Privacy Policy

This Privacy Policy explains how NOKK ("we," "us," or "our"), operated by Appsways Inc., collects, uses, discloses, and safeguards your information when you use the NOKK financial management platform accessible at app.nokk.homes and our marketing website at nokk.homes (collectively, the "Service"). Please read this policy carefully. By accessing or using the Service, you agree to this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account or use the Service, we may collect:

• Name and email address (via Clerk authentication)
• Property addresses and financial data (rents, expenses, purchase prices)
• Profile settings (country, currency, language, tax year)
• Payment information (processed by Stripe — we do not store card numbers)
• Any files or receipts you upload

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (operating system, screen resolution)
• Usage data (features used, session duration)

1.3 Information from Third Parties

We use Clerk for authentication. When you sign in with Google, Clerk may provide your name, email, and profile photo. We receive only the data necessary to create your account.

2. How We Use Your Information

• Provide, maintain, and improve the Service
• Process subscription payments via Stripe
• Send transactional emails (welcome, billing receipts, monthly summaries) via Resend
• Respond to support requests and communications
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Analyze aggregate usage to improve features (no individual profiling for advertising)

We do not sell your personal information to third parties. We do not use your financial data for advertising purposes.

3. Data Isolation and Security

Every user account in NOKK is fully isolated. Each database query is scoped to your unique user ID — no user can access another user's properties, expenses, or financial records.

Security measures include:

• Authentication with multi-factor support
• User-scoped queries (IDOR protection)
• HTTPS/TLS encryption in transit
• DDoS mitigation and Web Application Firewall
• HTTP security headers (HSTS, X-Frame-Options, CSP, etc.)
• API rate limiting

4. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data remains accessible for 30 days, during which you can export it. After 30 days of account closure, all personal data is permanently deleted from our systems.

5. Sharing of Information

We share your information only with trusted service providers who assist in operating the Service:

• Clerk — Identity and authentication
• Stripe — Payment processing
• Resend — Transactional email delivery
• Cloudflare — CDN, DDoS protection, DNS

These providers are contractually obligated to use your information only to provide services to us.

6. International Data Transfers

NOKK is operated from North America. If you access the Service from outside the United States or Canada, your information may be transferred to and processed in the US. By using the Service, you consent to this transfer.

7. Your Rights and Choices

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate or incomplete data via your profile settings.
• Deletion: Request deletion of your account and all associated data.
• Portability: Export all your financial records as CSV or PDF at any time.
• Opt-out of emails: Unsubscribe from non-transactional emails.

To exercise any of these rights, contact us at privacy@nokk.homes. We will respond within 30 days.

8. Cookies and Tracking

The NOKK app uses session cookies for authentication. We do not use third-party tracking cookies or advertising pixels on the app. Our marketing site may use anonymized analytics to measure page visits.

9. Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@nokk.homes.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or by posting a notice within the Service at least 14 days before the changes take effect.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: privacy@nokk.homes
• Website: nokk.homes