Perfect UniverseNooklio → Privacy policy

Nooklio privacy policy

Last updated 26 August 2026. This policy covers the Nooklio iOS app published by Perfect Universe.

The short version. Nooklio stores what you and your partner write, send and photograph, so that it reaches the other phone — and uses it for nothing else. There is no advertising, no analytics SDK and no third-party tracking in the app, and your data is never sold or shared with anyone outside the pairing.

What data the app processes

DataWhy
Email address and passwordTo create and secure your account. The password is handled by Firebase Authentication and never stored by us in a readable form.
Display name and optional profile photoSo your partner sees who wrote a message or an entry.
Chat messages and attachmentsTo deliver them to your partner and keep the conversation history.
Diary entriesShared entries are readable by both of you; private entries are stored under your own account and are not readable by your partner.
Photos and captionsTo show them in your shared gallery.
Cards, dice faces and game results you createTo keep your edited decks and show the outcome of a game session.
Pairing data (couple record, invite code)To connect exactly two accounts and keep everyone else out.
Push notification tokenTo notify you about new messages. Issued by Apple and Firebase Cloud Messaging for your device.

What the app does not do

  • No advertising, and no advertising identifiers are read.
  • No analytics or attribution SDK, no crash-reporting profile tied to you.
  • No access to your location, contacts, calendar, microphone or health data.
  • No selling, renting or brokering of data, to anyone, for any purpose.
  • No human at Perfect Universe reads your messages, diary or photos in the course of normal operation.

Who your data is shared with

Inside the app, your content is visible to the one partner you paired with — except private diary entries, which are visible only to you.

Outside the app, the only recipient is our infrastructure provider: Google (Firebase), which stores and transmits the data on our behalf as a processor (Authentication, Firestore, Storage, Cloud Functions and Cloud Messaging). Apple transmits push notifications to your device. Neither is permitted to use your content for their own purposes.

The app lock

If you turn on the app lock, your PIN is stored on the device as a salted hash and never sent anywhere. Face ID and Touch ID are handled by iOS; the app is only told whether the check succeeded and never receives your biometric data.

How long data is kept

Content stays until it is deleted. You can delete individual messages, entries and photos in the app. Deleting your account in Profile → Account removes your account and the content associated with it; content that belongs to the couple is removed when the pairing is dissolved. Backups held by our infrastructure provider may retain copies for a short period before they expire.

Security

All traffic between the app and the server runs over TLS. Access to your data is enforced server-side by Firebase security rules: a document can only be read or written by the signed-in accounts it belongs to, so another user cannot reach your content even if they know its address. Passwords are handled by Firebase Authentication and are never visible to us.

Children

Nooklio contains adult content and is intended for people aged 18 or over. It is not directed at children and we do not knowingly process data from them.

Your rights

Under the GDPR you have the right to access your data, to correct it, to have it erased, to receive a copy in a portable format, to restrict or object to processing, and to withdraw consent where processing is based on it. Exercise any of these by writing to support@perfectuniverse.cz — no account number or form required, just tell us which app and which email address you used.

Contact

Perfect Universe is the data controller for this app. Write to support@perfectuniverse.cz with any question or request about your data. You can also lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů) if you believe your rights have been infringed.

Changes to this policy

If this policy changes, the updated version is published on this page with a new date at the top. Material changes affecting how existing data is used will also be announced in the app.