Privacy notice

Who is responsible

The Nook product team is responsible for this concept service. Privacy questions and rights requests can be sent to hello@nook.love. Commercial release details, including the responsible legal entity and postal address, will also appear in the applicable store listing before launch.

Information we handle

Account and relationship space

Account identifier, login address, display name, profile choices, invite and membership state, relationship-space settings, and subscription or access status.

Content you choose to add

Letters, prompt answers, timeline entries, milestones, dates, trips, private notes, photos, voice notes, and the metadata needed to display and protect them.

Notifications and device data

Expo push token, device platform, notification preferences, quiet hours, and delivery status. Nook does not need advertising identifiers for ordinary app notifications.

Free web letters

Letter text, opening condition, sender display name, optional sender email, opening status, and a salted hash of the sending IP address used for abuse prevention. The raw IP address is not stored in the Nook database.

Waitlist and service email

Email and optional name submitted to the waitlist, plus delivery status for requested launch notices and web-letter opening notifications.

Web hosting and operational logs

Hosting providers necessarily process connection details such as IP address, user agent, time, and request metadata. Nook’s own sealer monitoring records fixed outcome codes, counts, retry attempts, and HTTP status only; it does not add letter content, names, email, raw IPs, private links, or tokens to those event records.

Optional measurement

After consent, pseudonymous, content-free product events, a random event ID, limited campaign tags, bounded ad click IDs, and an internal-traffic flag. Nook does not put letter or moment text, names, email, private tokens, raw IP addresses, exact locations, or complete recipient URLs into event properties or profile fields. When your browser connects to an analytics or advertising provider, that provider necessarily receives network connection data such as an IP address and user agent. Nook disables IP-based geolocation where the provider supports that control.

Deletion-integrity record

After account deletion, Nook keeps a one-way hash of the former authentication subject plus deletion status and time. This narrow tombstone prevents a deleted session from silently recreating the account; it does not contain the former login address or restore access to deleted content.

How and why we use it

• Provide authentication, pairing, private sharing, storage, and requested messages.
• Enforce opening and reveal rules and prevent unauthorized cross-couple access.
• Protect the service through rate limits, capability links, fraud checks, and logs.
• Fix reliability issues and measure product usefulness after optional consent.
• Meet legal duties and respond to valid rights or safety requests.

Where European data-protection law applies, these purposes rely on performing the service you request, legitimate interests in security and reliability, your consent for optional measurement, or compliance with law. Consent can be withdrawn through “Privacy choices” on every web page without affecting earlier lawful processing.

Service providers

Nook currently uses specialist providers for limited purposes:

• Clerk for authentication and account identity.
• Convex for application data, server functions, and protected media access.
• Expo for push-notification delivery.
• Formspree for waitlist submissions and Resend for transactional email.
• Vercel for web hosting, request handling, and operational logs.
• PostHog for consented, content-free product measurement.
• Google Ads and Meta only for consented campaign measurement when configured.

These providers may process data outside your country under their contractual safeguards. Nook does not sell private couple content. RevenueCat purchase processing is disabled in the current product; this notice will be updated before it is enabled.

Retention and deletion

Active account content is kept while it is needed to provide the relationship space. Ended spaces can remain available as read-only archives. Free web letters and their hashed abuse-prevention records are scheduled for deletion after about 90 days. Waitlist details are kept until launch follow-up, withdrawal, or when they are no longer useful. Date-locked web letters can be scheduled up to 60 days ahead so they still have time to be opened before that deletion window. Web operational logs are kept for a limited security and reliability period; production monitoring is configured around a 30-day review window.

When a member deletes their account, that departing member’s identifying fields, drafts, private notes, unopened letters, unrevealed answers, unattached uploads, device tokens, invites, and access records are removed. Private artifacts authored by the surviving partner remain that partner’s data. Items the departing member already delivered or shared may remain in the partner’s archive under “Deleted partner”; this preserves the partner’s copy without retaining the departing person’s display identity. If no partner exists, the complete relationship-space graph is deleted. The same rule applies to ended spaces.

The deletion-integrity tombstone described above is retained only as long as needed to prevent account recreation and maintain necessary deletion or legal records. It cannot be used to sign in or reconstruct the deleted account’s content.

Your choices and rights

Depending on where you live, you may request access, correction, export, deletion, restriction, or objection, and may withdraw consent. Use the controls in Settings where available or email hello@nook.love. We may need to verify that the request belongs to you. You may also complain to your local supervisory authority; in Austria this is the Austrian Data Protection Authority.

A free web-letter URL is a capability: anyone who receives the complete link may view the envelope and, once eligible, open it. Keep it private and ask the sender for a new letter if a link is exposed.

Children, changes, and contact

Nook is intended for adults aged 18 and over. Material changes will be dated here and, where required, presented in the product before they take effect. Questions can be sent to hello@nook.love.