Privacy Policy

NOOK is a commitment staking app. People join pacts, stake supported digital assets, and use approved verification sources to prove whether they completed each checkpoint.

This policy explains what data we collect, how we use it, what may become public, and what stays private.

Account information, including login identifiers from authentication providers, wallet addresses you connect, device pairing records, and support messages you send us.

Pact information, including joined pacts, stake amounts, checkpoint status, settlement status, public audit records, transaction signatures, and aggregate challenge statistics.

Verification information, including provider names, provider account identifiers, OAuth connection status, activity summaries, evidence hashes, verdict logs, and raw payload pointers when applicable.

Device and usage information, including app version, browser type, IP-derived region, error logs, timestamps, and basic security telemetry.

For activity pacts, NOOK may process data from Apple Health, Health Connect, Open Wearables-supported providers, or other verification sources you connect.

Raw health payloads and OAuth tokens are private. We do not publish raw workouts, heart-rate streams, GPS traces, emails, authentication identities, or OAuth secrets.

For fairness and auditability, we may store and publish limited verification outputs such as checkpoint verdicts, timestamps, evidence hashes, provider category, and aggregate completion statistics.

To operate pacts, verify checkpoints, prevent duplicate or manipulated evidence, calculate settlement outcomes, support disputes, secure the service, and improve product reliability.

To maintain public transparency for on-chain funds, pact settlement, burn transactions, reward transactions, and aggregate statistics without exposing private health records.

Blockchain transactions are public by design, including wallet addresses, token accounts, transfers, escrow accounts, settlement transactions, and burn transactions.

NOOK may publish pact rules, checkpoint verdicts, aggregate completion rates, evidence hashes, settlement records, and audit-safe statistics.

Private raw health data, OAuth access tokens, refresh tokens, emails, authentication provider identities, payment secrets, exact private proof payloads, and support conversations are not intentionally made public.

We use access controls and secret management practices to limit access to private verification data.

NOOK uses third-party services for authentication, wallet infrastructure, blockchain RPC access, hosting, analytics, storage, verification providers, and developer operations.

When you connect a third-party provider, that provider may process your data under its own privacy policy and developer terms.

We retain data for as long as needed to operate pacts, maintain audit records, prevent fraud, comply with legal obligations, resolve disputes, and keep the service secure.

Some blockchain records cannot be deleted by NOOK because public blockchains are independent networks.

You can disconnect supported data sources, stop using the service, request account assistance, or contact us about privacy requests.

Disconnecting a source may prevent future checkpoints from being verified automatically.

For privacy questions, account requests, or provider review, contact us at the email shown in the relevant developer application or official NOOK support channel.