Narak Privacy Policy

1. Scope and controller

Narak is responsible for privacy requests about information processed outside a user's device through Narak websites, support channels, and store operations.

Privacy, support, and legal requests can be sent to contact@narak.app.

2. Data we may process

• Website technical data such as IP address, timestamps, browser and device metadata, country-level routing headers, URLs, referrers, and filtered query parameters.
• Optional analytics data after consent, including aggregated page views and a sanitized traffic-source event.
• Support and privacy request data such as sender email address, message content, attachments, app version, device model, and troubleshooting details that the user chooses to send.
• Store and purchase information processed by Apple App Store, Google Play, RevenueCat, or similar purchase validation tools when an app uses paid features.
• Local-first app data that stays on device unless a user chooses backup, export, support attachment, cloud/platform feature, or another transfer outside the app.

3. Cookies, storage, and analytics consent

Narak uses a necessary consent cookie to remember privacy choices. Language preference storage is optional. Analytics and traffic-source events stay off until analytics consent is granted.

Vercel Web Analytics is implemented as an optional analytics tool. Narak removes sensitive query parameters before analytics page-view events are sent and sends only sanitized custom event properties.

4. How we use data

• Operate, secure, localize, debug, and maintain Narak websites and product pages.
• Honor privacy choices, language preferences, and data-rights requests.
• Understand aggregate site traffic only after analytics consent.
• Respond to support, purchase, security, legal, and privacy messages.
• Comply with legal obligations, enforce terms, prevent abuse, and protect rights, safety, and security.

5. Sharing and service providers

Narak does not sell personal information and does not use site analytics for cross-app tracking or behavioral advertising.

Service providers may process data for hosting, security, analytics after consent, email, support, app stores, billing, purchase validation, and operational recordkeeping.

6. App stores and mobile apps

Each mobile app privacy policy describes app-specific local data, paid features, support, and third-party providers.

Apple App Privacy and Google Play Data Safety disclosures must match the released app build and all SDKs included in that build. If an app's behavior changes, those store disclosures must be updated before or with the release.

7. Retention, security, and incidents

Privacy choices are retained for up to 180 days. Language preference cookies are retained for up to 365 days when allowed. Analytics session deduplication uses sessionStorage and expires with the browser session.

Support and privacy request records are kept only as long as needed for support, legal compliance, security, dispute handling, and operational recordkeeping.

Narak uses reasonable administrative, technical, and organizational safeguards. If a security incident creates a relevant risk or harm to individuals, Narak will assess notification duties under applicable law, including LGPD and GDPR where applicable.

8. International processing

Website, support, analytics, email, store, and infrastructure providers may process data in Brazil, the United States, the European Union, or other countries. Where required, Narak uses reasonable transfer safeguards.

9. Rights and choices

Depending on your location, including Brazil under the LGPD and the European Economic Area under GDPR, you may request confirmation, access, correction, deletion, portability, anonymization, restriction, objection, information about sharing, or consent withdrawal for personal data Narak controls. Contact contact@narak.app.

You can manage optional website analytics and preference storage at /privacy-choices.

10. Changes

Narak may update this policy when products, laws, store rules, providers, or practices change. Material updates will be reflected by the Last updated date.