Nordy — Privacy Policy

Effective date: 31 August 2026

Last updated: 31 August 2026

Nordy ("Nordy", "we", "us") is operated by SIXSIDE MARKETING INC., a corporation registered in Ontario, Canada (corporation number 1001318957), whose contact address is 5 Sheppard Avenue West, Toronto, Ontario M2N 0G4, Canada.

Contact for any privacy question or request: nordydevapp@gmail.com

1. The short version

Nordy keeps your data on your phone.

Your habits, quests, focus sessions, XP and level, streaks, oaths, calendar entries and Ward (Screen Time) rules are stored on your device. They are not uploaded to us. We do not operate a server that receives, stores, or analyses your Nordy activity, and we cannot see it.

We run no advertising, no tracking, no data brokers, and no third-party analytics SDKs. We do not sell or share your personal information, as those terms are defined under US state privacy laws. Our App Store privacy manifest declares no tracking, and that is accurate.

Information leaves your device in two cases only: when you choose to sign in with Apple, and when you make a purchase, which Apple handles. Both are described in section 4. There is no Nordy account server: Sign in with Apple is the only account Nordy offers, and everything it gives us is stored on your device.

2. Who this policy applies to

This policy applies to the Nordy iOS application and any page we publish at spetnaz777.github.io/nordy-legal.

Nordy is intended for users aged 13 and over (16 and over in the European Economic Area and the United Kingdom, or the higher age set by your country's law). Nordy is not directed to children, and we do not knowingly collect personal information from children below those ages. If you believe a child has provided us with personal information, contact nordydevapp@gmail.com and we will delete it.

3. What is stored on your device only

The following stay in Nordy's private storage area on your device. We have no copy and no access:

• Habits and quests, their schedules, targets, categories and check-in history
• Focus sessions: length, start time, completion, and any habit a session was bound to
• Progress data: XP, level, rank, streaks, achievements, challenges
• Oaths and their outcomes
• Calendar entries you create inside Nordy
• Ward configuration and its counters (see section 6)
• Your app preferences: theme, day start hour, reminder settings, sound settings
• Your display name, if you enter one
• If you sign in with Apple: the account identifier Apple issues, plus the name and email address you approve at that moment (see section 4.1)

Uninstalling Nordy removes this data from your device. Depending on your settings, a copy may exist in your own iCloud or iTunes device backup, which is controlled by you and by Apple, not by us.

4. What can leave your device, and only when you choose it

4.1 Signing in with Apple

Sign in with Apple is the only account Nordy offers. If you choose it, you are sent to Apple to authenticate. We never receive your Apple ID password.

• We receive the identifier Apple issues for you, and the name and email address you approve. If you use Apple's Hide My Email, we only ever see the relay address.
• Apple sends the name and email only the first time you authorize Nordy; later sign-ins return only the identifier.
• What Nordy receives is stored on your device and used only to identify your account inside the app. Nothing is sent to a Nordy server, because there is none.
• Your password for your Apple ID, and any reset of it, is handled entirely by Apple. Nordy never sees it and has nothing to reset.

Your use of Sign in with Apple is governed by Apple's own privacy policy.

You can also continue as a guest, in which case no account of any kind is created and nothing in this section applies.

4.2 Purchases

Subscriptions and any other purchases are processed by Apple through the App Store. Nordy never receives, handles, or stores your payment card, billing address, or Apple ID credentials. We receive only the entitlement status needed to unlock paid features. Apple's handling of your purchase is governed by Apple's privacy policy.

4.3 Diagnostics

Nordy ships no third-party analytics or crash-reporting SDK. Product events exist in the code as named milestones but are written to the developer console in development builds only and are silent in the version you download. Nothing is transmitted.

If we later add analytics or crash reporting, we will update this policy, name the provider, and — where the law requires consent — ask you first.

5. Notifications

Nordy's reminders are local notifications scheduled on your device by the app itself. They are not push notifications, we do not operate a push server, and no notification content is transmitted to us. You can revoke notification permission at any time in iOS Settings, and you can turn individual reminders off inside Nordy.

While a Focus session is running, Nordy cancels its own reminders so they do not interrupt you, and restores them when the session ends. Nordy cannot silence notifications from other apps; only your device's Do Not Disturb or Focus settings can do that.

6. The Ward and Screen Time data (important)

Nordy's Ward uses Apple's Family Controls, Device Activity and Managed Settings frameworks to help you shield distracting apps.

