Privacy Policy

Nvoka (“Nvoka”, “we”, “us”) operates nvoka.com, the Nvoka web app, and the Nvoka browser extension, iPhone app, Shortcut and bookmarklet (together, the “Service”). This policy explains what personal information we handle when you use the Service and the choices you have.

• Account details. Your email address, name, profile picture and how you sign in (Google, Apple, or email and password). We never see your Google or Apple password; email passwords are stored hashed by our authentication provider.
• Your content. Prompts, descriptions, folders, tags, card designs, comments, and the teams and workspaces you create or join, including invitations and workspace activity.
• Captures. When you save from the extension, iPhone app, Shortcut or bookmarklet, we receive the text you chose to save, a title, and where it came from: the app or page title and the page address, with anything after “?” or “#” removed. You can turn off saving the source for a connected device.
• Google Drive references. If you attach a Drive file to a prompt, we store its name, link and file type, not the file’s contents.
• Payments. Paid plans are sold through Link, Stripe’s checkout service. Stripe handles your card details; we receive your plan, subscription status, customer ID and limited transaction details, never your full card number.
• Usage and device data. Pages and features you use, approximate location derived from your IP address, browser and device type, and error and security logs. We use Google Analytics to understand aggregate usage.
• Messages. What you send us through the contact form or by email.

We use personal information to:

• provide the Service: save, organize, capture, share and sync your prompts;
• run accounts, subscriptions, teams, invitations and permissions;
• send service messages, such as invitations, mentions and billing notices;
• keep the Service secure, prevent abuse and fix problems;
• understand how Nvoka is used in aggregate so we can improve it; and
• meet legal obligations and respond to your requests.

We don’t sell your personal information, and we don’t use it for targeted advertising.

• Private by default. Prompts in your personal library are visible only to you.
• Teams. Prompts in a shared workspace are visible to that workspace’s members according to their roles, and workspace activity shows who made each change. The team’s owners and admins manage its members and content.
• Share links. Anyone with a prompt’s share link can view that prompt until you turn sharing off.
• Public Library. Prompts you submit are reviewed before they appear. Once published, anyone can view, copy and save them, and the card credits you by your display name, never your email address. Removing a prompt from the library doesn’t remove copies other people already saved.

When you use an AI feature, such as the Prompt Writing Studio or scanning an image or PDF, the text or file needed for that request is sent to our AI provider, currently Google’s Gemini models (directly or through Lovable’s AI gateway), to produce the result. Nvoka doesn’t train AI models on your content. Please don’t submit sensitive information to an AI feature unless you’re allowed to.

We share information only as needed to run the Service, do what you ask, protect Nvoka and its users, or comply with the law. The providers we rely on:

• Lovable and Supabase: app hosting, database and sign-in infrastructure;
• Google: sign-in, the Drive file picker, AI processing and Google Analytics;
• Apple: sign-in;
• Stripe and Link: payments, receipts and billing support;
• an email delivery provider for service and billing messages.

If Nvoka is involved in a merger, acquisition or sale of assets, personal information may transfer as part of that deal, and this policy will continue to apply to it.

Nvoka stores your sign-in session and a few preferences (such as sounds and onboarding progress) in your browser; these are needed for the Service to work. Google Analytics uses cookies to measure visits in aggregate. You can block or delete cookies in your browser settings, or install Google’s Analytics opt-out browser add-on, and Nvoka will keep working.

We keep your information while your account is open. You can delete your account at any time in Settings → Danger Zone, which deletes your account and personal prompts. Prompts you added to a team’s workspace may stay with that team. Copies can remain in backups until they rotate out, and we keep billing records as long as tax and accounting law requires.

Revoked device tokens are kept only as needed to stop their reuse and investigate abuse.

We use technical and organizational safeguards designed to protect your information, including encrypted connections and access controls on every team and prompt. No system is perfectly secure. Keep your password and device tokens private, and revoke devices you no longer use in Settings.

You can edit your profile, change or delete prompts, turn off sharing, leave teams, disconnect capture devices and delete your account yourself. You can also ask us to access, correct, export or delete your personal information. Depending on where you live (for example in California, the EU or the UK), you may have additional rights, such as to object to or restrict certain processing. We’ll respond within 30 days and may need to verify your identity first. Using these rights won’t affect the service you receive.

To make a request, email us at the address below. You can also complain to your local data protection authority.

Nvoka and its providers process information in the United States and other countries where they operate, which may have different data protection rules than where you live. Where the law requires, we rely on appropriate safeguards for these transfers.

Nvoka isn’t meant for children under 13, and we don’t knowingly collect their personal information. If you think a child has given us information, contact us and we’ll delete it.

We’ll post any update here with a new effective date, and tell you by email or in the app before a significant change takes effect. The Terms of Service and Refund Policy cover the rest of how the Service works.

Questions or privacy requests: