DXN StudioPrivacy policy
Your workouts stay on your phone. Nock has no account, no sign-in and no cloud sync, so there is no copy of your training on our servers.
The app shows banner ads through Google AdMob, and that is the one part of Nock that involves a third party collecting data about your device. In the EEA, the UK and Switzerland the app asks your permission first, and you can change that answer at any time in Settings.
This policy covers the Nock Android app (app.nock), published by DXN Studio. It describes what the app actually does, not a general template.
What stays on your phone
Your exercises, sets, reps and history are written to a database on the device itself. There is no account to create and nothing to sign in to, so this data is never uploaded to us and we have no way to read it.
Because it is local, two things follow. Your training is private by construction, and it is also not backed up by us: uninstalling Nock deletes it, and we cannot restore it.
Reminders are scheduled locally by the app. There is no push service and no push token, so nothing about your device is registered with a notification server.
Advertising
Nock displays banner advertising through Google AdMob. The Google Mobile Ads SDK collects data about your device rather than about your workouts. Where you are asked for consent, it does not start at all until you have answered. What it collects typically includes:
- Your Android advertising ID, a resettable identifier Google provides for advertising.
- Your IP address, and coarse location derived from it.
- Device and app information, such as the device model, operating system version and the app you are using.
- Interactions with the ads themselves, such as whether one was seen or tapped.
Asking first, where that applies
If you are in the European Economic Area, the UK or Switzerland, Nock shows a consent form the first time you open it, before any of that collection begins. The advertising SDK does not start until you have answered. The form is Google's User Messaging Platform, a certified consent management platform.
If you decline, ads do not disappear. They change. Google serves what it calls limited ads, which are not personalised and which do not access your advertising ID or other identifiers stored on your device. The one exception Google names is that, where programmatic limited ads are enabled, storage may still be used to detect fraudulent and invalid traffic.
You can change your answer whenever you like: Settings, then Ad privacy. That reopens the same form. The row appears only where the form applies, so if you do not see it, you are outside those regions and were never asked.
Outside those regions no form is shown and ads are personalised as described above.
Google acts as an independent controller for the data its advertising SDK collects, and its own terms govern what it does with that data. Details are in Google's privacy policy and in how Google uses information from sites or apps that use its services.
You have direct control over the advertising ID on your phone, outside this app. In Android, under Settings, Privacy, Ads, you can reset the identifier or delete it entirely. Deleting it stops apps from receiving it.
Beta feedback
Builds distributed for testing include a feedback tool. It only ever sends something when you choose to submit feedback, and when you do it sends what you typed, the app version, and a screenshot if you attached one. Those go to a Supabase project used for testing. Release builds published without the testing tool do not contain this feature at all.
What the app never collects
- No account, no email address, no name. There is nothing to sign in to.
- No copy of your workouts. That data does not leave the device.
- No analytics or product-measurement SDK.
- No location permission, no contacts, no microphone, no camera.
- We do not sell your personal information ourselves, and we do not operate any tracking of our own across other apps or sites.
The app requests two permissions: internet access, which the ads need, and notification permission, so reminders can appear.
Who else receives data
| Service | What it receives | Why |
|---|---|---|
| Google AdMob | Advertising ID, IP address, device and ad interaction data. Less than this where you decline consent | Selecting and measuring the ads shown in the app |
| Supabase | Feedback you submit, and only in testing builds | Collecting beta feedback |
How long data is kept, and deleting it
Your workout data is kept on your device for as long as the app is installed, and uninstalling removes it. Since we never receive it, there is nothing for us to delete and no request you need to make.
Data collected by Google's advertising SDK is retained by Google under its own policies, not ours. Resetting or deleting your advertising ID in Android settings breaks the link to the previous identifier.
Feedback submitted from a testing build is kept while the app is in testing. To have yours removed, email [email protected].
Legal bases, for users in the UK and the EEA
Where the UK GDPR or the EU GDPR applies:
- Your workout data is processed only on your own device. We are not a controller of it, because we never receive it.
- Advertising is the processing that does involve your personal data leaving the device, and it rests on your consent, collected through the form described above before the advertising SDK starts. You can withdraw it at any time in Settings, then Ad privacy, which is as easy as giving it. Google acts as an independent controller of what its SDK collects.
- Feedback you submit from a testing build is processed on the basis of your consent, given by choosing to send it.
Your rights
You have the right to access, correct, delete, restrict, object to and port your personal data. For anything we hold, which in practice means beta feedback, write to [email protected]. For data held by Google through its advertising SDK, use the controls in your Android settings and the mechanisms described in Google's own privacy policy, since that data is not in our hands.
If you think your data has been handled badly, you can complain to your national data protection authority. In the UK that is the Information Commissioner's Office.
If you are in California
Under the CCPA and CPRA you may request the categories and specific pieces of personal information collected, request deletion, and request correction. The categories involved are identifiers (the advertising ID) and internet or network activity (ad interactions), both collected by Google's advertising SDK rather than by us.
We do not sell personal information for money. Advertising of this kind may count as sharing for cross-context behavioural advertising under California law. Two controls limit it: deleting or resetting your advertising ID in Android settings, and, if the consent form applies to you, declining it. Exercising any right here will not get you worse service.
Children
Nock is not directed to children under 13, and we do not knowingly collect personal information from them.
Security
Workout data sits in the app's private storage, which Android isolates from other apps. Network traffic uses HTTPS. The strongest protection here is structural rather than technical: data that is never collected cannot be exposed, and your training history is never collected.
Changes to this policy
If this policy changes in a way that affects what is collected or who receives it, the effective date at the top will change and the app listing will point at the updated page. Material changes will be called out in the app's release notes rather than made quietly.
Contact
Questions, requests and complaints: [email protected].