Privacy Policy
Your attention has been through enough. We treat your data with the same care: we collect the minimum, explain things plainly, and leave you in control.
1. Who controls your data
Nuky is an app that supports organization, focus, and getting started for people with ADHD and mental overload. The data controller is William de Oliveira Izidre, responsible for Nuky. For privacy questions or requests, write to privacy@nuky.com.br.
2. Data we collect
- Account data: name, email, user identifier, plan, and information needed to keep your access active.
- Content you create: tasks, steps, routines, reminders, focus records, focus time, mood check-ins, optional notes, progress, achievements, notifications, and insights.
- Usage and device data: time zone, preferences, app-generated device identifier, platform, device model/name, push token, and technical security signals.
- Photo and voice: when you choose to use these features, we process a photo of a list/note or spoken text to turn it into tasks.
- Subscription data: plan status, product, paid period, and transaction identifiers received from the store or subscription provider. We do not store full card details.
Nuky is not a diagnosis or treatment tool. Mood check-ins are voluntary and are used only to support organization and self-awareness inside the app.
3. How we use this data
- To create and maintain your account.
- To show your next action, tasks, focus, check-ins, and progress.
- To send reminders and notifications at the right time.
- To support offline use and sync when the connection returns.
- To power AI features, such as task breakdown, photo-based list reading, and weekly insight.
- To apply Free/Pro limits, process subscriptions, and protect against abuse.
- To answer support, export, and deletion requests.
We do not sell your personal data and we do not use your data for third-party advertising.
4. Legal basis
We process data to provide the service you chose to use, to comply with legal obligations where applicable, based on your consent for optional permissions such as notifications, camera, and microphone, and based on legitimate interest for security, fraud prevention, and app improvement.
You can revoke optional permissions in your device settings or ask for help through the privacy contact.
5. Artificial intelligence
Nuky uses AI in specific features: breaking tasks into steps, reading lists from photos, and generating a weekly insight. For insights, we use aggregated usage, focus, and check-in data. For photos, the image is processed to extract tasks; Nuky does not use photos for advertising or to build a commercial profile about you.
AI is a support feature. The app still works without it.
6. Data sharing
We share data only with providers needed to operate Nuky, and only as needed:
- Supabase: authentication and account management.
- Google Cloud Run and Neon/PostgreSQL: API, database, and cloud infrastructure.
- Expo Push Service and Firebase Cloud Messaging: notification delivery.
- Google Gemini: AI features, such as task breakdown, photo reading, and insights.
- RevenueCat, Google Play, and later App Store: subscription management and Pro status.
- Cloudflare: website, DNS, security, CDN, and edge protection.
- Google Analytics or an equivalent tool: only if enabled for site/app metrics; in that case, its use must follow this policy and available settings.
7. International transfers
Some providers may process data outside Brazil. When this happens, we seek to use services with contractual, technical, and organizational measures compatible with Brazil's LGPD.
8. Security and local storage
We use HTTPS, token-based authentication, user-level data separation, and managed secret storage. In the app, session and offline cache data are stored encrypted on the device whenever possible, using resources such as Keychain/Keystore.
No system is 100% failproof, but we work to reduce risks and protect your information.
9. Retention and deletion
We keep your data while your account exists or for as long as needed to comply with legal obligations, resolve disputes, and maintain service security. When you delete your account, we erase associated data from active systems. Backups and technical logs may remain for a limited period until secure rotation.
10. Your rights
You may request confirmation of processing, access, correction, portability, information about sharing, anonymization, blocking or deletion of excessive data, withdrawal of consent, objection to irregular processing, and account deletion.
In the app, you can export your data and delete your account under Settings → Account and privacy. You can also write to privacy@nuky.com.br.
11. Minimum age — children and teenagers
Nuky is intended for adults aged 18 or older. The app is not directed to children or teenagers, and we do not intentionally collect personal data from anyone under 18.
Under Article 14 of Brazil's LGPD, the processing of children and teenagers' data must be carried out in their best interest and, where applicable, with the specific consent of at least one parent or legal guardian. Because Nuky is designed for adults, we do not carry out that type of processing.
If we identify that an account was created by someone under 18, we will remove the associated data. If you are a parent or guardian and believe a minor under your care provided us with data, contact privacy@nuky.com.br so we can delete it.
12. Changes to this policy
We may update this policy. Meaningful changes will be communicated in the app, on the site, or by email.
13. Contact
Questions about privacy? Reach us at privacy@nuky.com.br or through our contact page.