Privacy Policy

Nook for Mac, Nook on iPhone, iPad and Android, and Nook on the web · Effective 9 October 2026

Who makes Nook

Nook is an independent email client made by Prerak Gada. In the App Store and on Google Play it is listed as Nook Mail. This policy covers Nook for Mac downloaded from nook.prerakgada.in, the Nook apps for iPhone, iPad and Android, Nook on the web at nook-app.prerakgada.in, Nook's server, and this website.

Nook for Mac: what it stores, and where

• Your mail and drafts. Account settings, downloaded messages and attachments, drafts, the outbox and local backups are kept in Nook's data folder on your Mac.
• Passwords and sign-in tokens. App passwords and Google or Microsoft sign-in tokens are kept in your Mac's Keychain. Nook for Mac never writes them to its database, logs or backups on your Mac. If you add an account to your Nook account, Nook's server also keeps its password or sign-in, encrypted, as described below.
• Your Nook sign-in. If you sign in to a Nook account on your Mac, that sign-in is kept in your Mac's Keychain too.
• Preferences. Layout, colour and similar settings are kept on your Mac. While your Mac is signed in to a Nook account, the settings listed in the next section are also saved to it.

While your Mac is not signed in to a Nook account, none of this is uploaded to Nook's maker, and Nook for Mac never talks to Nook's server. New-mail notifications on a Mac are always created on the Mac itself. Apart from an update check, which carries no data about you, the only thing a signed-out Nook for Mac sends Nook's maker is feedback you choose to send, described below.

Nook for Mac with a Nook account

From Nook 0.3.0 you can sign in to a Nook account in Nook for Mac, under Settings → Accounts & identities. It is optional, and you can sign out at any time. Signed in, your Nook account becomes the list of mail accounts for all your devices:

• You choose what is added. When you sign in, Nook asks which of your Mac's mail accounts to add to your Nook account. The others stay on your Mac only. A switch in Nook's settings controls whether accounts you connect later are added automatically. Outlook and Microsoft 365 accounts always stay on your Mac for now, because Nook's server can't connect to them yet.
• What Nook's server receives. For each account you add: its address, name and server settings, and its app password or Google sign-in token. The server keeps the password or token encrypted and keeps a copy of that account's mail, exactly as for an account connected on a phone. That is how the account shows up on your iPhone, iPad, Android and the web, and how your phone can tell you about new mail while your Mac is off.
• What your Mac still does itself. Your Mac keeps getting its mail straight from your provider into its own storage, and keeps its own copy of each password or sign-in in its Keychain. It does not upload the mail it has downloaded.
• Accounts added on another device. When your Nook account has a mail account this Mac doesn't have yet, Nook's server sends the Mac that account's app password or sign-in, so the Mac can connect to it directly. A Gmail account connected on a phone or on the web can't be passed on this way, so the Mac asks you to sign in with Google on the Mac instead.
• Settings that follow you. Your signatures, templates, smart folders and a set of mail preferences are saved to your Nook account and kept the same on each device signed in to it. The preferences include your priority senders, the addresses you hid from suggestions, and what you told Nook AI about yourself and how you write. Layout, appearance, notifications, rules and reminders stay on each device. The Mac's own Set Aside, snoozed items and pins stay on the Mac; they are not shared with your phone.
• Signing out stops this syncing and leaves your Mac's accounts and mail as they are. The accounts you added stay in your Nook account until you remove them.

Your Nook account: what Nook's server stores

Nook on iPhone, iPad, Android and the web needs a Nook account, and Nook for Mac can use one. While you have one, Nook's server holds:

• Your Nook account. Your email address, a salted Argon2id hash of your password (never the password itself), and your signed-in sessions with each device's name and platform.
• Your mail. The mail accounts in your Nook account, whether you connected them on a phone or in a browser or added them from a Mac, and the messages, attachments, drafts, scheduled sends, set-aside and snoozed items, categories and category rules Nook keeps for them, so it can keep your mail in sync, and send what you schedule on a phone or in a browser, while your devices are closed.
• Your mail passwords and sign-ins. The app password or sign-in token for each connected mail account, encrypted with AES-256-GCM under a key kept separately from the database.
• Synced settings. From Nook 0.3.0: your signatures, templates, smart folders and the mail preferences described above, each with the time it last changed.
• Notification settings. For each phone that allows notifications: the push token Apple or Google gives that phone for Nook, its platform, and your notification preferences.
• Your own AI key, if you add one. If you connect your own AI provider account in Settings → AI & automation, its key is encrypted the same way as your mail passwords.

