Nutkin Privacy Policy

Effective date: 12 October 2026
Operator: Koryoku Labs LLC ("we", "us")
Contact: support@nutkinapp.com

Nutkin is a to-do app with a small idle game attached: the tasks you finish feed a colony of squirrels. This policy explains what information the Nutkin apps for iPhone and Android and the website nutkinapp.com handle, why, who helps us handle it, and the choices you have.

The short version

• Your to-do list stays on your phone unless you sign in. Signed in with Apple or Google, your list syncs through your account so it's on every device you use, and only your account can see it. What you write in your list is never in analytics or crash reports.
• Your colony is backed up. The app creates an anonymous account the first time it runs, so your game progress can be restored. Link Apple or Google if you want it to survive a lost phone.
• Friends see your friend code, never your name. Notes between friends are picked from six preset messages. There is no chat.
• We learn how the app is used from anonymous usage events and crash reports, so we can fix bugs and improve Nutkin.
• Nutkin Plus is paid through Apple or Google. We never see your payment details.
• No ads. We don't sell your information, and we don't track you across other companies' apps or websites.

What stays on your device

These live only on your phone, and deleting the app deletes them:

• your tasks, unless you sign in (see "Your list, when you're signed in" below): titles, steps, tags, due dates, repeats and reminders;
• your name, your squirrel's name, pronouns and current coat, and your preferences;
• your streak, your history and your insights.

Your phone's own backup (iCloud, or Google's backup on Android) may include Nutkin's data under your Apple or Google account settings. We can't see those backups.

Reminders and notifications are scheduled on your phone. We don't run a push notification server, and we don't collect a push token. Home screen widgets read from the app on your phone and send nothing.

Nutkin reads your clipboard only when you tap Paste to add a friend code. It doesn't use your microphone, camera, photos, contacts or location services.

Your account and backup

The first time Nutkin runs, it creates an anonymous account: a random ID. Creating it needs no email, no phone number and no information about you.

What we store: a snapshot of your game, so your colony can be restored. That means your acorns, energy, buildings and upgrades, achievements, Winter progress and golden acorns; totals such as how many tasks you've completed (never what they were); whether Plus is active; the clothes and furniture you own or use; and the coat colors you own. It's stored with Supabase, our infrastructure provider, on servers in the United States.

Linking an account (optional). You can link Sign in with Apple (iPhone) or Google (iPhone and Android) so your colony comes back on a new phone. We then receive your email address from that provider. With Sign in with Apple you can choose Apple's private relay address, so we never see your real one. Apple may offer to share your name; Nutkin doesn't keep it. Google also shares your name and profile picture link, which our sign-in provider stores with your account. We only use your email address, to show you which account is linked.

Your list, when you're signed in. Once you link Sign in with Apple or Google, your to-do list syncs through your account, so it appears on every device where you sign in. We store each task (its title, steps, tags, due date, time or part of the day, repeat, reminder setting and whether it's done) and when you finished repeating tasks, which streaks and weekly targets count. It's stored with Supabase on servers in the United States, encrypted in transit and at rest, and only your account can read it through the app. We use it only to keep your list in sync, never for analytics or advertising. A guest account, before you link one, never sends your list. When you delete a task, its text leaves our servers at your next sync; a marker without the text stays for 90 days so your other devices delete it too. Finished tasks are deleted from our servers 30 days after you finish them.

Sign in with Apple tokens. When you link Sign in with Apple, Apple gives us a token that lets us disconnect Nutkin from your Apple Account. We store it only so we can do that when you delete your Nutkin account, as Apple requires. If Apple can't be reached at that moment, we keep trying, and delete the token once the disconnection goes through.

Guest accounts with little progress. If you never link an account and your colony has made very little progress, the guest account and its backup are deleted automatically 180 days after it last signed in.

Friends and notes

Every account gets a random friend code that starts with NUT. You connect with someone when you both add each other's code, by typing it or opening their invite link. An invite link (nutkinapp.com/f/...) contains your friend code, so anyone you send it to can add you.

• Friends see only your friend code, whether you've added each other, and the notes you send them. They never see your name, your squirrel's name, your tasks or your colony.
• Notes are chosen from six preset messages. There's no free text and no chat. You can send each friend one note a day.
• We store your friend code, who you've added, who you've blocked, and the notes you send and receive, with when they were sent and read.
• We count friend code lookups so nobody can guess their way through codes.
• The app shows notes from the last 30 days. We keep a note until the sender or the recipient deletes their account.
• You can remove or block someone at any time. Blocking takes them off your list, and neither of you sees the other's notes.

Invite gifts. If you add a friend's code within two days of starting Nutkin, we record that they invited you, when, and whether you've finished your first task, so the app can give you both a gift. Your friend sees only how many of the people they invited have joined and finished a first task, never your tasks or your colony. The record is deleted when either of you deletes your account.

Nutkin Plus and purchases

Nutkin Plus is an auto-renewing subscription sold through the App Store on iPhone and Google Play on Android. Apple or Google processes your payment, and we never see your card or billing details. You manage or cancel the subscription in your App Store or Google Play account settings.

We use RevenueCat to check and restore purchases. RevenueCat receives your Nutkin account ID (the random ID above), your purchase and subscription history from the store, and basic device and app details such as the platform, app version and store country. It doesn't receive your name, your email address or your tasks.

The feedback form and support email

Settings has a form to report a problem or share an idea, and Nutkin offers it after a crash. It sends your message, the category you pick, and diagnostics: the app version and build, the update you're running, your platform and operating system version, whether your account is a guest or linked, the first characters of your account ID, a few game counts (buildings, tasks completed, Winters and items owned) and, after a crash, the error message. Your tasks are never included. We store the message with your account ID on our servers, so please don't put private information in it.