By Apple's design and requirement:

• The apps and categories you select are represented to Nordy as opaque tokens. Nordy cannot read which specific apps you chose, cannot see their names, and cannot enumerate what is installed on your device.
• Screen Time and Device Activity information never leaves your device, is never transmitted to us, and is not used for any purpose other than operating the Ward feature you enabled.
• We do not use this data for advertising or profiling, and we do not share it with anyone.

Granting Screen Time authorization is entirely your choice, and you can withdraw it at any time in iOS Settings, which disables the Ward.

The Ward is a self-control aid, not a security control. It is subject to the limits of Apple's frameworks and of your device's settings, and it can be turned off by anyone who can unlock your device. Do not rely on it as a safety mechanism for anyone else.

7. Legal bases for processing (EEA and UK)

Where the GDPR or UK GDPR applies, we rely on:

• Performance of a contract (Art. 6(1)(b)) — providing the features you asked for.
• Legitimate interests (Art. 6(1)(f)) — keeping the app secure and preventing abuse. We have balanced this against your rights and it is limited to what is necessary.
• Consent (Art. 6(1)(a)) — where you grant notification or Screen Time permission, and for any future optional processing. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)) — where we must retain or disclose information by law.

Because your content stays on your device and we operate no server, almost everything you do in Nordy involves no processing by us at all.

8. Canadian privacy law (PIPEDA)

We are a Canadian company, so the Personal Information Protection and Electronic Documents Act (PIPEDA) applies to us directly, alongside the substantially similar provincial laws in Alberta, British Columbia and Quebec.

Our practices follow PIPEDA's ten fair information principles. In particular:

• Accountability. SIXSIDE MARKETING INC. is accountable for the personal information under its control. Our contact for privacy matters is nordydevapp@gmail.com.
• Identifying purposes and limiting collection. We operate no server. The only personal information that reaches Nordy is what Apple hands back when you sign in with Apple, and it stays on your device. We do not collect your habits, focus history, streaks or Screen Time selections.
• Consent. You sign in with Apple knowingly, when you choose to. Nordy can be used without an account, and no personal information is involved in that case.
• Limiting use, disclosure and retention. We do not sell, rent or trade personal information, and we do not use it for any purpose beyond those described in this policy. Deleting your account removes it from your device (section 10).
• Accuracy, safeguards and openness. You may change your display name at any time; safeguards are described in section 9; this policy is the openness requirement.
• Individual access and challenging compliance. You may ask us what we hold about you — in practice, nothing, since there is no server — and you may challenge our handling of it, using the address above.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca, or to your provincial privacy commissioner. Exercising this right costs you nothing and does not affect your use of Nordy.

9. How we protect information

• Nordy stores no password, in any form. Sign in with Apple means Apple holds your credential; Nordy only ever receives an opaque account identifier.
• Data in transit for Sign in with Apple and for purchases uses HTTPS/TLS, handled by Apple's own frameworks. The app ships with App Transport Security enabled and does not permit arbitrary insecure loads.
• Nordy requests no microphone, camera, contacts, photos, precise location, or health data, and declares no such permissions.

No method of storage is perfectly secure, and we cannot guarantee absolute security. Because your data lives on your device, the security of your device — its passcode, biometrics, and backups — is the most important protection, and it is under your control.

10. Retention

On-device data is retained until you delete it in the app or uninstall Nordy.

There is no account record held on a server. Settings → Delete account erases your account and everything on it from your device; it is not recoverable afterwards. If you later sign in with Apple again, a fresh account is created.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal information, to data portability, and to withdraw consent. Residents of California and other US states with comparable laws may have rights to know, delete, correct, and to opt out of sale or sharing — we do not sell or share personal information, and we do not process it for cross-context behavioural advertising. We will not discriminate against you for exercising any right.

For most data, you can exercise these rights directly and immediately:

• Delete everything — Settings → Delete account, inside Nordy, which erases your account and all app data from the device.
• Correct or export — edit any entry in the app; contact us if you need an export.

For anything else, contact nordydevapp@gmail.com. We will respond within the period required by applicable law (generally one month under the GDPR, 45 days under California law). You also have the right to complain to your local supervisory authority; in the UK this is the Information Commissioner's Office.

12. International transfers

The only information that leaves your device goes to Apple — when you sign in with Apple, and when you make a purchase. Apple's processing, including any cross-border transfer, is governed by Apple's own privacy policy and safeguards. We transfer nothing ourselves, because we operate no server.

13. Changes to this policy

We may update this policy. If a change materially affects how your information is handled, we will raise it in the app before it takes effect and update the date at the top. Continuing to use Nordy after a change means you accept the updated policy.

14. Contact

SIXSIDE MARKETING INC. 5 Sheppard Avenue West, Toronto, Ontario M2N 0G4, Canada

nordydevapp@gmail.com