Privacy Policy

What Nukmil collects

To operate your account and private reading circles, Nukmil stores your email address, display name, reading plans, circle membership, assignments, invitations, and completion progress. We use this information only to provide and secure the service.

Account sign-in is provided by Apple or Google. Nukmil receives the provider account identifier and, when the provider shares them, your email address and display name. Nukmil does not receive or store your Apple or Google password.

Camera, contacts, and reminders

• The camera is used only when you choose to scan a Nukmil invitation QR code. Nukmil does not store or upload camera images.
• The system contact picker is opened only when you choose to invite someone. The selected contact is used on your device to prepare a message and is not uploaded to Nukmil.
• Personal reading reminders are scheduled locally on your device. Notification preferences remain under your control.

Invitation links

Nukmil invitation links are handled directly by Nukmil through nukmil.app. Nukmil does not use a third-party deep-linking, attribution, advertising, or install-matching service. If you install the app after opening an invitation, reopen the original link or use its QR code so the app can save it before sign-in.

Nukmil does not sell personal information or track you across other companies' apps and websites for advertising. Circle information is visible only to the people participating in that circle.

Android waitlist

If you join the Android waitlist, Nukmil stores your normalized email address, preferred language, consent time, beta interest, and whether an invitation or launch notice was sent. We use it only to consider you for Closed Alpha access and to send one Android launch notification—not for unrelated marketing. Joining does not guarantee beta access.

Waitlist entries are kept through the Android public launch and for up to 90 days afterward, then deleted. You may ask us to remove yours sooner by emailing mbello.ma2612@gmail.com. The waitlist does not persist your IP address or browser user agent. Waitlist notice added 31 July 2026.

Reading companions

If you choose to become reading companions with someone, Nukmil stores the companion link between your accounts with each person's consent time and notice version, your pause and block choices, and — about your reading — only when your temporary glow expires. It does not store what you read, how long you read, or a timezone identifier. Companions see one thing: a gentle glow on the day you have read, and only while both of you share. Nothing is shown to anyone who is not your confirmed companion, and there are no feeds, reading totals, or rankings.

Companion glow alerts are separate and optional. Remote delivery is enabled only after both companions accept the current alert notice and switch alerts on. Nukmil then stores an opaque device identifier, Firebase Cloud Messaging token, platform, locale, and last registration time. Google Firebase receives that token and the generic alert “A reading companion shared a glow.” The lock screen message never contains a name, reading, Juz, or completion time. A short-lived delivery record contains only sender, recipient, glow expiry, and retry state, and is deleted after delivery or when the glow expires. Nukmil keeps no companion-notification history. Disabling alerts or signing out unregisters the device; deleting the account removes its device and alert data.

Expired glow markers stop being visible to anyone immediately and are erased by an hourly sweep whenever the service is active. Invitations are deleted when confirmed, and within 7 days of expiring or being declined or withdrawn. Invitation counters are deleted within 2 days. Removing a companion or blocking someone takes effect silently, and deleting your account removes all companion data immediately. Nukmil does not store your reading times, pages, durations, streaks, reading history, or contacts for this feature. Reading Companions is for Nukmil readers aged 13 and over. Companion notice updated 12 August 2026.

Security and retention

Network communication uses HTTPS and invitation tokens are protected. We retain account and circle data while needed to operate your account, resolve security issues, and meet applicable obligations.

You can delete your account inside Nukmil from Profile → Delete account. This removes your sign-in identity and direct account details from the server; shared circle history is anonymized so other members' records remain consistent. Personal readings saved on your device remain available offline. You can also request access, correction, export, or deletion by emailing mbello.ma2612@gmail.com.

Questions

Privacy questions can be sent to mbello.ma2612@gmail.com. Product support is available at nukmil.app/support.