Privacy Policy

This Privacy Policy describes how Nook ("we", "us", or "our") collects, uses, and protects information when you use our website and application (the "Service"). By using the Service you agree to the practices described below.

1. Information We Collect

We collect the following categories of information:

Account information

When you register, we collect your email address and, optionally, a display name. We do not collect your full name, address, or payment card details directly — payment processing is handled by third-party providers such as Gumroad.

Content you enter

Any data you enter into the Service (planner entries, notes, tracker items, etc.) is stored on our servers so we can provide the Service to you.

Usage and analytics data

With your consent we collect anonymised analytics data (pages visited, session duration, browser type) via Google Analytics to help us improve the Service. You can opt out through the cookie banner or your browser settings.

2. How We Use Your Information

• To provide, maintain, and improve the Service.
• To authenticate you and keep your data associated with your account.
• To send you transactional emails (e.g. invitation notifications, access confirmations).
• To respond to support requests.
• To detect and prevent abuse, fraud, or unauthorised access.
• To analyse aggregate, anonymised usage patterns (only with your consent).

We do not sell your personal data to third parties.

3. Cookies

We use essential cookies required for the Service to function (e.g. session cookies). With your explicit consent, we also use Google Analytics cookies to collect anonymised usage statistics. You can accept or decline non-essential cookies via the cookie banner shown on your first visit. Declining does not affect your ability to use the Service.

4. Data Retention

We retain your account and content data for as long as your account is active or as necessary to provide the Service. If you request deletion of your account, we will delete your personal data within 30 days, except where we are required by law to retain it longer.

5. Data Security and No Guarantee

We implement industry-standard technical and organisational measures to protect your data. However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your data. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.

We are not responsible for data loss caused by circumstances outside our reasonable control, including infrastructure failures, cyber-attacks, or force majeure events. We encourage you to export and keep local copies of important data you store in the Service.

6. Third-Party Services

We use the following third-party services that may process data on our behalf:

• Gumroad — payment processing. Subject to Gumroad's privacy policy.
• Google Analytics — anonymised usage statistics (consent-gated).
• Email delivery provider — transactional emails. We share only your email address for delivery purposes.

We are not responsible for the privacy practices of these third parties. We encourage you to review their respective privacy policies.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of your account and personal data.
• Portability — request your data in a machine-readable format.
• Objection / restriction — object to or restrict certain processing.
• Withdraw consent — withdraw consent for analytics cookies at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

10. Contact

If you have questions or concerns about this Privacy Policy, please contact us at [email protected].