Privacy, in plain language.

Who operates Nook

Nook is made by Kaleidal. Questions and privacy requests can be sent to hello@kaleid.al.

Information we process

When you sign in, Ave provides an identity ID and may provide your handle, display name, email address, and avatar URL. Nook stores profile preferences such as your theme color, tags, recent tags, and calendar markers. We also process subscription state, Stripe customer and subscription identifiers, entry dates, timestamps, Future Me selection offsets, encrypted payload sizes, and ordinary security and request logs.

Your entry content, page titles and bodies, page authors and tags, Future Me notes, and quoted text are encrypted on your device before upload. Nook stores their ciphertext and does not receive the content key.

Why we use it

We use account and metadata information to authenticate you, sync the correct encrypted diary, personalize the interface, provide billing, prevent abuse, investigate failures, answer support requests, and meet legal obligations. We do not sell personal information, run behavioral advertising, or use diary content to train AI models.

Services that help run Nook

Ave provides sign-in, identity profile information, token refresh, and the per-identity Nook encryption-key handoff. Cloudflare serves the application, runs the Worker API and realtime coordination, stores encrypted content and account metadata in D1, and provides operational logs. Stripe processes subscriptions and payment methods; Nook stores Stripe identifiers and billing state but does not receive full card details.

These providers process information under their own terms and privacy notices. They do not receive plaintext diary content from Nook.

Storage on your device

The web app keeps its Ave session bundle and Nook app key in browser session storage, which normally ends when that tab's browsing session ends. Encrypted unfinished drafts and non-sensitive cached interface data may remain in browser storage. The mobile app uses operating-system secure storage for session and key material and can place local key access behind device authentication.

Retention, export, and deletion

Your account data remains while your account exists. You can download a plaintext JSON export from the signed-in export screen; decryption happens on your device. Account deletion cancels an active Stripe subscription first, then deletes the profile, encrypted entries, pages, Future Me notes, and related active records. Stripe and infrastructure providers may retain transaction, security, or backup records where law, fraud prevention, or disaster recovery requires it.

Your choices

You can update profile details, export your diary, cancel a subscription, or delete your account from Nook. Depending on where you live, you may also have rights to access, correct, delete, restrict, or object to processing of personal information. Email us to exercise a right we cannot provide directly in the app.

Children

Nook is not directed to children under 13, and we do not knowingly create accounts for them. If you believe a child has provided personal information, contact us.

Policy changes

We will update the effective date and provide an appropriate in-product or email notice when a material change affects how account information is used.