Privacy Policy

Last updated: 30 July 2026

Who's responsible

What data does Nokka collect

Nokka processes the following data that you enter yourself or voluntarily enable:

Group names (e.g. “Summer 2026”)
Counter names + emojis (e.g. “Aperol 🍺”)
Counter entries (timestamp, value, author name)
Events and entries (name, date, location, notes and optional photos; visible to crew members in shared crews)
Guest and member names; older app versions could also store an optional guest email address
Your display name for entries and activity; the optional profile photo remains local to your devices
Bets (stake, subject, outcome)
Optionally linked Apple Health daily totals (such as steps, distance, exercise minutes or active energy)

Apple Health

Nokka can read selected fitness values from Apple Health: steps, walking and running distance, cycling distance, swimming distance, exercise minutes, workout count and active energy. Access is optional, read-only and explicitly granted for each counter. Nokka does not read heart rate, medical data or workout routes.

Raw Health data stays on your device. Only after additional explicit consent does Nokka send the date, selected metric and daily total, together with the crew display name and a pseudonymous device identifier, encrypted to a separate fitness service at Cloudflare. Only joined crew devices can view the totals. Nothing health-derived is stored in iCloud or used for advertising, marketing, tracking or analytics.

Where the data is stored

Your crew content is stored in your personal iCloud account. Nokka uses CloudKit, Apple's cloud platform. The data:

Is stored in your Private CloudKit Database (iCloud.com.lari.nokka)
Is synced between your Apple devices
Can be shared with other people via CKShare — they then see the shared content in their Shared CloudKit Database
Is not visible to the app developers
Is not stored in a separate content database operated by Nokka

If you have iCloud disabled, the data is stored locally on your device only.

Weather

The app does not use Open-Meteo’s free endpoints. Weather is shown only when a commercially licensed Nokka weather service is configured. Coordinates, date and technically required request data are then sent to that service and its weather provider. The source is credited next to displayed weather data. Without a licensed service, weather remains disabled.

Website and technical logs

The static website and optional sports/weather services are hosted by Cloudflare. When accessed, Cloudflare technically processes data including IP address, time, URL, browser/device information and security events. Nokka uses no advertising cookies or web analytics. Technical logs are deleted under the retention periods applicable to each Cloudflare service.

Sports data via Cloudflare

When you use sports schedules, the app calls Nokka's Worker on Cloudflare. Cloudflare technically receives your IP address and request metadata. The Worker sends no device identifier, name or crew content to OpenLigaDB and writes no own personal request logs. Cloudflare may process technically necessary security and operational logs under its own terms.

Data sources and licences

When the licensed weather feature is enabled, weather data comes from Open-Meteo under CC BY 4.0. Sports schedules come from OpenLigaDB under the Open Database License (ODbL). Source and licence notices are also available in the app.

Shared crews and reports

Crew content is intended only for invited people. Photos and another person’s personal information may be shared only with appropriate permission. Content or members can be reported in the app; owners can manage iCloud access and remove members. The Community Rules apply.

What is not collected

Nokka does not collect:

IP addresses for advertising, profiling or analytics; technical providers may process the IP address during individual network requests
Advertising IDs, trackers
Analytics, crash reports sent to third parties
Address book or microphone; photos only after your explicit selection
Apple ID email (CloudKit only transmits an anonymous ID)

There are no third-party SDKs (no Firebase, no Sentry, etc.).

Sign in with Apple

Nokka does not use Sign in with Apple for login. Authentication runs transparently through your iCloud account.

Push notifications

Nokka sends local notifications only (e.g. event and bet reminders). There is no push server; all notifications are generated on your device. You can disable them in iOS Settings or in the app.

Cost and previous purchases

Nokka is completely free and the current version offers no in-app purchases. Previous Nokka Pro purchases were processed exclusively by Apple; all former paid features are now available to everyone regardless of purchase status. If a previous subscription still appears active, manage or cancel it under Settings → Apple ID → Subscriptions.

Purposes and legal bases

Local storage and iCloud synchronisation provide the app functions you request and perform the user relationship. Location, Apple Health and notifications are optional and rely on your consent or system permission, which you can withdraw in device settings. Technical network requests and abuse prevention rely on the legitimate interest in a secure and functional service.

Recipients and international processing

Depending on the feature, Apple (iCloud, CloudKit, Health and system services), Cloudflare (website, proxies and the optional fitness service) and Open-Meteo (weather) process required data. For the fitness service Cloudflare processes the daily total, date, metric, crew display name, pseudonymous device identifier and technical request data. Processing may occur outside Switzerland or the EEA under applicable contractual safeguards. Nokka does not sell personal data or disclose it for advertising.

Retention

Local and iCloud/crew data remains until deletion. Shared fitness daily totals and associated inactive display names or pseudonymous device identifiers are retained for at most 400 days; daily totals are deleted for your device and counter after a successful disconnect. If deletion fails offline, further sharing stops and the app asks you to retry deletion online. Provider retention periods and legal duties apply to technical logs and required records.

Your rights

Delete data: delete a group in the app → all associated data is removed locally and from iCloud
Delete the app: uninstalling preserves the iCloud data (for other devices). Full removal via Settings → Apple ID → iCloud → iCloud Drive → Manage Apps → Nokka → delete
Access / data copy: Export local and iCloud content as structured JSON from the app settings; request a copy of separately stored fitness daily totals at lari@termi.cloud
Contact: lari@termi.cloud

You may also request access, correction, deletion, restriction, portability or object to processing, and withdraw consent prospectively. You may complain to the Swiss Federal Data Protection and Information Commissioner or, where applicable, your competent EU/EEA supervisory authority.

Changes

We update this privacy policy when something substantial changes. You'll find the current version here at nokka.termi.cloud/privacy.