Legal
Privacy Policy
Nook is a voice-first reflection and journaling app. This Privacy Policy explains what information Nook (“Nook,” “we,” “us,” or “our”) collects, how we use and share it, and the choices available to you when you use the Nook app and website.
Information we collect
We collect information you provide and information created as you use Nook, including:
- Account and profile information, such as your Sign in with Apple identifier, optional email and display name, timezone, goals, preferences, and call schedule.
- Reflection content, including call transcripts, chat messages, summaries, weekly reports, remembered topics, reminders, and feedback. Nook processes live microphone audio to hold and transcribe calls, but Nook does not record or store the raw audio.
- Device and service information, such as an installation identifier, app and OS versions, push notification tokens, call status, timestamps, usage and subscription information, and error or performance diagnostics.
- Website information, such as basic website usage information collected through Vercel Analytics.
How we use information
We use this information to:
- create and secure your account;
- schedule and conduct reflection calls;
- transcribe conversations and create summaries, reports, chat responses, and optional memories;
- send calls, reminders, service updates, and other requested notifications;
- provide subscriptions, enforce usage limits, and prevent abuse; and
- operate, troubleshoot, support, and improve Nook.
We do not sell your personal information or use it for targeted advertising.
AI and service providers
Nook uses third-party services to provide the app. Depending on the feature, information may be processed by:
- Apple for authentication, notifications, and App Store services;
- Railway for application hosting and database storage;
- LiveKit for realtime call transport and agent infrastructure;
- OpenAI for AI conversation, extraction, summaries, reports, chat, and memory features;
- Deepgram for speech-to-text and Cartesia for text-to-speech;
- Sentry and Honeycomb for privacy-conscious diagnostics and reliability; and
- Vercel for website analytics.
For example, live audio is sent through LiveKit to speech providers, and relevant transcript text and context are sent to OpenAI to generate Nook's responses and reflection features. We require service providers to protect personal information consistently with this policy and to process it only to provide their contracted services. We may also disclose information when required by law, to protect people's safety or rights, or as part of a business transaction with appropriate safeguards.
Retention and deletion
We retain account details, summaries, reports, and other user-visible history while your account is active, unless you delete them sooner. Completed transcript events are normally retained for up to 365 days; a transcript excerpt supporting an active remembered topic may remain until that topic is deleted. Operational records have shorter or longer periods depending on their purpose—for example, inactive installations and many notification or diagnostic records are generally removed after 90 days, while security and administrative audit records may be kept for up to two years.
In Nook, you can manage or clear remembered topics, delete your reflection history while keeping your account, or delete your entire account from Profile → Account settings. Account deletion removes the account and associated product data from active systems after fresh Sign in with Apple confirmation. Limited records may remain temporarily in provider logs, security records, or backups until they expire under the applicable retention schedule.
You can also request deletion or withdraw consent for optional processing by emailing us. Withdrawing consent does not affect processing that already occurred and may prevent the affected feature from working.
Security and international processing
We use reasonable technical and organizational safeguards, including encrypted network connections, short-lived service credentials, access controls, and privacy-conscious logs. No system is completely secure. Nook and its providers may process information in countries other than your own; where required, we use appropriate safeguards for those transfers.
Your choices and rights
Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal information, or to withdraw consent. You may also have the right to complain to your local data protection authority. To exercise a right, contact us at the address below; we may need to verify your identity first.
Children's privacy
Nook is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us so we can delete it.
Changes to this policy
We may update this policy as Nook changes. We will post the updated policy here, revise the date above, and provide additional notice when required.
Contact us
Questions or privacy requests can be sent to hey@heynook.app.