Privacy Policy
The short version: we will never sell your data.
Not for money. Not under pressure. Not ever.
Here's exactly what we do and don't do with your information.
What we collect
- Your email address when you join the waitlist or subscribe to build updates. That's it for now.
- When the app launches: your location (only when you ask for a guide), your selected interests and preferences, and guides you've generated.
- When user accounts launch: your email address and a securely hashed password. We never store passwords in plain text. We do not require your real name — a username or display name is sufficient.
- Login session data (a secure cookie) to keep you signed in. This expires when you log out or after a period of inactivity.
- We do not collect your name unless you give it to us.
- We do not track you across other websites.
- We do not use advertising cookies or third-party trackers.
- When you subscribe to a paid plan: your payment is processed by Stripe. We do not store your credit card details — Stripe handles all payment data. We store only your Stripe customer ID and subscription status. Stripe's privacy policy applies to payment processing: stripe.com/privacy.
Anonymised search data
To improve Nooksplore for everyone, we store anonymised, non-personal search data — things like which cities and interest categories are searched most often, and how guides perform across different regions.
This data cannot be traced back to you. Specifically:
- We do not store your name, email, or any identifier alongside search data.
- We do not store your precise location — only the city or region name you searched for.
- This data is used only to improve search quality, category coverage, and guide accuracy.
- It is never sold, shared with third parties, or used for advertising.
What we do with it
- Your email is used to send you updates you asked for and to give you early access when we launch.
- Your preferences are used to generate your guide. Nothing else.
- Login credentials are used solely to authenticate you and secure your account. They are never used for marketing or shared with third parties.
- We use Anthropic's Claude AI to generate guide content. Your location and interests are sent to Claude to produce your guide. Anthropic's privacy policy applies to that processing. We do not send your email or personal identity to Claude.
What we will never do
- Sell your data. Ever. To anyone. Under any circumstances.
- Share your email with third parties for marketing.
- Use your data to train AI models without your explicit consent.
- Send you emails you didn't ask for.
Data storage
- We are based in Ontario, Canada. Your data is stored on servers in Canada.
- Account data including your email and hashed password is stored on servers in Canada and is encrypted at rest.
- You can request deletion of your data at any time by emailing [email protected]. We will delete it within 7 days.
Data retention
- If you delete your account, your data is scheduled for permanent deletion within 30 days. You may request restoration within that window by emailing [email protected].
- After 30 days, your account data and guides are permanently and irreversibly deleted.
- Anonymised search data (city names, interest categories) may be retained indefinitely as it cannot be traced back to you.
- We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
Cookies
- We use a single session cookie to keep you logged in if you have an account. No advertising cookies. No cross-site tracking.
Questions
If you have any questions about this policy, email us at [email protected]. We're real people and we'll respond.
Last updated: March 2026