Nook

Privacy policy

Effective October 26, 2026

The short version

This policy covers the Nook app for iPhone and iPad and the service behind its assistant. "Nook", "we" and "us" mean the people who make Nook. "You" means the adult who sets Nook up and anyone in the household who uses it.

1. What stays on your devices and in iCloud

Everything you put in Nook (events, tasks, routines, meals, recipes, groceries, the people in your household, what Nook remembers, preferences) is saved on your device first.

2. The assistant (Ask Nook, the Planner, Dinners, reading flyers, recipes and receipts)

The assistant is optional. Every part of Nook works by hand with it turned off (Household › Assistant & privacy).

On the device first

On iPhones and iPads with Apple Intelligence, short reads (a quick note, a short flyer or email, a recipe, a receipt, the morning brief) are done by Apple's on-device model and never leave the device. Photos and scans are turned into text on the device with Apple's Vision framework, and only that text is sent, never the photo. Speech is transcribed on the device where the language supports it. Everyday questions such as "who's picking up?" are answered from the plan on the device with no model call.

When a request goes to Claude

Longer requests go over HTTPS to Nook's proxy, a small service we run on Cloudflare Workers. The proxy holds the key for Anthropic's API; the app never has one. It forwards the request to Claude, made by Anthropic, and returns the answer. What is sent is only what the person using the screen can see and what the request needs: for example the relevant events, tasks, meals, the names and ages of household members, and facts Nook remembers. Other people's private items are never sent. The exact list is in Household › Assistant & privacy › What gets sent. Anthropic processes these requests as our service provider under its commercial terms, which do not allow it to train models on them.

What the proxy keeps

3. Sign in with Apple

You can sign in with Apple to use the assistant and family sharing, or continue without an account and keep everything on the device. When you sign in, the proxy checks Apple's sign-in token and gives the app Nook's own session, valid for 14 days and renewed while you use Nook. The proxy does not store your name or email. If Apple shares your name and email with the app (you can hide your email), they are shown in Household › Account on your device and are not sent to us. Nook never sees your Apple ID password.

4. The Planner and the weather

To suggest things to do and plan dinners, Nook uses the home area you type (a city or neighborhood is enough). Apple Maps turns it into a place on the device; that place's name and coordinates (the center of the area, not where your device is) go with planning requests. Nook does not use your device's location.

5. Send to Nook and forwarded email

The Share Sheet. Things you send to Nook from another app wait on your device until you choose to read them. Reading them follows section 2.

Forwarding email is off until an adult turns it on. Nook then gives your household an unguessable address. Mail sent to it is received by Cloudflare Email Routing and read by the proxy, which keeps the sender, who forwarded it, any note, the subject, the dates, the plain text, and photos and PDFs up to 10 MB. Web formatting, tracking images and other attachments are dropped. The message is held for your household, protected by a household key that the proxy stores only as a hash, until the app collects it and deletes it from the proxy, and for at most 7 days either way. You can list allowed senders (addresses or whole domains); with "only allowed senders" on, mail from anyone else waits for you to Allow or Ignore it rather than being read. Turning forwarding off deletes the address and every message waiting.

5a. Feedback

Tell us what you think (Household › About) sends what you type, which kind it is, and the facts listed on the form: the screen, Nook's version, the device type and system version, text size, light or dark, whether you are signed in and whether the sample family is on. A copy of what you were looking at and crash reports go only if you tick them. Signed in, the proxy asks Claude to write your note up as a report you read and edit before sending. What you send becomes an issue in Nook's private issue tracker on GitHub, seen only by the people who make Nook, linked to you by a hashed tag so the app can show you where it has got to. Signed out, the note goes as it is and can't be followed up. Ask at the contact address below to have a report removed.

5b. Nook Plus and purchases

Nook Plus is bought in the app through Apple, and Apple handles everything about paying: your card, receipts, renewals, cancelling and refunds. Nook never sees your payment details. So that everyone in your household has Plus, the proxy keeps, for each household: a household identifier (a random code, never a name), the subscription's Apple transaction identifier, which plan it is and when it expires, and which signed-in people used the assistant this month, as the same anonymous tags described in section 2. A household without Plus has a count of this month's free assistant requests kept the same way. None of this says anything about what you planned. If a subscription ends, its record is no longer used to give Plus, and you can ask us to delete it.

6. Children

Nook is for adults who organize a household. The person who sets Nook up and signs in must be an adult. A household can include children: the adult adds their names, birthdays, activities and routines, and that information is stored like everything else, on the family's devices and in the family's iCloud. When it helps (for example, ideas that suit the children's ages), a child's first name and age can be part of an assistant request as described in section 2. Nook shows no ads, does no tracking and does not collect anything directly from children for us. If you believe we hold a child's information that we should not, write to us and we will delete it.

7. What Nook does not do

8. Who else is involved

9. Your choices and deleting your data

10. Security

All traffic between the app, the proxy and Anthropic uses HTTPS. Household data in iCloud is kept in CloudKit's encrypted fields. The model key lives only on the proxy.

11. Changes

If this policy changes, the new version will be posted here with a new date, and anything that changes what Nook sends will be explained in the app first.

12. Contact

Email support@createnook.app.