Draft for review. This page is a starting point written for the Nook team, not legal advice. Replace every [BRACKET], and have it reviewed by a qualified person before you publish it or give the link to Google Play or the App Store.

Privacy policy

Last updated: [DD-MM-YYYY]. This policy explains what [COMPANY NAME] ("Nook", "we") collects when you use the Nook app and this website, why, and your choices. We aim to follow Singapore's Personal Data Protection Act (PDPA). [Confirm this statement with your adviser before publishing.]

1. What we collect

Account details: your name, email address and profile photo.
What you put in Nook: tasks, messages, notes, calendar events, files and name card details you create or receive in your groups.
Group details: the groups you belong to, your role, and the plan the group uses.
Usage and device information: app version, device type, crash reports, and counts such as how many Nook AI requests you used today. [List the exact analytics and crash tools you use.]
Nook AI requests: when you use Nook AI, your question and the workspace information needed to answer it are sent to our AI provider to produce the answer. Our usage log keeps numbers only, not the text of questions or answers.

2. How we use it

To run the app, show your data to the people in your group, keep the service safe, count usage against plan limits, fix problems, and contact you about your account. We do not sell your personal data.

3. Who can see it

Only members of your group can see that group's content. Private notes are visible only to you.
Service providers that help us run Nook: [Supabase (database and sign-in, region: REGION)], [Anthropic (Nook AI)], [Google Play Billing and RevenueCat (subscriptions)], [crash and analytics provider]. They process data for us under their terms.
We may share information when the law requires it.

4. Nook AI

Nook AI only proposes actions. Nothing is sent or saved until you confirm. You can choose what Nook AI may read in the app, and admins can limit what it may access for the whole group. Nook AI can make mistakes, so check what it suggests.

5. How long we keep data

We keep your data while your account is active. When you delete your account we delete or anonymise your personal data within [30] days, except what we must keep by law. Usage logs contain numbers only and are deleted after [90] days. Backups are removed on a rolling schedule within [N] days.

6. Your choices and rights

You can access, correct or delete your information, withdraw consent, and ask for a copy. See how to delete your account, or contact us below.

7. Security

Data is sent over encrypted connections and protected by access rules that limit it to your group. No system is perfectly secure. If a data breach affects you, we will tell you and the authorities as the law requires.

8. Children

Nook is not meant for children under [13/16]. If you believe a child has given us personal data, contact us and we will delete it.

9. Where data is stored

Data is stored in [REGION, for example Singapore]. If it is processed elsewhere, we make sure the provider protects it to a comparable standard. [Confirm with your adviser.]

10. Changes and contact

We will update this page when things change and tell you about important changes in the app. Questions: [DATA PROTECTION CONTACT NAME], support@nookhq.app, [COMPANY ADDRESS].