Privacy Policy

Nookery is a platform that lets organized groups ("communities") run a home on the web and in our mobile app. This page explains what information the platform handles, who is responsible for it, and the choices you have.

Who is responsible for your information

• Your community's organizers decide what a community collects (its application form, profile fields, groups, events) and who may see it. For information about you inside a community, they are the data controller.
• Nookery runs the software and infrastructure on the organizers' behalf (a processor), and is the controller for the platform itself: your sign-in account, the platform's own logs and error reports, and support requests sent to us.

Each community is kept separate from the others in our database; organizers of one community cannot see another's members.

What we collect

• Account and identity. Sign-in is handled by our authentication provider, Clerk. It holds your name, email address, and sign-in credentials or the social account you sign in with.
• Membership information. Your membership status and role in a community, plus whatever that community asks for: application answers, profile fields (such as a bio), group memberships, shift or event sign-ups, announcements and poll responses. Some of this is visible to other members, depending on the community's settings; some is visible only to organizers.
• Photos and files. Profile photos and any files you upload (for example to an application) are stored in our storage provider, Supabase. Profile and community images may be viewable by anyone who has the image address; application attachments are private to you and the organizers.
• Messages. Direct messages and group discussion threads you send are stored so the people in them can read them.
• Notifications. If you use the mobile app and allow notifications, we store a push token for your device and use the unread count to badge the app icon. Notification preferences are stored per community.
• Error reports. When error tracking (Sentry) is switched on for the platform, errors in the app are reported with technical details. We strip your identity, request contents, cookies, and any emails or phone numbers from these reports before they are sent, and tag them only with the community's short name.
• Feature counts. We keep simple per-day totals of how often each feature's pages are opened in a community, so we know what to improve. The totals are not linked to you and hold no identity, address or content.
• Cookies. We use only the cookies needed to keep you signed in and secure. We do not use advertising or analytics trackers.

How we use it

• To run your community: showing your profile, handling membership, sending messages and notifications.
• To email you (through our email provider, Resend) about things you asked for or that your community needs: application decisions, announcements, message and event notices, sign-in related mail.
• To keep the platform working and secure, and to fix errors.
• To answer support requests.

We do not sell your information and do not use it for advertising.

The assistant (Wisp)

Organizers and members can use an AI assistant called Wisp. When someone asks it something, the community information needed to answer (for example member names, or an organizer's application answers) can be sent to Anthropic, which provides the AI model. Organizers can ask Wisp to change their community's settings, and any change it proposes needs the organizer's approval before it happens. Members get a read-only Wisp that can look things up but cannot change anything. Wisp cannot read direct messages. Its conversation is kept in your browser session, not stored on our servers.

If you ask Wisp for something Nookery does not do, it may offer to pass the idea on to the Nookery developers. Nothing is sent unless you approve it on a card that shows the exact text. What is sent and stored is that short text (up to 500 characters), the page you were on (without any query), your community and whether you are a member or organizer. It does not include your name, email or the conversation.

Who else handles it

We use these service providers to run Nookery: Vercel (hosting), Supabase (database and file storage), Clerk (authentication), Resend (email), Apple (push notifications to iPhones) and Google Firebase (push notifications to Android), Sentry (error tracking, when enabled) and Anthropic (the Wisp assistant). They process information only to provide their service to us. We may also disclose information if the law requires it.

How long we keep it

We keep your information while your account or membership exists. There is no automatic time-based deletion of community content such as messages or profile fields. When a community is deleted, its database records and uploaded files are removed. Backups kept by our providers may persist for a limited time afterward.

Your choices and deleting your account

• Edit. You can change your profile details and notification settings from your profile.
• Delete your account. You can delete your account from your profile page ("Delete my account"). This removes your sign-in account, your membership, profile, photo, uploaded files and push tokens from every community you belong to, and stops all notifications. Content you posted in a community may be kept in a form that no longer identifies you, so threads stay readable.
• Ask us. To see, correct, or remove information, or to ask a question about this policy, write to hello@nookery.io. For information held by a community, we may pass your request to its organizers.

Children

Nookery is not directed to children under 13, and we do not knowingly collect information from them. Communities set their own membership rules.

Changes

If we change this policy in a meaningful way we will update the date above and, where appropriate, tell members.

Contact

hello@nookery.io