The server is a computer operated by Nook's maker in Mumbai, India. Your apps and browser reach it through Cloudflare, which encrypts the connection and processes standard request information, such as your IP address, to deliver it. Account verification and password-recovery emails are sent through Zoho ZeptoMail, which processes your email address and that message. To slow down password guessing and abuse, the server briefly keeps, in memory and for up to 15 minutes, one-way hashes of the network address that sign-in, sign-up, password-recovery and other account requests come from and, where the request names one, of the email address or Nook account it is for.

Nook's maker runs this server and can technically reach what is stored on it. Your mail is not read, except for specific messages when you ask for help with a problem and allow it, when needed to keep the service secure, or when the law requires it. It is not sold, not used for advertising, and not used to train AI models.

Backups. The server's database, attachments and credential key are backed up every hour, encrypted with a key that is kept offline, on neither the server nor the machine holding the copies. Encrypted copies are kept for up to 30 days. For fast recovery the server also keeps unencrypted snapshots of its database, on the server itself, for 14 days.

How long it is kept. Everything above stays while your Nook account exists. Disconnecting a mail account stops its sync and deletes its saved password or sign-in from the server straight away; mail already copied from it stays in your Nook account until you remove that mail account from all devices or delete your Nook account. Removing a mail account from all devices deletes it from the server straight away, with its saved password or sign-in and the server's copy of its mail.

On your phone or in your browser

• Your Nook sign-in. On iPhone, iPad and Android it is kept in the device's secure storage (the Keychain, or Keystore-protected storage), and it is excluded from phone backups. In a browser it is kept in protected cookies.
• Mail for offline reading. Messages and attachments you have opened or downloaded, and unsent drafts, are kept in Nook's private storage on the device so you can read and write without a connection. Settings → Offline & storage controls how much is kept.
• Things that stay on that device. Reminders, rules you make on the device, layout, colour and similar display preferences are kept on that phone or browser and are not sent to Nook's server. From Nook 0.3.0, signatures, templates, smart folders and a set of mail preferences are saved to your Nook account instead, as described above.

Your phone's own backup (iCloud or Google) may include Nook's offline storage, as it does for other apps. Your Nook sign-in is kept out of those backups, so after restoring onto a new phone you sign in to Nook again. When you sign out of Nook you can keep this local copy for your next sign-in or remove it from the device.

New-mail notifications

On iPhone, iPad and Android, Nook's server tells you about new mail in your inboxes while the app is closed. It sends each notification through Apple Push Notification service, or through Google's Firebase Cloud Messaging on Android when notifications are available there. Apple or Google delivers it to your device. This includes mail accounts a Mac added to your Nook account. Nook for Mac gets no notifications from Nook's server; it creates its own while it runs.

• What a notification contains. By default, the sender's name and the message's subject, the mail account's name when you have more than one, the number of unread messages for the app badge, and internal identifiers that tell the app which message to open. Never the message body or attachments.
• Choosing less. In Settings → Notifications you can show the sender only, or nothing but “New mail”. Apple or Google then never receives the subject, or the sender either.
• Turning them off. Turn notifications off for Nook in your phone's settings, or sign out of Nook on that phone; signing out removes that phone's push token from the server.

