Privacy Policy

What Nook stores on your device

When you share a link to Nook, the following is written to a private database inside Nook's own app storage, which no other app on your phone can read:

• the link, and a normalised copy of it used to spot duplicates
• the title, description, thumbnail, author and site name of the page
• the article text, when the page is an article, so you can read it offline
• any note, tag or collection you add
• when you saved it, and whether you have opened it

Uninstalling Nook deletes all of it.

Signing in with Google

Signing in with Google is required to use Nook. The app asks for it once, during setup, and never again unless you sign out. It is what gives your library somewhere to live besides one phone.

Links you share to Nook are saved to your device immediately, before any sign-in check — a link you sent to Nook is never lost to a sign-in prompt, even if you have not finished setting up yet.

Google Sign-In is the only Google service Nook uses. There is no Firebase, no analytics SDK and no Google-hosted database; the sync server is ordinary Node and Postgres run by us.

When you sign in, Google tells Nook the following about your Google account:

Nook requests the openid, email and profile scopes and nothing more. It does not request access to your Gmail, Drive, Contacts, Calendar, Photos or any other Google service, and it cannot read them.

Nook does not receive or store your Google password. Authentication happens inside Google's own sign-in screen.

What backing up uploads

This is the honest part. If you sign in and press Back up, a copy of your library is sent to Nook's server so it survives a lost or replaced phone. That copy includes:

• the links you saved, and their titles, descriptions, thumbnails, authors and site names
• your notes, tags and collections
• timestamps, and whether each item is opened, starred or archived

It does not include the extracted article text Nook keeps for offline reading. That is re-fetchable from the original page, so uploading it would multiply the size of your backup for nothing.

Your library is stored against your Google account identifier in a Postgres database, is not readable by other users, is transmitted over TLS, and is encrypted at rest by the hosting provider. One backup is kept per account: backing up again replaces the previous copy rather than adding to a history.

Nook does not sell this data, does not share it with advertisers or data brokers, and does not use it to build a profile of you. It exists on the server for one reason: to hand it back to you on another device.

Backing up is still something you trigger. Signing in creates your account and lets Nook back up; it does not upload your library on its own. Until you press Back up, what you have saved stays on the device.

The daily reminder

The daily nudge is generated entirely on your phone, by Android's own scheduler, from your own database. Nothing about it involves a server or a network request. Nook does not use push notifications at all, and stores no delivery token, no reminder time and no timezone anywhere but on your device.

Network access

Apart from backup, Nook makes network requests for exactly one purpose: fetching the public preview information — title, description, image — for links you chose to save. Those requests go directly from your phone to the website in question, the same request your browser would make if you opened the link.

Nook sends no identifier, no account and no information about you with them. It identifies itself honestly as NookBot/1.0 rather than impersonating a browser.

You can turn this off in Settings → Privacy → "Fetch link previews". With it off, Nook fetches nothing from the sites you save.

What Nook does not do

• No analytics, telemetry or crash-reporting SDKs
• No advertising, and no advertising identifiers
• No third-party trackers of any kind
• No selling or sharing of your data with anyone
• No reading of your saved content by us — synced libraries are stored to be returned to you, not inspected
• No phone number, and no email address unless you choose to sign in

Permissions

Nook does not request permission to draw over other apps, or to read your contacts, location, files, camera or microphone.

Your data, on your terms

Export

Settings → Your data → Export. JSON, CSV, or browser-compatible HTML. The JSON export is lossless and imports straight back into Nook. There is no export wall and no notice period.

Delete individual saves

Delete any save from its detail screen. To erase everything on the device at once, use Android's Settings → Apps → Nook → Storage → Clear data, or simply uninstall.

Delete your account and synced data

Retention

Your backup is retained while your account exists, and is deleted when you delete the account. There is no archival copy kept afterwards beyond routine encrypted backups, which age out within 30 days.

Android backups

If you have Android's automatic backup enabled, your Nook database may be included in your Google account backup. That backup is governed by Google's privacy policy rather than this one. You can exclude Nook from Android Settings → Google → Backup.

Children

Nook is not directed at children under 13 and is not designed for them. We do not knowingly collect information from anyone under 13. If you believe a child has signed in, write to privacy@installnook.app and the account and its data will be deleted.

Changes to this policy

If this policy changes, the updated version is published at this URL with a new date at the top. Material changes — anything that widens what leaves your phone — will also be shown in the app before they take effect, not buried here.

Contact

Questions about this policy, or about what Nook holds: privacy@installnook.app.