@@ -48,37 +58,44 @@ export default function NookPrivacyPolicy() {
hardware UUID and device name to our licensing server
(freno.me). The UUID enforces the 14-day trial and the 3-device
activation limit and stops a trial being reset by reinstalling
- the app; the device name is so you can recognize the Mac among
- your activations. While you are on the trial, this is sent at
- each launch. Once you are licensed, each launch re-checks only
- that your key has not been revoked. Deactivating a Mac sends the
- license key and that Mac's UUID. If you add an email during
- the trial, that request carries the email and the UUID, and it
- is sent once. All of these calls fail open: with no connection,
- the app keeps working, because license verification itself is
- offline.
+ the app; the device name is stored with the activation so the
+ Mac can be identified in your license records. While you are on
+ the trial, this is sent at each launch. Once you are licensed,
+ each launch re-checks only that your key has not been revoked.
+ Deactivating a Mac sends the license key and that Mac's
+ UUID. If you add an email during the trial, that request
+ carries the email and the UUID, and it is sent once. The trial
+ and status checks fail open: with no connection, an unexpired
+ trial or a stored license keeps working, because license
+ verification itself is offline. Activating a new license needs
+ a connection once.
(b) Crash and error reporting:
Crash
- reports, error events, hang reports and performance traces are
- sent to Sentry, our crash-reporting processor, and this is on
- for every launch in this version — there is no setting that
- turns it off. Each report carries the app version, the macOS
- version, the Mac model and what the app was doing when it
- failed, and Sentry also receives your IP address and your macOS
- username. Reports never include your prompts, your code or your
+ reports, error events, hang reports, session pings, and
+ performance traces are sent to Sentry, our crash-reporting
+ processor, and this is on for every launch in this version —
+ there is no setting that turns it off. Each report carries the
+ app version, the macOS version, the Mac model and what the app
+ was doing when it failed, and Sentry also receives your IP
+ address. Reports never include your prompts, your code or your
session content.
(c) Phone connection:
The phone
- connection ships off and is yours to enable. When you turn it
- on, your Mac registers with our relay (nook-relay.freno.me)
- using a random install ID, and a licensed Mac presents its
- license key once at registration. Everything your Mac and your
- phone then exchange — session updates, approvals, replies — is
- encrypted end-to-end: the relay routes it and cannot read it.
- The relay can see which devices are connected, when, and how
- much traffic they exchange.
+ connection ships off and is yours to enable. With the default
+ relay path, turning it on registers your Mac with our relay
+ (nook-relay.freno.me) using a random install ID, and a licensed
+ Mac presents its license key once at registration. Everything
+ your Mac and your phone then exchange — session updates,
+ approvals, replies — is encrypted end-to-end: the relay routes
+ it and cannot read it. On the relay path, the relay can see
+ which devices are connected — their IDs, names and platforms —
+ when, and how much traffic they exchange.
+
+
+ You can also pair over your LAN or tailnet instead; those paths
+ carry the same sealed traffic and do not use the relay.
(d) Weather:
If you add the Weather
@@ -131,16 +148,26 @@ export default function NookPrivacyPolicy() {
(j) What does not leave your Mac:
The
- hook and the bridge that connect your agents to The Nook talk to
- nothing but your Mac — the hook dials the local bridge socket,
- and the bridge only listens. Two paths carry agent data across
- the network, and both are switched on by you: if you add a
- remote machine, the hook on that machine dials this Mac over
- SSH; and if you use the phone connection, the session updates,
- approvals and replies described in (c) travel through the relay,
- sealed end to end.
- The privileged helper that controls fans and charging has no
- networking code at all.
+ hook and the bridge that connect your agents to The Nook are
+ not a cloud service: the hook dials the bridge on your Mac, and
+ the bridge only listens. Two paths carry agent data across the
+ network, and both are switched on by you: if you add a remote
+ machine, the hook on that machine dials this Mac over SSH or
+ your tailnet; and if you use the phone connection, the session
+ updates, approvals and replies described in (c) travel through
+ the relay, sealed end to end. The privileged helper that
+ controls fans and charging has no networking code at all.
+
+
+
The iPhone companion.
The iPhone and
+ Apple Watch app is in TestFlight beta. It runs the same Sentry
+ reporting: the app version, iOS version, iPhone model, session
+ pings and your IP address, with the same no-off-switch. Those
+ reports never include your prompts, code or session content.
+ Its other network traffic is the phone connection in (c) — the
+ relay, or a direct LAN/tailnet link — plus, if you allow
+ notifications, the push token it gives the relay so Apple can
+ deliver them.