Nekan privacy policy
Effective 2026-09-17 · Nekan
Nothing is collected unless you sign in. Nekan works completely without an account, and in that case your tasks only ever live in a file on your own computer. Everything below applies only when you have signed in to sync across devices.
1. What is collected, and why
| Data | Purpose | Collected when |
|---|---|---|
| Email address | Identifying the account and showing you are signed in. If you choose Hide My Email when signing in with Apple, the forwarding address Apple makes is stored instead. | You sign in with a Google or Apple account |
| User identifier (UUID) | Telling your tasks apart from everyone else's | The account is created |
| The name and profile picture on your Google account | Google hands these over with the account details at sign-in and the authentication server keeps them. The app neither reads nor writes them and shows them nowhere. | You sign in with a Google account |
| The name on your Apple account | The name you leave on Apple's sign-in screen is handed over the first time you sign in on the desktop app, and the authentication server keeps it. The phone app does not ask for a name. The app neither reads nor writes it. | You first sign in with an Apple account on the desktop app |
| Task content — text, notes, due dates, quadrant, Work/Life side, sort order, and the times it was created, edited, completed, deleted or deleted forever | Syncing across your devices | You create or change a task while signed in |
What is never collected:
- Phone number, address, date of birth, gender
- Location, contacts, photos, files
- Advertising identifiers — there are no ads and no tracking of any kind
- Usage or analytics data — no analytics tool is built into the app
2. Retention and deletion
- Data is kept until you delete your account. Settings (⚙) → Delete account in the desktop app, or the Settings tab → Delete account in the phone app, removes the account and the tasks held on the server, and it cannot be undone.
- When you delete a task forever its content — the text and the note — is erased immediately. A content-free deletion marker (an identifier and a timestamp) stays for 90 days so that a device which has not synced yet cannot bring the task back, and is then removed.
- Signing out is not deletion. The tasks on your computer and the copy on the server both stay.
3. Processors
| Processor | What they do | Where data is stored |
|---|---|---|
| Supabase, Inc. | Account authentication, storing and syncing task data | Seoul, South Korea region |
| Google LLC | Google account sign-in | Per Google's own policy |
| Apple Inc. | Apple account sign-in | Per Apple's own policy |
Beyond those three, nothing is shared with or sold to anyone. Google and Apple sign-in only happen if you choose that method yourself.
The records that exist simply because a server was spoken to — access logs, including IP addresses — are kept by those processors and by whoever serves this page, each under their own policy. Nekan neither collects nor uses them.
4. Your rights
- Access and correction — everything is visible and editable inside the app at any time. No request is needed.
- Deletion — Settings (⚙) → Delete account in the desktop app, or the Settings tab → Delete account in the phone app, does it yourself. If you have already uninstalled the app or cannot reach that screen, use the deletion request page.
- Withdrawing consent — signing out stops anything further being sent to the server. To remove the copy already there, delete the account.
5. How the data is protected
- All traffic to and from the server is encrypted with HTTPS.
- The database enforces that you can only read and write your own rows (Row Level Security). Somebody else's tasks do not come back even if asked for.
- Sign-in credentials are stored on your computer encrypted through the operating system's secure storage, never in plain text.
6. Children
Nekan is not directed at children under 14, and their personal data is not knowingly collected.
7. Changes to this policy
If this changes, this page is updated and the effective date above is changed with it. Significant changes are also announced inside the app.
8. Contact
For privacy questions or deletion requests, write to
nekan.support@gmail.com.