Nessi is built to be private by default. We don't make money from advertisers, we don't sell your messages, and we don't ask for an account. This page explains — in plain English — what we collect, what we don't, and who can see what.
The rest of this page backs each of these up in detail. If you only read this section, you'll still have the complete picture.
Your phone number is the only thing identifying you. No email, no password, no profile to fill out.
Messages go to Anthropic under their API terms. We don't sell them, share them, or train ad models on them.
Nessi makes nothing from advertisers. Recommendations are what we'd recommend a friend — not what pays the most.
Reply STOP at any time and your conversation history and profile are deleted. No retention games.
Nessi is published by Bubl, a sole proprietorship based in the United States ("we," "us," "our"). "You" means the person texting Nessi or visiting nessi.chat.
For any privacy question, request, or complaint: support@bublcx.com. A real person reads everything sent to that address.
Nessi only collects what's needed to text you back and remember you between conversations. The following is a complete list of information we (or a service provider acting on our behalf) receive:
That list is exhaustive. We don't collect your contacts, your location, your browsing history, or anything else beyond what you put into a message to Nessi.
Every reply Nessi sends is generated by a large language model. We use commercial AI APIs rather than running models ourselves. When you text Nessi, the contents of the conversation (your messages and the assistant's prior replies) are sent to the AI provider so the model can produce the next reply.
The providers Nessi uses are:
We do not share your data with these providers for advertising or marketing purposes — only for the technical purpose of generating the reply you asked for.
Text messages reach Nessi through an SMS provider, which acts as the carrier between your phone and our servers:
Note on attachments: when you send an image, Sendblue temporarily hosts it and gives us a URL to download it. The image is publicly accessible at that URL for the duration of Sendblue's retention window (typically about 30 days) before being deleted on their side.
Nessi runs on:
For clarity, here is a list of things Nessi does not do, that other "free" services sometimes do:
Depending on where you live, you may have rights under the General Data Protection Regulation (GDPR, EU/UK), the California Consumer Privacy Act (CCPA/CPRA), or a similar law. These typically include the right to:
To exercise any of these, either text STOP to the Nessi number (instant deletion of your conversation history and profile) or email support@bublcx.com from a verified address and tell us what you want done. We will respond within 30 days.
We do not sell your personal information and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA.
Nessi is not directed to children under 13, or under the equivalent age of digital consent in your jurisdiction (16 in parts of the EU and the UK). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact support@bublcx.com and we will delete it.
Our primary security measure is minimization: by not collecting an account, an email address, a payment method, or any data beyond what you choose to share inside a message, the amount of information an attacker could obtain from us is inherently small.
For the data we do hold: phone numbers are stored as a one-way hash plus an encrypted reversible form (separate keys); message history and profile are stored in Cloudflare D1; memory notes and any image bytes are stored in Cloudflare R2 with access scoped to our application. We rely on Cloudflare's security program for the underlying infrastructure. No system is perfectly secure, and we cannot guarantee absolute security of any information.
The publisher is based in the United States. The SMS number is a US number. If you text Nessi from outside the United States, the information we hold may be processed in the United States or in other countries where our service providers operate. Where required, we rely on the standard contractual clauses or equivalent transfer mechanisms offered by those providers.
We may update this policy from time to time. Minor edits (clarifying wording, fixing typos, updating a link) take effect when posted. Any material change — for example, adding a new type of data collection, or weakening one of the core privacy guarantees in the summary above — will be announced on this page at least 30 days before it takes effect, and the effective date below will be updated.
For any question about this policy, to exercise a privacy right, or to tell us you think we're doing something wrong, email support@bublcx.com.
Effective May 26, 2026. Last updated May 26, 2026.