What Nook connects to

• Your mail providers' servers (for example Gmail, Outlook, iCloud or Zoho), over encrypted connections, to receive, organise and send your mail: directly from your Mac in Nook for Mac, and from Nook's server for Nook on iPhone, iPad, Android and the web, including the accounts a Mac added to your Nook account.
• Nook's server, from Nook for Mac only while it is signed in to a Nook account: to add the accounts you chose, check your Nook account's list of mail accounts every few minutes, receive the sign-in for an account added on another device, and keep your synced settings up to date.
• Google's sign-in services, when you choose Sign in with Google, to authorise Nook and to confirm your Google account's email address and name.
• Microsoft's sign-in services, when you choose Sign in with Microsoft, to authorise Nook and to learn your Microsoft account's email address and name.
• Apple Push Notification service and Google's Firebase Cloud Messaging, from Nook's server, to deliver new-mail notifications as described above.
• Google's website-icon service, when Show sender logos is enabled, to retrieve logos using the sender's domain (for example, github.com). The request goes from your device. It exposes that domain and your IP address to Google, but does not include the sender's full email address, message content or your mail credentials. Icons are cached on your device. Turn this off in Settings → Message list & gestures → Show sender logos to use colourful initials only.
• Image servers named in an opened email, unless Images in emails is set to Block all remote images. The request goes from your device. By default Nook removes known and hidden tracking pixels before anything is requested, but other remote images can still include sender-provided tracking identifiers and reveal your IP address and that the message was opened. They never include your mail password or sign-in tokens. Change this in Settings → Privacy & security → Images in emails, or use Show images on a single message.
• nook.prerakgada.in and nook-downloads.prerakgada.in, when you press Check for updates in Settings → Diagnostics & support, to read the newest version number. The request carries no account, device or usage data.
• api.prerakgada.in, only when you press Send in Report a Problem… or Send Feedback… (in the … menu, Settings → Diagnostics & support, and on a Mac the Help menu). It sends what you typed — your message, plus your name and email if you add them — with Nook's version and build, your platform, its system version and, on a Mac, the model (for example Mac16,5). Android and the web send no system version. The form lists exactly what goes before you send it. It never includes your mail, mailbox addresses, logs or diagnostics, and nothing is sent in the background. The message is stored and emailed to Prerak so he can read it and, if you gave an email, reply. Like any request, it reveals your IP address: the server keeps the approximate location derived from it (country, region and city) and a one-way hash of the address, not the address itself, along with the user-agent string the request carries. Nook does not save the name or email you typed.
• Web pages you choose to open in your browser, such as a provider's help page.

Scripts, forms and other active content inside emails are blocked. Embedded image attachments display without contacting an external image server. Remote image bytes are cached temporarily in memory, scoped to the message and account.

AI

Nook AI (Nook for Mac) is optional and off until you use it. It runs an AI assistant you have already installed on your Mac — Claude Code or Codex — signed in with your own account. When you ask it something, the mail it reads to answer is sent by that assistant to its provider (Anthropic or OpenAI) under your account and that provider's terms. Nook's maker receives none of it, apart from the details about yourself and how you write that you save in Nook AI's settings, which sync as described above if your Mac is signed in to a Nook account. Nook AI only acts on your mail at your direction, and asks before sending or deleting unless you allow otherwise.

Your own AI key (Nook on iPhone, iPad, Android and the web) is also optional. If you connect your own OpenAI or Anthropic account in Settings → AI & automation and set up an AI function, Nook's server sends that provider the mail the function needs, under your key and that provider's terms, when you run the function or when it is set to run on new mail. Nothing is sent to an AI provider unless you set this up.

Google user data

If you sign in with Google, Nook asks Google for access to your Gmail and your basic profile (your email address and name):

• In Nook for Mac, full Gmail access (https://mail.google.com/) over IMAP and SMTP, plus openid, email and profile, and, if you allow it, your Google Calendar (calendar.events and calendar.calendarlist.readonly) to show your calendars and schedule meetings from your mail. The sign-in token is kept in your Mac's Keychain, and the mail and calendar events your Mac downloads stay on your Mac. If your Mac is signed in to a Nook account and you add that Gmail account to it, Nook's server also keeps the sign-in token, encrypted, and uses it through the Gmail API as described next. Nook's server never uses it for your calendar.
• In Nook on iPhone, iPad, Android and the web, full Gmail access (https://mail.google.com/), used through the Gmail API to read, compose, send and label your mail, plus openid, email and profile. Nook's server keeps the sign-in token encrypted, as described above, and keeps a copy of your Gmail so it can sync your mail, send at your direction and notify you of new mail.

• Nook uses this data only to show, search, organise, compose and send your own mail inside Nook, to tell you about new mail, and, on a Mac, to show your calendar and schedule meetings, at your direction.
• Your Gmail data is not sold, not used for advertising, and not used to develop, improve or train AI or machine-learning models. No person reads it, except for specific messages with your explicit permission (for example, when you ask for help with a problem), when needed for security, or when the law requires it. When sender logos are enabled, only the sender's domain is used for the icon lookup described above. If you use Nook AI or your own AI key, the mail it reads at your request goes to the AI provider you chose, as described above.
• You can remove Nook's access at any time from your Google Account under Your connections. Deleting your Nook account deletes the server's copy, as described below.

