This Privacy Policy explains how NKD (“we”, “us”, or “our”) collects, uses, stores, and protects information when you use our mobile application and related services (together, the “Service”). By using the Service, you agree to the practices described in this policy.
1. Information we collect
Account information
When you create an account we collect your name, email address, and a password (stored only as a salted hash), or — if you sign in with Google — your name, email address, and Google account identifier as provided by Google’s sign-in service.
Company and operational data
To provide the Service, we store the data your company enters into it: company details, team member names and roles, workflow templates, production jobs, tasks, and the field values your team records against them.
Imported spreadsheets
During setup you may upload a spreadsheet file (.xlsx) or import one from Google Drive. We parse its structure and contents once to propose a workflow template, which you review and approve before it is used.
Device and usage information
We collect basic technical information needed to operate and secure the Service, such as device type, app version, log data, and authentication tokens.
2. Google user data
The Service integrates with Google in two limited, optional ways:
- Google Sign-In. If you choose to sign in with Google, we receive your basic profile information (name, email address, and account identifier) to create and authenticate your account. We do not receive your Google password.
- Google Drive import. If you choose to connect Google Drive, we request access so that you can select a spreadsheet file to import. We read only the file you explicitly select. The import is one-time: we do not continuously sync with, monitor, edit, or write back to your Google Drive or the imported file.
To support the Drive import, we store a Google-issued refresh token in encrypted form on our servers. You can revoke this access at any time (see Section 7), after which the token is invalidated and deleted.
Limited Use disclosure. NKD’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we:
- use Google user data only to provide the features described above (sign-in and spreadsheet import);
- do not sell Google user data, use it for advertising, or transfer it to third parties except as necessary to provide the Service, to comply with applicable law, or as part of a merger or acquisition with prior notice to you;
- do not allow humans to read Google user data unless you give explicit permission, it is necessary for security or legal compliance, or the data has been aggregated and anonymized;
- do not use Google user data to train generalized artificial intelligence or machine-learning models.
3. How we use information
- To create and authenticate your account and keep it secure.
- To convert your imported spreadsheet into a workflow template using automated (AI-assisted) column mapping, which you review and approve.
- To run your company’s production workflows: creating tasks, tracking progress, and showing your team the current state of work.
- To provide support and respond to your requests.
- To maintain, debug, and improve the reliability and security of the Service.
When you import a spreadsheet, its column structure and sample contents are processed by an AI service (Google Gemini) solely to propose the workflow mapping described above. This processing is performed to provide a feature you explicitly initiate.
4. How we store and protect data
- Your data is stored in a PostgreSQL database with company-scoped isolation: records belonging to your company are not accessible to other tenants of the Service.
- Data is encrypted in transit using TLS. Sensitive credentials, such as Google refresh tokens, are stored encrypted at rest.
- Passwords are stored only as salted bcrypt hashes.
- On your device, authentication tokens are kept in the operating system’s secure storage.
5. How we share information
We do not sell your personal information. We share information only with:
- Service providers that host our infrastructure and process data on our behalf (for example, cloud hosting and the AI mapping service described in Section 3), bound by confidentiality and data-protection obligations;
- Your own company’s workspace — data you enter is visible to other authorized members of your company account according to their roles;
- Legal authorities when required by applicable law, regulation, or valid legal process.
6. Data retention
We retain your information for as long as your account is active or as needed to provide the Service. Imported spreadsheet files are retained only as long as needed to complete the import and review process. When you delete your account, or your company’s workspace is deleted, associated personal data is removed from our production systems within 30 days, except where retention is required by law.
7. Your rights and choices
- Access and correction. You can view and update your profile information in the app.
- Deletion. You can request deletion of your account and associated data by contacting us at support@nkd.app.
- Revoking Google access. You can disconnect Google Drive inside the app, or revoke NKD’s access entirely from your Google Account at myaccount.google.com/permissions. Upon revocation we delete the associated stored token.
8. Children’s privacy
The Service is a business tool intended for use by adults in a professional context. It is not directed to children under 16, and we do not knowingly collect personal information from children.
9. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email before the changes take effect. The “Last updated” date at the top of this page reflects the current version.
10. Contact us
If you have questions about this Privacy Policy or how we handle your data, contact us at support@nkd.app. See also our Terms & Conditions.