Privacy Policy for NookKeep

Last Updated: July 28, 2026

Your privacy is the foundational principle of NookKeep (Để Đâu Rồi?). This Privacy Policy explains how our application processes, stores, and protects your information.

1. Zero Personal Data Collection

NookKeep is designed as an offline-first digital vault.

We do not operate external user accounts or central databases.
We do not collect, track, aggregate, or sell your personal information, photos, location logs, or search queries.
All core functionalities (photo capturing, location indexing, offline OCR, fuzzy searching, and local reminders) run 100% locally on your device.

2. On-Device Encryption & Data Storage

Photo & Document Sandbox: All photos captured or imported into NookKeep are compressed locally into WebP format and stored exclusively within the app's encrypted local sandbox directory.
AES-256 Encryption: Your item records and images are protected using industry-standard AES-256 encryption. The encryption keys are securely generated and maintained inside system keychains (iOS Keychain / Android Keystore).
System Photo Library Exclusivity: Photos in NookKeep are hidden from your device's system photo gallery and cannot be accessed by other apps unless you explicitly export them.

3. Device Permissions Usage

NookKeep only requests permissions when you actively trigger related features:

Camera: Required only when taking a photo of an item within the app.
Photo Library: Required only when importing an existing photo or exporting an item image back to your library.
Notifications: Required only when setting local expiration reminders for your documents.
Biometric / App Lock: Required only if you enable Face ID / Touch ID / Fingerprint lock in app settings.
Internet Permission: The app package includes network permissions solely to support In-App Purchase verification and Opt-In Google Drive Backup.

4. Opt-In Google Drive Backup (End-to-End Encrypted)

If you voluntarily choose to enable Google Drive Backup:

Minimal Scope: NookKeep uses the minimal drive.file scope, granting access only to backup files created by NookKeep inside your personal Google Drive account.
Client-Side E2E Encryption: Before any backup file leaves your device, it is encrypted using AES-256 with a passphrase set by you. Neither Google nor NookKeep developers can read, inspect, or decrypt your backup content.

5. Contact Us

If you have questions about this Privacy Policy, please contact us at: Email: hello@madebybang.com
Website: https://madebybang.com