Privacy Policy.

Last updated: August 29, 2026

The short version

Core notebook content is stored locally on your device in a Drift/SQLite database. You can use Nook without signing into sync.

When you choose to enable Nook Sync, Nook uses Supabase Auth and Supabase infrastructure to synchronize content associated with your authenticated account between supported devices.

Information Nook handles

Local notebook content

Notes, tasks, journal entries, collections, and related notebook data are stored locally on the device where you create them. Local data is not sent to Nook’s website.

Optional synced content

If Nook Sync is enabled, selected notebook data and related metadata are sent to the configured Supabase project so your authenticated devices can synchronize. Attachments may also be uploaded to private storage when attachment sync is enabled.

Account information

An account uses an email address and authentication credentials managed through Supabase Auth. Nook uses the authenticated account to keep synchronized notebooks separated between users through account-scoped security policies.

Premium and payment information

If you purchase Nook Premium, the account-owned entitlement records the Premium access period and expiry. When live payments are enabled, Midtrans processes the payment; Nook does not store payment card credentials. Premium is an annual, non-auto-renewing access period. Expiry does not delete your local or synced notebook content.

What we do not do

• We do not sell personal data.
• We do not use advertising SDKs in Nook Website v1.1.
• We do not add web tracking scripts by default.
• We do not use the website as a browser notebook or a place to store private notes.

Security and service limits

Network transport to the sync service is protected by HTTPS/TLS and access is restricted through authentication and account-scoped security policies. Nook does not claim end-to-end encryption. No software or sync service can guarantee uninterrupted availability, so keep backups of important material, especially while Nook is in testing.

Account deletion

You can initiate deletion from Settings → Nook Sync in a signed-in Nook app. The authenticated deletion service removes the Nook Sync account, cloud notebook entities, and private synced attachments before ending the remote session. If you cannot open Nook, use the external request path at /delete-account/. Local notebook data remains on your device and is not silently wiped.

Website privacy

This static website does not require an account, does not store notebook content, and does not include default analytics or advertising scripts. Standard hosting logs may exist at the hosting provider’s infrastructure.

Contact

For privacy questions, contact support@nook.my.id. Please do not include passwords, OTP codes, or private journal content in a support message.