Nook's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Microsoft account data

If you sign in with Microsoft, Nook asks Microsoft for access to your mailbox and your basic profile (your email address and name):

• In Nook for Mac, access over IMAP and SMTP (IMAP.AccessAsUser.All and SMTP.Send) and permission to stay signed in (offline_access). The sign-in token stays in your Mac's Keychain. Outlook and Microsoft 365 accounts are not added to your Nook account, even when your Mac is signed in to your Nook account, so Nook's server never receives this token.
• In Nook on iPhone, iPad, Android and the web, where Sign in with Microsoft is offered, access through Microsoft Graph (Mail.ReadWrite, Mail.Send, User.Read and offline_access). Nook's server keeps the sign-in token encrypted and a copy of your mail, as described above.

• Nook uses this data only to show, search, organise, compose and send your own mail inside Nook, and to tell you about new mail, at your direction. It is not sold, not used for advertising, and not used to train AI models.
• You can remove Nook's access at any time: for a personal Microsoft account under apps and services that can access your data, and for a work or school account in My Apps or through your organisation's administrator.

Deleting your data

Nook for Mac:

• Disconnecting an account in Nook deletes its saved password or sign-in token from your Keychain.
• On a Mac signed in to a Nook account, Remove from this Mac takes an account off that Mac only; it stays in your Nook account and on your other devices. Remove from all devices also deletes it from your Nook account: Nook's server deletes its saved password or sign-in and its copy of that account's mail straight away, and your devices remove the account and the mail they downloaded from it. Neither deletes any mail at your provider.
• Other downloaded mail stays until you delete Nook's data folder. Nook shows it under Settings → Offline & storage → Show data folder.
• Deleting Nook's data folder removes everything Nook stored on your Mac. Your mail at your provider is not affected, and neither is your Nook account or what Nook's server keeps for it.

Nook on iPhone, iPad, Android and the web:

• Settings → Accounts & identities → Delete Nook account… removes your Nook account and everything the server holds for it — connected accounts, including any a Mac added, mail, attachments, drafts, scheduled sends, saved mail passwords and sign-ins, synced settings, AI keys and notification registrations — immediately, and clears Nook's offline copy on the device you use. It asks for your password first, and it cannot be undone. You can do the same in Nook on the web, or ask by email. A Mac that was signed in to the account keeps its own accounts and downloaded mail. How to delete your Nook account.
• To delete just one mail account and its mail from Nook's server, choose Remove from all devices for it in Settings → Accounts & identities.
• Encrypted backups made before the deletion expire within 30 days, and the server's own database snapshots within 14 days. They are not used to restore a deleted account.
• Deleting the app or signing out does not delete your Nook account. Your mail at your provider is not affected either way.

Your rights

You can ask what Nook's server holds about you, ask for it to be corrected, or have it deleted — most of this you can do yourself in Settings. For anything else, or to raise a concern about how your data is handled, contact Prerak or email prerak@engaze.in; you will get a reply within 30 days. A Mac that is not signed in to a Nook account holds nothing about you off your Mac apart from feedback you chose to send, so there is nothing else for Nook's maker to hand over for it.

This website

nook.prerakgada.in is a static site hosted by Vercel, and Mac downloads are served from nook-downloads.prerakgada.in through Cloudflare. Neither sets analytics or advertising cookies. Page views and downloads are counted by the site's own cookieless counter, which stores no IP addresses and shares nothing with anyone; page views are skipped when your browser sends Global Privacy Control or Do Not Track. When you download Nook, the site asks for your name, email, what you do and a referral code; every field is optional and you can skip it. Whatever you choose to give is used only to understand who uses Nook, and is never shared or sold. Your colour and appearance choices are saved in your own browser. Like any web host, Vercel and Cloudflare process standard request information, such as IP addresses, to deliver the site. If you send feedback through the contact page, what you send is used only to reply to you.

Children

Nook is not directed at children under 13. Nook accounts, which Nook on iPhone, iPad, Android and the web require and Nook for Mac can use, are for people 18 and over.

Changes

If Nook starts sending data anywhere this policy does not describe, this policy will be updated before that happens. Changes are posted on this page with a new effective date.

What changed with Nook 0.3.0. Nook for Mac can sign in to a Nook account. The mail accounts you add from a Mac are then kept by Nook's server like accounts connected on a phone, and signatures, templates, smart folders and a set of mail preferences sync through your Nook account on every device. A Mac that is not signed in works exactly as before.

Contact

Questions about privacy? Contact Prerak or email prerak@engaze.in. For help with the app, see Nook support.