Privacy policy

What we collect

Only what the app needs to work:

• Account: your name, username, email address and password (stored only as a secure hash, never readable), your language and settings.
• Profile: your photo, bio and pronouns, if you add them.
• What you post: nooks, their photos, pinned items, comments and questions.
• What you do: likes, saves, follows, blocks and reports you send.
• Device: a push notification token, if you allow notifications in the app.
• Technical: your IP address and request logs, kept by our servers for security; cookies that keep you signed in and remember your language. The website also remembers your theme in your browser.

How we use it

To run nooknook: show your profile and nooks, deliver the notifications and emails you'd expect (likes, comments, follows, verification and password resets), and keep the service safe, for example by limiting repeated login attempts and reviewing reports. We process your data because it's needed to provide the service you signed up for, and for our legitimate interest in keeping it secure.

Who sees what

Your profile, nooks and comments can be seen by other people on nooknook. You can hide your real name so others see only your @username. Your email address is never shown to others. People you block can't see your nooks or comments, and you can't see theirs.

Services we use

These companies run parts of nooknook for us and handle data only to provide their service:

• Railway: our servers, database, photo storage and search
• Vercel: the website
• Expo: delivering push notifications to your phone
• Google (Gmail): sending our emails

Where your data is

These providers' servers may be outside your country, including outside Turkey and the EU. They're used only to run nooknook.

Keeping and deleting

We keep your data while your account exists. You can delete your account any time in Settings. That removes your account, profile, nooks and their photos, likes, saves, follows, blocks, activity, the reports you sent, and your sessions and devices, straight away. It's a real deletion, not a deactivation.

Comments you left on other people's nooks stay so conversations still make sense, but they're shown as "Deleted user" with nothing linking them to you. If you want those gone too, tick "Also delete my comments" when you delete your account.

Server logs are kept only briefly, and backups may hold copies for a limited time until they're replaced.

Your rights

You can ask to see the data we hold about you, correct it, delete it, or object to how we use it. Under Turkey's personal data protection law (KVKK) and, where it applies, the EU's GDPR, you can also complain to your data protection authority. Write to info@nooknook.io and we'll answer within 30 days.

Children

nooknook isn't for anyone under 13, and we don't knowingly collect their data.

Changes and contact

If we change this policy, we'll update the date above and tell you in the app when the change matters. Questions about your data? Write to info@nooknook.io.