Draft. Before the store opens, the placeholders on this page are filled in (3 left) and the page is reviewed by a lawyer.

Privacy

Effective 2026-11-02.

Nookiva is a Mac app that runs animated worlds behind your desktop icons, and a store where you can buy more of them. Nookiva ([registered address]) is responsible for the data described here. This page says what each part knows about you and what it sends.

The app

• No account needed. The built-in worlds work without signing in.
• Worlds can't reach the internet or your files. A world sees where your desktop icons are (position and size, and whether each one is a file, a folder or a disk), where the cursor is, and whether your Mac is in dark mode. That information stays on your Mac.
• Desktop icons are read with macOS Accessibility or Finder automation, only while a world is visible. To tell icons apart, the app reads each icon's location on disk and immediately replaces it with a random code that changes every time the app starts. Names and locations are never stored, never given to worlds and never sent anywhere. File contents are never read.
• Basic and Pro keys: activating a key sends the key, a code made one way from your Mac's hardware id (it cannot be turned back into that id and means nothing elsewhere) and your Mac's model (for example "MacBookPro18,3"; never its name), so that a key works on up to three Macs and can be moved between them. About once a week the app sends the same key and code again to check that the key still works. We keep the key's serial number and, for each Mac, that code, the model and when it was activated and last checked, for as long as the key exists; deactivating a Mac in Manager → Edition removes its entry. If you bought the key from us, the email address it was sent to is kept with it, so we can send it again or help you with it. The key itself is kept on your Mac.
• Updates: the app checks for new versions of itself and of its worlds by downloading public lists. These requests carry the app version and nothing else. If you're signed in to the store, the app also asks it which worlds you own. Like any internet request, they necessarily reveal your IP address to the server, and our hosting provider may keep standard request logs. We do not store IP addresses in our database.

Anonymous usage statistics (off unless you turn them on)

In Manager → General → Privacy you can choose to share one small report per day. It contains exactly these fields and nothing else; our server refuses any report with other fields:

• app version and build, macOS version (major.minor), chip type (Apple silicon or Intel, read from your Mac, not from the app build), number of displays
• how desktop icons are read (Accessibility, Finder automation, or not at all)
• minutes spent in each power mode, and how many times the app didn't quit cleanly
• for each world you used that is in our store: minutes on screen, average frame rate, script time per frame, CPU use and how often its renderer crashed. Worlds from anywhere else are counted as "other", because their names could say something about you.

A report has no account, email, install or device identifier, no names of files, icons or people, and no time finer than the date. Each report gets its own random id, which only your Mac keeps. That is how Delete data sent from this Mac works: it asks the server to delete the reports with those ids. Show what's sent displays today's report exactly as it would be sent. Reports are deleted after 90 days.

Sending a report is an ordinary internet request, so it necessarily reveals your IP address to the server, and our hosting provider may keep standard request logs. We do not store IP addresses in our database. Telemetry requests carry no cookies and no account.

Feedback

When you send feedback (from the app with Send Feedback… in its menu bar menu, or from the feedback page) we keep what you wrote, the kind of feedback, and the contact you typed, if any. From the app you can also include diagnostics: the app and macOS versions, your chip type and whether the app runs under Rosetta, the number of displays, how icons are read, the power setting, the update channel, the current world (only if it is one of ours or in the store, otherwise "other") and the last 150 lines of the app's log, with email addresses and your home folder removed. Show what's sent… shows all of it before you send. Feedback is not linked to your store account and carries no cookies; it is deleted after 180 days.

Launch waitlist

If you join the waitlist on our home page we keep your email address, when you joined, which consent text you agreed to and the language you chose, to send you the launch email and nothing else. Every email has a link that takes you off the list at once; you can also write to walkingman149@gmail.com. The list is kept until launch emails stop, then deleted. It is never shared, except with the email service that sends the message for us.

Store account

• What we keep: your email address (to sign you in), the worlds you own, and your orders.
• Payments are handled by our merchant of record, Lemon Squeezy, which also handles sales tax and keeps its own records under its own privacy policy. We never see your card details. From the payment provider we receive an order number, the amount, the currency, the world you bought and our own account id, which we put into the checkout so the purchase reaches the right account. We keep a short log of the payment events we receive (event type and id, order number, amount, currency, which world, our own account id and the outcome; not the buyer's name, email or card details) for 90 days; the account id in that log stays until the 90 days are up even if you delete your account. Order records (number, amount, currency, world and date) are kept without your identity after you delete your account, because tax and accounting law requires us to keep them.
• Signing the app in stores a sign-in token in your Mac's Keychain. Signing out removes it.

This website

No analytics, no advertising, and no third-party cookies. When you sign in, a sign-in token is kept in your browser's local storage so pages can show what you own. Signing out removes it.

Why we may use this data

Account, order data: to provide the store you signed up for and to meet tax and accounting duties. Request logs: to keep the service secure. Usage statistics: only with your consent, which you can withdraw at any time with the same switch. Feedback: because you sent it, to answer and to fix what it describes.

Your choices and rights

• Turn usage statistics off at any time. Anything collected but not yet sent is discarded.
• Delete the statistics sent from a Mac with the button next to the switch.
• Ask for a copy of your store data, for a correction, or for your store account and its data to be deleted, by writing to walkingman149@gmail.com from the address you sign in with. We answer within 30 days.
• If you think we got it wrong, you can also complain to the data protection authority where you live.

We do not sell personal data or share it for advertising. Our hosting and database providers process it for us under contract.