If our server can't be reached, the app opens a pre-filled email to support@nutkinapp.com instead, or copies the message for you to send. When you email us, we see your email address and what you write. We keep support emails as long as we need them to help you.

Analytics (PostHog)

To learn which parts of Nutkin help people, the app sends usage events to PostHog. An event says, for example, that a task was added or completed, a building or item was bought, a daily dig was claimed or a setup step was finished. When you open the Nutkin Plus offer, start a purchase or restore one, an event also records which plan and whether it went through (never payment details). Events carry simple details such as counts, prices in acorns or which preset choice you tapped, and never anything you typed.

• Events are tied to a random analytics ID created on your phone. We don't send your name, your email, your account ID or any advertising ID.
• PostHog also records when the app is installed, opened or updated; basic device details (model, operating system, app version and update, language and time zone); and app errors with their technical details.
• PostHog uses your IP address only to estimate an approximate location, such as your country and city, and then discards it. Your IP address isn't stored with your analytics.
• Setup questions. During setup, Nutkin asks how to-do lists usually go for you and what helps you get things done; you answer by tapping preset choices. It also asks a few optional questions about you: your age range, gender, what fills your days and how you found Nutkin. Each of these has a Skip button. Your answers are sent with the setup events so we can understand who Nutkin helps.
• We don't use analytics for advertising, and we don't share it with data brokers. Nutkin doesn't record your screen.

Crash reports (Sentry)

If the app crashes or hits an error, a report goes to Sentry. It contains the error and where in the code it happened, the app version, the device model and operating system, a random installation ID, and technical notes about what the app was doing just before (such as which buttons were tapped, not what they say). We set Sentry not to collect personal information, and reports never include your tasks.

App updates (Expo)

Nutkin downloads fixes and content updates from Expo's update service. Each check sends the app version, the platform, the update channel and a random installation ID that the update system creates.

Our website

nutkinapp.com is hosted by Vercel and uses no cookies or analytics. Like any website host, Vercel receives your IP address and the pages you request. A friend invite page shows the friend code from its link and sends nothing anywhere.

Who we share information with

We don't sell your personal information or share it for advertising. We share it only:

• with the service providers below, who handle it for us under their own terms and privacy policies;
• when the law requires it, for example in answer to a valid legal request;
• to protect someone's safety or to stop abuse of Nutkin;
• if our business is sold or merged, in which case we'll tell you before your information falls under a different policy.

Why we use your information

If you live in the European Economic Area or the United Kingdom, these are the legal bases we rely on:

• To provide what you ask for (the backup, linked accounts, syncing your list, friends and notes, Plus, answers to your feedback): performing our agreement with you.
• To understand, fix and improve Nutkin and keep it safe (analytics, setup answers, crash reports, limits that stop abuse): our legitimate interests. We keep these to the minimum described above, and you can skip the optional setup questions.
• To meet legal obligations, for example answering lawful requests.

Where your information is processed

Our providers process information mainly in the United States, and Supabase stores your account and backup there. If you live elsewhere, your information is transferred to the United States. Where the law requires it, we rely on the safeguards our providers offer for these transfers, such as the European Commission's standard contractual clauses.

How long we keep it

• Your account, backup, friend code, friends and blocks: until you delete your account. Guest accounts with very little progress are deleted 180 days after they last signed in.
• Your synced list (signed in): each task until you delete it or your account; finished tasks are deleted from our servers 30 days after you finish them, and deletion markers after 90 days. When you finished repeating tasks is kept until you delete your account.
• Notes: until the sender or the recipient deletes their account.
• Invite records: until the person who invited or the person invited deletes their account.
• Feedback messages: until you delete your account.
• Sign in with Apple tokens: until you delete your account and Apple confirms the disconnection.
• Support emails: as long as we need them to help you.
• Analytics and crash reports: for the retention periods of our PostHog and Sentry plans, then deleted.
• Server logs: for the periods our providers set for their logs.
• Purchase records: kept by Apple, Google and RevenueCat under their own policies and the law.

Your choices and rights

• Delete your account. Go to Settings, then Delete account & data. This works for guest accounts too. It deletes your account, backup, synced list, friend code, friendships, blocks, invite records, the notes you sent and received, your feedback messages and any Sign in with Apple token, and if you used Sign in with Apple, it disconnects Nutkin from your Apple Account. It also erases the game on your phone, which then starts over as a new player. Deleting your account doesn't cancel Plus; cancel it in your App Store or Google Play settings. Without the app, follow the steps at nutkinapp.com/delete-account.html.
• Delete what's on your phone: delete the app.
• Skip the setup questions: every question about you has a Skip button.
• Analytics and crash reports are tied to random IDs, not to your account, so we usually can't find the records that belong to you. They're deleted when their retention period ends.
• Your rights. Depending on where you live (for example the EEA, the UK or California), you can ask to access, correct, delete or export your information, or object to or restrict how we use it. You can also complain to your local data protection authority. The easiest way to ask is the feedback form in Settings, because it tells us which account is yours; you can also email support@nutkinapp.com. We'll reply within one month, and we may ask you to confirm that the request comes from you. We won't treat you differently for using these rights.
• California: we don't sell or share personal information as those terms are defined in California law.

Children

Nutkin is a general-audience app and isn't directed at children under 13. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact us and we'll delete it.

Security

Information travels between the app and our providers over encrypted connections. On our servers, each account can reach only its own data, and friend lookups go through server checks that also limit how often they can run. No system is perfectly secure, but we work to protect your information and keep what we collect to a minimum.

Changes to this policy

When Nutkin changes how it handles information, we'll update this policy and its effective date, and we'll point out important changes in the app.

Contact

Koryoku Labs LLC, support@nutkinapp.com