Nailed
Privacy Policy
In short. Without an account, your lists stay on your phone. With an account, we keep what is needed to sync and share your lists, nothing more. No ads, no trackers, no audience measurement. Your data is never sold. You can delete everything from the app.
Who we are
Nailed is published by Bipbop inc., a corporation incorporated under the Canada Business Corporations Act (Québec enterprise number 1177719045), with its head office at 235, rue De La Colombière Ouest, Québec (Québec) G1L 1C5, Canada.
The person in charge of the protection of personal information is the President of Bipbop inc. For any question or request: contact@nailed.so.
What stays on your device
Your lists, tasks and preferences are first saved on your phone. Without an account, they never leave it.
What goes to our servers
At startup, even without an account
The app opens an anonymous session with its hosting provider to prepare syncing. This session contains neither your name, nor your email address, nor the content of your lists.
When you create an account or sign in
- Your account: your email address, your username and your password. The password is stored in an encrypted form that no one can read back, not even us.
- Your lists: lists, tasks, subtasks, dates, reminders, priorities, colors and the order you give them.
- Sharing: the members of your shared lists, the invitations you send (and therefore the invited person’s email address), and the people you have already shared with, to suggest them again.
- Notifications: if you accept them, a device identifier and the app language, only to let you know about an invitation in your language.
- Abuse prevention: a daily count of the tasks, subtasks and lists created, to prevent an account from being used to flood the service.
Why
This information is used only to run Nailed: signing you in, syncing your lists across your devices, sharing them with the people you choose, sending invitation and account verification emails, and protecting the service. It is used for nothing else.
What Nailed does not do
- No ads.
- No trackers, no audience measurement, no analytics tools, neither in the app nor on this site.
- No selling, renting or sharing of your data for commercial purposes.
- No access to your contacts, location, microphone or photos.
Who else can access it
Members of your shared lists
A shared list is visible to all its members: its content and the changes you make to it, including who checked off what. Your username is visible to them. The invitation email shows the part of your email address before the “@”.
Our service providers
We rely on three providers. Each one only receives what it needs for its role and may not use it for any other purpose.
| Provider | Role | What it receives |
|---|---|---|
| Supabase | Database and account hosting | Your account information and the content of your synced lists |
| Brevo | Sending emails: invitations, account confirmation, password reset | The recipient’s address and the email text. For an invitation: the part of your address before the “@” and the list name |
| Google Firebase Cloud Messaging | Delivering notifications | The device identifier and the notification text |
Outside Québec
These providers may store or process information outside Québec and Canada, notably in the United States and the European Union. Before using each of them, we verified that it provides adequate protection (encryption, access control, contractual confidentiality commitments).
Authorities
We only disclose information to an authority when the law requires us to.
Permissions requested by the app
- Notifications: show your reminders and the invitations you receive.
- Exact alarms, full-screen display, foreground service: ring a reminder at the exact time, like an alarm clock, even when the app is closed or the screen is locked.
- Vibration and keeping the device awake: vibrate and keep the alarm visible while it rings.
- Device startup: reschedule your reminders after the phone restarts.
- Internet: sync and share your lists.
You can revoke these permissions at any time in Android settings. Reminders or sharing will then stop working.
How long
- As long as your account exists.
- A deleted task stays in the trash for 30 days, then disappears.
- When you delete your account, your account and your data are erased immediately. A shared list you own is handed over to another member rather than destroyed, so it doesn’t disappear for them. What you added to other people’s lists stays there, without your name. Details are on the Delete my account page.
- A copy may remain for at most 30 days in our hosting provider’s technical backups, until they are replaced. They are never used to restore a deleted account.
Security
Traffic between the app and our servers is encrypted (HTTPS). Access to data is restricted, at the database level, to its owner and to the members of shared lists. Passwords are stored in encrypted form. If a confidentiality incident presents a risk of serious injury, we will notify you and Québec’s Commission d’accès à l’information, as required by law.
Your rights
At any time, you can:
- view and correct your data directly in the app;
- delete your account and your data from the app (Menu → My account → Delete my account);
- get a copy of your data in a structured, commonly used format;
- withdraw your consent, for example to notifications, in Android settings.
For any request, write to contact@nailed.so from the address linked to your account. We reply within 30 days.
If you are not satisfied with our answer, you can file a complaint with Québec’s Commission d’accès à l’information.
Children
Nailed is not intended for children under 14. A child under 14 must not create an account without the consent of a parent or guardian. If you learn that a child has given us information without that consent, write to us and we will delete it.
This website
The nailed.so website sets no cookies, uses no analytics tools and serves its fonts from its own server. Like any website, its host technically receives visitors’ IP addresses to serve pages and protect the service; we do not use them.
Changes
If this policy changes significantly, we will say so in the app before the changes take effect. The date at the top of this page shows the latest update.
Contact us
Bipbop inc. · Person in charge of the protection of personal information
235, rue De La Colombière Ouest, Québec (Québec) G1L 1C5, Canada
contact@nailed.so