Privacy Policy
Your attention has been through enough. We handle your data with the same respect: we collect the minimum and leave you in control.
1. Who controls your data
Nuky is an app that supports organization, focus, and getting started for people with ADHD and mental overload. The data controller is William de Oliveira Izidre, responsible for Nuky. For privacy questions or requests, write to [email protected].
2. Data we collect
- Account data: name, email, user identifier, plan, and information needed to keep your access active.
- Content you create: tasks, steps, routines, reminders, focus records, focus time, mood check-ins, optional notes, progress, achievements, notifications, and insights.
- Usage and device data: time zone, preferences, app-generated device identifier, platform, device model/name, push token, and technical security signals.
- Photo and voice: when you choose to use these features, we process a photo of a list/note or spoken text to turn it into tasks. Nuky receives only the text of the transcription — the audio file is never sent to our servers or stored by us.
- Subscription data: plan status, product, paid period, and transaction identifiers received from the store or subscription provider. We do not store full card details.
Nuky is not a diagnosis or treatment tool. Mood check-ins are voluntary and are used only to support organization and self-awareness inside the app.
3. How we use this data
- To create and maintain your account.
- To show your next action, tasks, focus, check-ins, and progress.
- To send reminders and notifications at the right time.
- To support offline use and sync when the connection returns.
- To power AI features, such as task breakdown, photo-based list reading, and weekly insight.
- To apply Free/Pro limits, process subscriptions, and protect against abuse.
- To answer support, export, and deletion requests.
We do not sell your personal data and we do not use your data for third-party advertising.
4. Legal basis
We process data to provide the service you chose to use, to comply with legal obligations where applicable, based on your consent for optional permissions such as notifications, camera, and microphone, and based on legitimate interest for security, fraud prevention, and app improvement.
You can revoke optional permissions in your device settings or ask for help through the privacy contact.
5. Artificial intelligence
Nuky uses AI in specific features: breaking tasks into steps, reading lists from photos, and generating a weekly insight. For insights, we use aggregated usage, focus, and check-in data. For photos, the image is sent for processing and comes back as task suggestions: Nuky does not write the photo to your device, does not save it to your photo library, and does not store it on our servers — it exists only in memory during the request and is discarded afterwards. Operating system components may keep temporary files outside the app's control. Nuky does not use photos for advertising or to build a commercial profile about you.
For voice, transcription is handled by the device's own system. Nuky asks iOS for on-device recognition whenever the device and the chosen language support it; when local support is unavailable, iOS may send the audio to Apple's servers to recognise the speech, under Apple's privacy policy. In either case, Nuky only receives the resulting text.
AI is a support feature. The app still works without it.
6. Data sharing
We share data only with providers needed to operate Nuky, and only as needed:
- Supabase: authentication, account, and database.
- Google Cloud Run: API and cloud infrastructure.
- Expo Push Service and Firebase Cloud Messaging: notification delivery.
- Google Gemini: AI features, such as task breakdown, photo reading, and insights.
- RevenueCat, Google Play, and the App Store: subscription management and Pro status.
- Cloudflare: website, DNS, security, CDN, and edge protection.
- Google Analytics or an equivalent tool: only if enabled for site/app metrics; in that case, its use must follow this policy and available settings.
7. International transfers
Some providers may process data outside Brazil. When this happens, we seek to use services with contractual, technical, and organizational measures compatible with Brazil's LGPD.
8. Security and local storage
We use HTTPS, token-based authentication, user-level data separation, and managed secret storage.
On iPhone, your session data — the tokens that keep you signed in — is kept in the iOS Keychain, the system credential vault.
The rest of the data stored on the device so the app works offline — tasks, routines, check-ins, streak, achievements, weekly insight, subscription status, and the queue of changes waiting to sync — lives in files inside the app's private area. Those files do not get an encryption layer of Nuky's own: the protection comes from app sandboxing and from iOS Data Protection, which keeps disk contents encrypted while the device is locked. Keeping a passcode or biometrics enabled on your device is what makes that protection effective.
The device identifier, used to send notifications to the right device, is kept in the app's ordinary preferences storage rather than the Keychain. That is why reinstalling Nuky produces a new device identifier.
No system is 100% failproof, but we work to reduce risks and protect your information.
9. Retention and deletion
We keep your data while your account exists or for as long as needed to comply with legal obligations, resolve disputes, and maintain service security. When you delete your account, we erase associated data from active systems. Backups and technical logs may remain for a limited period until secure rotation.
10. Your rights
You may request confirmation of processing, access, correction, portability, information about sharing, anonymization, blocking or deletion of excessive data, withdrawal of consent, objection to irregular processing, and account deletion.
In the app, you can export your data and delete your account under Settings → Account and privacy. You can also write to [email protected].
11. Minimum age — children and teenagers
Nuky is intended for adults aged 18 or older. The app is not directed to children or teenagers, and we do not intentionally collect personal data from anyone under 18.
Under Article 14 of Brazil's LGPD, the processing of children and teenagers' data must be carried out in their best interest and, where applicable, with the specific consent of at least one parent or legal guardian. Because Nuky is designed for adults, we do not carry out that type of processing.
If we identify that an account was created by someone under 18, we will remove the associated data. If you are a parent or guardian and believe a minor under your care provided us with data, contact [email protected] so we can delete it.
12. Changes to this policy
We may update this policy. Meaningful changes will be communicated in the app, on the site, or by email.
13. Contact
Questions about privacy? Reach us at [email protected] or through our contact page.