Privacy by design

Privacy Policy

Last updated: 4 August 2026 · Noki LLC

Next Card is built on a zero-custody principle: your Basecamp password is never seen, and the content of your boards, cards, comments, and files is never stored on our servers. This page explains exactly what we do and don't collect.

Who we are

Next Card is an independent app published by Noki LLC ("we", "us"). It is not affiliated with, endorsed by, or sponsored by 37signals, LLC. It lets you view and organize your own Basecamp Card Tables on iPhone, iPad, and Mac.

Sign-in: we never see your password

You sign in through Basecamp's own login (OAuth 2.0). Your Basecamp email and password go directly to Basecamp and are never received by us. The resulting access token is stored only in your device's Keychain — it is not held on our servers.

What we store, and why

Our backend holds only the minimum needed for push notifications and subscriptions:

  • Identifiers — a per-install device key, a numeric Basecamp identity id derived at login, and (if you enable notifications) a push token. These let push notifications and your subscription entitlement reach the right person. Used for app functionality only, never for tracking.
  • Purchases — your subscription status and product id, so we can unlock the full plan. We never receive your card or payment details; those go to Apple (and, for the team plan, Stripe).
  • Activity metadata for push — when Basecamp notifies us that something changed, we process event ids and event kinds only (no titles, names, or content) to decide whether to send you a notification. This is retained for 14 days.
  • Crash reports (optional) — if the app crashes and you haven't opted out, an anonymous crash report is sent to our own diagnostics service using a blind per-install token that cannot be mapped back to your Basecamp identity. No analytics, no sessions, no content. You can turn this off in Settings → Diagnostics.

What we do not collect

  • Your Basecamp content — cards, comments, files, and covers are fetched from Basecamp and rendered on your device. They are never stored on our servers.
  • Contact info — we never receive your name, email, or password.
  • Analytics or usage tracking — there is no analytics SDK and no advertising identifier.
  • Location, contacts, health, browsing/search history, or financial info.

Tracking

Next Card does not track you. No data is shared with data brokers, and there are no cross-app or cross-site advertising identifiers. No App Tracking Transparency prompt is needed.

Third parties

  • Basecamp / 37signals — the source of your data, accessed with your authorization.
  • Apple — App Store, in-app purchases, and push delivery (APNs).
  • Stripe — payment processing for the web-based team plan only.

Data retention & deletion

Signing out removes the access token from your device. To delete the device key and push registration held by our backend, sign out and contact us at the address below; we will remove records associated with your install. Push activity metadata auto-expires after 14 days.

Children

Next Card is not directed to children under 13 and does not knowingly collect data from them.

Changes

If this policy changes, we will update the date above and, for material changes, note it in the app or on this site.

Contact

Questions about privacy? Email support@nextridge.app.