1. Who is responsible

The controller for the processing described here is:

For any question about your data, or to exercise your rights, write to the address above.

2. In short

• Nooky is a Mac app. Your projects, files, Git history, sessions, chats, your office and your Nook Coins stay on your Mac.
• We process data for your account, for Nook AI and for Nooky Pro — nothing else. There is no tracking, no advertising and no analytics, in the app and on the website, and we do not sell data.
• What you send to Nook AI goes through our servers to the AI provider. We do not store or log its content, and it is not used to train AI models.
• You can delete your account in the app at any time.

3. Your account

An account is required to use Nooky. Sign-in is handled by Firebase Authentication (Google). Depending on how you sign in, we process:

• Sign in with Apple: an identifier that Apple creates for Nooky. We do not ask Apple for your name or email address.
• Google: your Google account identifier and email address.
• Email link: your email address. Firebase sends you the sign-in link by email.

In each case also an account ID, the sign-in method and the times the account was created and last used. Your sign-in stays in the macOS Keychain on your Mac.

Purpose and legal basis: providing your account and the Service (Art. 6(1)(b) GDPR). We keep this data until you delete your account.

4. Nook AI

When you use Nook, the app sends what Nook needs for its answer to our server, which passes it on to the AI provider and streams the answer back. This includes your messages, images you add, contents of files in your project, the output of commands Nook ran, and information about the developer tools on your Mac. The text you type on the Home screen is also sent there, to decide whether it is a question or a new project. Web searches that Nook runs are carried out by the AI provider.

• Content: our server does not store or log the content of your requests or of Nook’s answers. The conversation with Nook is stored only on your Mac.
• Usage: for Nook Energy and to protect the Service, we store per request your account ID, the time, the model, token counts and cost, and a monthly total of your usage. Request logs are kept for 30 days, monthly totals until you delete your account.
• AI provider: Anthropic Ireland, Limited, with its affiliate Anthropic, PBC (USA), processes this data on our behalf under a data processing agreement. Anthropic does not use it to train its models and deletes it according to its data retention policy.

Legal basis: providing the Service you requested (Art. 6(1)(b) GDPR). Please do not send Nook personal data of other people unless you are allowed to.

5. Nooky Pro

Nooky Pro is sold by Link (Sold through Link, LLC, a Stripe company) as merchant of record. Link processes your payment details, billing address and email address as its own controller; we never receive your payment details. See the privacy notice shown at checkout and Stripe’s Privacy Policy.

We receive from Stripe and store: the customer and subscription identifiers, the status of the subscription and the end of the paid period. We give Stripe your account ID so that your purchase is linked to your account. Legal basis: Art. 6(1)(b) GDPR. We keep this data until you delete your account; Link keeps its records as required by tax law.

6. Security and preventing abuse

To keep Nook AI available and fair, we count requests per minute, limit parallel requests and check each request against your plan. If an account breaks our Terms of Service, we can suspend Nook AI for it and record the reason and date. Legal basis: our legitimate interest in a secure Service and in preventing abuse (Art. 6(1)(f) GDPR). The record of a suspension is kept as long as the suspension applies; a suspended account cannot be deleted in the app — write to us instead.

Google, as operator of our servers, logs technical data of each connection (such as IP address and time) for security.

7. Deleting your account

In the app under Settings › Account › Delete Account. We then cancel a running Nooky Pro subscription, delete your usage data and subscription data, and delete your sign-in. We keep only a note that an account with this ID was deleted and when, so that delayed payment messages cannot recreate it; this note contains no other data about you. Everything on your Mac stays there until you delete it.

8. App updates

Test versions of Nooky check once a day for updates and download them from GitHub Releases (GitHub, Inc., USA). GitHub receives your IP address and the app version, as with any download. Legal basis: our legitimate interest in keeping the app secure and up to date (Art. 6(1)(f) GDPR). See GitHub’s Privacy Statement.

9. Things you connect on your Mac

• GitHub: if you connect your GitHub account, Nooky talks to GitHub directly from your Mac to show issues. The access token stays in your Keychain; we receive nothing.
• Your own Claude subscription: if you let Nooky use the Claude command-line tool installed on your Mac, it talks to Anthropic directly under your own agreement with Anthropic. Nooky reads its session files on your Mac to show your sessions and keeps a salted fingerprint of the signed-in Claude account on your Mac to notice when you switch accounts. None of this is sent to us.
• Developer tools: if you let Nooky install tools such as Node.js or XcodeGen, they are downloaded from their official sources (nodejs.org, GitHub), which receive your IP address. Git and Xcode are installed through Apple.

10. This website

nookyai.com is hosted on Firebase Hosting (Google). When you visit it, the server logs technical data such as your IP address, the time, the page and your browser, to deliver the site and keep it secure (Art. 6(1)(f) GDPR). The website uses no cookies, no analytics and no external fonts or scripts. The Nooky download comes from GitHub Releases.

11. Recipients and transfers outside the EU

• Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA) — Firebase Authentication, Cloud Firestore, Cloud Functions, Cloud Logging and Firebase Hosting, as our processor. Our database (Cloud Firestore) and our server (Cloud Functions) run in the EU (Belgium, region europe-west1); Firebase Authentication and Firebase Hosting are global services.
• Anthropic (Anthropic Ireland, Limited, and Anthropic, PBC, USA) — AI models for Nook AI, as our processor.
• Link / Stripe — sale of Nooky Pro, as their own controller (section 5).
• GitHub (GitHub, Inc., USA) — app downloads and updates (section 8).

Some of these recipients process data in the USA. Transfers are based on the EU Standard Contractual Clauses and, where the recipient is certified, the EU-U.S. Data Privacy Framework (Art. 45 and 46 GDPR).

12. Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17), restricted (Art. 18) and handed over in a portable format (Art. 20). Where we rely on our legitimate interest (Art. 6(1)(f)), you can object to the processing for reasons arising from your particular situation (Art. 21). You can also lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or where we are based.

13. Other points

• Nooky is only for people aged 18 and over.
• We do not make decisions about you based solely on automated processing that have legal or similarly significant effects (Art. 22 GDPR). “Auto” only chooses which AI model answers.
• Providing your data is necessary for the account and Nook AI; without it, you cannot use them.
• We will update this policy when the Service changes and show the date above.