Perfect Universe → Nooklio → Privacy policy
Nooklio privacy policy
Last updated 26 August 2026. This policy covers the Nooklio iOS app published by Perfect Universe.
What data the app processes
| Data | Why |
|---|---|
| Email address and password | To create and secure your account. The password is handled by Firebase Authentication and never stored by us in a readable form. |
| Display name and optional profile photo | So your partner sees who wrote a message or an entry. |
| Chat messages and attachments | To deliver them to your partner and keep the conversation history. |
| Diary entries | Shared entries are readable by both of you; private entries are stored under your own account and are not readable by your partner. |
| Photos and captions | To show them in your shared gallery. |
| Cards, dice faces and game results you create | To keep your edited decks and show the outcome of a game session. |
| Pairing data (couple record, invite code) | To connect exactly two accounts and keep everyone else out. |
| Push notification token | To notify you about new messages. Issued by Apple and Firebase Cloud Messaging for your device. |
What the app does not do
- No advertising, and no advertising identifiers are read.
- No analytics or attribution SDK, no crash-reporting profile tied to you.
- No access to your location, contacts, calendar, microphone or health data.
- No selling, renting or brokering of data, to anyone, for any purpose.
- No human at Perfect Universe reads your messages, diary or photos in the course of normal operation.
Who your data is shared with
Inside the app, your content is visible to the one partner you paired with — except private diary entries, which are visible only to you.
Outside the app, the only recipient is our infrastructure provider: Google (Firebase), which stores and transmits the data on our behalf as a processor (Authentication, Firestore, Storage, Cloud Functions and Cloud Messaging). Apple transmits push notifications to your device. Neither is permitted to use your content for their own purposes.
The app lock
If you turn on the app lock, your PIN is stored on the device as a salted hash and never sent anywhere. Face ID and Touch ID are handled by iOS; the app is only told whether the check succeeded and never receives your biometric data.
How long data is kept
Content stays until it is deleted. You can delete individual messages, entries and photos in the app. Deleting your account in Profile → Account removes your account and the content associated with it; content that belongs to the couple is removed when the pairing is dissolved. Backups held by our infrastructure provider may retain copies for a short period before they expire.
Security
All traffic between the app and the server runs over TLS. Access to your data is enforced server-side by Firebase security rules: a document can only be read or written by the signed-in accounts it belongs to, so another user cannot reach your content even if they know its address. Passwords are handled by Firebase Authentication and are never visible to us.
Children
Nooklio contains adult content and is intended for people aged 18 or over. It is not directed at children and we do not knowingly process data from them.
Your rights
Under the GDPR you have the right to access your data, to correct it, to have it erased, to receive a copy in a portable format, to restrict or object to processing, and to withdraw consent where processing is based on it. Exercise any of these by writing to support@perfectuniverse.cz — no account number or form required, just tell us which app and which email address you used.
Contact
Perfect Universe is the data controller for this app. Write to support@perfectuniverse.cz with any question or request about your data. You can also lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů) if you believe your rights have been infringed.
Changes to this policy
If this policy changes, the updated version is published on this page with a new date at the top. Material changes affecting how existing data is used will also be announced in the app.