Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Suraj Kumar Giri
Email: devkeyapps@gmail.com

2. What the app does not do

• It has no account and no login.
• It contains no analytics, tracking, advertising or crash-reporting services, and no third-party software that sends data.
• It does not use an advertising identifier (IDFA) and does not ask for App Tracking permission.
• It does not access your location, contacts, photos, camera or microphone.
• We receive no data about your learning, so we cannot pass it on or sell it.

All questions, explanations, translations, scenes, traffic signs and the glossary are inside the app. Practice, simulations, trainers, flashcards, listen mode and widgets work offline.

3. What is stored on your device

• What: your answers, simulations, flashcard ratings, bookmarks, the date and result of your real test if you enter them, your streak, achievements and your settings (for example language, licence class, exam date, daily goal, reminder time).
• Where: in the app's storage on your device. Once a day the app also copies your progress there and keeps the copies of the last seven such days. So that the widgets can show your progress and the question of the day, part of it sits in a shared app storage (an app group) used by the app and its widgets. Only the app and its widgets on this device read it.
• Backups: like the data of other apps, your progress can be part of a backup of your device (iCloud Backup, a backup made through a computer, Time Machine on a Mac) if you have turned one on. The operating system does this. The backup lives in your own Apple account or on your own computer, not with us. The app's own iCloud sync, which you turn on yourself, is separate from this (section 4).
• Export file: if you choose "Export progress", a file with your learning history is created. It stays wherever you save or send it. Treat it like any other personal file.
• Deleting: in the app under Profile › Settings › Your data › "Reset all progress", or by deleting the app. A reset deletes your progress and the app's daily copies on this device at once. With iCloud sync on, a reset applies to all your devices: there the progress is removed as soon as the reset arrives, and the app's daily copies on those devices are replaced one by one on the next seven days you open the app there (deleting the app on a device removes them immediately). Backups you made earlier remain until you delete them. Deleting the app removes nothing from iCloud (section 4).

4. iCloud sync (optional)

With iCloud sync you study on iPhone, iPad and Mac with the same progress, as long as the devices are signed in with the same Apple Account. It is off until you turn it on yourself: Profile › Settings › Sync › "iCloud sync". The app asks first, and the line under the switch tells you what is happening.

• Where: in your own private iCloud database (Apple CloudKit), under your Apple Account. It counts towards your iCloud storage. Apple provides it, under Apple's privacy policy. We, the developer, have no access to it: we cannot see it, read it or delete anything in it. There is no server of ours.
• Legal basis: the transfer to your iCloud happens only at your request, to provide the sync to you (Art. 6(1)(b) GDPR). Apple is responsible for storing it in iCloud under your iCloud terms.
• What is synced: your answers, flashcard ratings, finished simulations, your real test dates and results, bookmarked questions and the settings that belong to you: licence class, your language and how it is shown, the exam language, the 2027 preview, exam date, daily goal, answer shuffling, what happens after a correct answer, and how much of Nori you want to see. Each entry carries a time and a random code that the app creates for each device, so that changes arrive in the right order. The code says nothing about you or your device.
• What stays on the device: reminders and their time, sound, haptics, reading aloud, listening speed, text size, appearance, the flashcard controls, one-time hints, a practice session or simulation you have started, and the result of the Apple Ads request (section 5). Each device works out your streak, readiness and achievements from your answers itself.
• Turning it on: what is already on the device is added to what is in your iCloud. Nothing is lost or counted twice.
• Turning it off: at any time, in the same place. Your progress stays on the device, and your other devices keep what they already have. What is in iCloud stays there until you delete it.
• Reset and import: with sync on, they apply to all your devices. The app tells you so before you confirm.
• Deleting from iCloud: you delete everything Nori has stored in your iCloud in the Settings app: your name › iCloud › "Storage" or "Manage Account Storage" › Nori; on a Mac in System Settings › your name › iCloud › Manage. Sync then turns itself off on your devices, and the progress on them is kept.
• Signals between your devices: so that a device learns about changes on your other devices, iCloud sends the app silent signals through Apple's push service. They do not appear as notifications, and we send nothing through them.

5. The one request of its own: Apple Ads attribution

This is the only network request the app makes of its own; iCloud sync (section 4) runs only if you turn it on. The request exists to find out whether an install came from an ad in Apple Ads.

• When: on first launch. If Apple's record is not ready yet (this can happen shortly after an install) or you are offline, the app repeats the request on later launches, eight attempts in total at most. After Apple has answered, it never asks again. If your device does not produce a token, the app sends nothing.
• What is sent: a single token that iOS generates for this purpose (Apple AdServices). We add nothing: no learning data, no identifier of ours, no advertising identifier. What iOS puts into the token is up to Apple. The request goes straight from your device to Apple's server (api-adservices.apple.com), not to us.
• What comes back: Apple answers whether the install is attributed to an Apple Ads campaign. If it is, the answer includes campaign details (campaign, ad group and keyword numbers, country or region, click date, download or re-download).
• What the app does with it: it stores the result once on your device. It is not linked to your learning progress and is not sent to us or to anyone else.
• Also read locally: the app reads the country of your App Store account from iOS and, only if the install was attributed to an ad, the original purchase date of the app (StoreKit). That tells a new purchase from a reinstall. These are operating-system queries; the app sends these details nowhere.

The app states the same thing under Profile › Settings › Privacy: "This app makes one request of its own: Apple's ad attribution check on first launch. With iCloud sync on, your progress also goes to your own private iCloud storage. Nothing else leaves your device."

6. Purchase

You buy Nori in the App Store. Apple processes payment and account data; we do not receive them. Like every developer, we receive summarised sales and usage reports from Apple (for example downloads by country). Usage statistics come only from people who agreed in their device settings to share app analytics with developers. These reports do not identify you.

7. Notifications and speech

• Reminders are optional: one a day at your time, and two before your test date. The app asks for permission to send notifications only when you turn reminders on. They are scheduled locally on your device. There is no push server of ours.
• Reading aloud and listen mode use the voices on your device. The audio is produced on the device; nothing is sent for it.

8. Links you tap

Some places in the app open another app or page when you tap them: your email app ("Email support"), the browser (the law references under an explanation, which open gesetze-im-internet.de, and this support and privacy site) or the share sheet (export). After that, the rules of that app or page apply.

9. If you write to us

"Email support" opens your email app with the app name and version in the subject. Nothing is sent automatically. If you send the email, we receive your email address and your text. We use them to reply (Art. 6(1)(f) GDPR) and delete them when we no longer need them.

10. This website

These pages set no cookies and load no fonts, scripts or images from other servers. Like any web server, the server processes technically necessary connection data when you visit (among other things IP address, time, page requested, browser details) in log files. They serve the operation and security of the website (Art. 6(1)(f) GDPR). Hosting: Vercel Inc., USA.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can complain to a data protection supervisory authority (Art. 77). Write to us at devkeyapps@gmail.com. You delete the data in the app and in your iCloud yourself (sections 3 and 4); we do not hold it.

12. Changes

If what data the app or the website processes changes, we will update this policy. The date at the top shows the current version.