is processed to provide the functions you request, deliver notifications, operate and secure the services, and respond to support inquiries. Device permissions let you decide whether to use optional microphone, location and notification features.

Depending on applicable law, you may have rights to access, correct, delete or receive a copy of your personal information, restrict or object to certain processing, withdraw consent where processing relies on it, or complain to a data protection authority. Contact us for requests concerning our services; contact your Matrix or other independent provider for information they control.

9. Changes and contact

Changes to this policy will be published here with an updated date. For questions about Nemeton, this policy or your information, contact Anthony Saint-Martin at support@watchstore.app.