Nit privacy policy

Last updated: August 25, 2026

Nit is an iOS app for reviewing GitHub pull requests. It is built and published by Ben Kremer. This policy describes what data Nit handles and where that data goes.

Summary

• Nit has no backend server. The developer never receives your data.
• Nit contains no analytics, advertising, or crash-reporting SDKs.
• Your phone talks directly to GitHub and to the AI provider you configure, over TLS.
• Tokens and API keys are stored in the iOS Keychain and never leave your device except in requests to the service they belong to.
• Notifications are created on your device. Nit has no push server.

Data stored on your device

• GitHub personal access tokens and AI provider API keys that you enter, and the sign-in credential from an optional ChatGPT subscription login. These live only in the iOS Keychain.
• Pull request content you open: metadata, diffs, comments, and CI status, cached so PRs still open offline.
• AI conversation threads and pending review drafts, saved per pull request.
• Queued batch walkthroughs: when a walkthrough runs through a provider's batch API, Nit keeps the diff it sent and the provider's job ID until the result arrives.

Settings → Delete all data removes every cached PR, thread, draft, token, and key from the device and cancels any queued walkthrough job. Deleting the app removes the cache and the Keychain entries as well.

Data sent to third parties

Nit sends data only to services you choose to use, and only when you use them.

• GitHub. Nit calls the GitHub API to load pull requests and, when you ask it to, to post comments, submit reviews, and merge. Requests carry the token you configured. GitHub's handling of that data is governed by the GitHub privacy statement.
• Your AI provider. When you ask a question about a diff or request a PR summary, Nit sends the selected lines, surrounding file context, your question, and the thread history to the provider you configured (Anthropic, OpenAI, OpenRouter, or a ChatGPT subscription). That content, including source code from the pull request, is handled under that provider's terms and privacy policy. A batch walkthrough sends the same content to the provider's batch API, where requests are retained for about 30 days rather than processed transiently. Nit never sends anything to an AI provider without an explicit action from you.

Nit sends data to no other party.

Data the developer collects

None. Nit has no telemetry, no accounts, and no server operated by the developer. If you email support, that email is the only information the developer holds about you, and it is used only to reply.

Permissions

Nit uses the network to reach GitHub and your AI provider, and registers a share extension so you can send PR links to it from other apps. It requests no access to contacts, location, photos, camera, or microphone.

Notifications. If you allow them, sharing a pull request to Nit posts a notification you tap to open that PR — iOS gives a share extension no other way to reach the app. The notification is created on your device and sent nowhere: Nit has no push server and receives no remote notifications. It names the repository and pull request number, so that text can appear on your lock screen; turn off Show Previews for Nit in iOS Settings to hide it. Decline the permission and a shared PR waits for you the next time you open Nit instead.

Children

Nit is a developer tool and is not directed at children under 13.

Changes

Changes to this policy appear on this page with an updated date at the top.

Contact

Questions about this policy: contact@bkrem.dev