Privacy Policy

Last updated 16 August 2026

Nook holds a family's calendar, so it holds where children are and when. This page says exactly what is stored, who else ever sees it, and how to delete it. It is written to be read rather than to cover us.

What Nook stores

Your account — email address and a password, handled by Supabase Auth. We never see or store the password itself.
Your family's data — the people you add, events, tasks, meals, lists, and photos you upload for the wall display.
Photos you scan — kept for 30 days so you can go back to a scan, then deleted automatically.
Google Calendar data, only if you connect it — see below.

There is no analytics, no advertising, and no third-party tracking in Nook. We do not build a profile of you and there is nothing to sell.

Who else your data touches

Nook is small and uses a few services to run. Each one, and why:

Supabase — stores the database and uploaded photos. This is where your family's data lives.
Fly.io — runs the application itself.
Google — only if you use the features that involve them, described next.

Your family's data is not shared with anyone else, and is never sold.

Google Calendar

Connecting Google Calendar is optional and off until you set it up. When you do connect it:

Nook creates its own calendar in your Google account, called "Nook Family", and writes your Nook events there. It does not write to your personal or work calendars.
If you choose to import a calendar, Nook reads its events so they can appear on your family wall. Imports are read-only — Nook never changes an imported calendar.
Nothing is imported unless you tick it. Nook does not read calendars you have not chosen.

Nook's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Google Calendar data is used only to provide the calendar features you switched on. It is never used for advertising, never sold, and never used to train any model.

You can disconnect at any time from More → Google Calendar. Disconnecting revokes Nook's access with Google and removes the events that were imported.

Scanning a photo

If you use the scan feature, the photo is sent to Google's Gemini API to be read, on a paid tier whose terms state that submitted content is not used to train their models. Nook keeps the image for 30 days so you can return to a scan, then deletes it. Scanned photos never appear on the wall display or in your family photos.

Scanning is off until an adult in the household turns it on, and can be turned off again at any time.

Children

Children in a family are added as names and colours by an adult. They do not have accounts, do not sign in, and we do not collect anything from them directly. Nook is intended to be set up and controlled by an adult.

Deleting your data

You can delete individual events, photos, and scans in the app at any time. To delete your account and everything belonging to your household, email mina.88+kiosk@gmail.com and we will remove it. Deleting the household deletes its data — there is no archive we keep afterwards.

Security

Data is transmitted over HTTPS. Each household's data is isolated in the database at the row level, so one family's request cannot read another's. Google refresh tokens are encrypted before being stored.

Nook is a small product and this is an honest description rather than a security guarantee. If you find a problem, please tell us at mina.88+kiosk@gmail.com.

Changes

If this policy changes in a way that affects what happens to your data, we will say so in the app rather than only editing this page.

Contact

mina.88+kiosk@gmail.com