Nowly

Privacy Policy

Your rhythm, on your terms

Effective date: 2026-08-06 | Last updated: 2026-09-10

This Privacy Policy applies to the Nowly mobile app (Nowly: Clock, Focus & To-Do; “Nowly”, “we”, “us”). Please read it before using Nowly. You may choose whether to provide optional information or grant system permissions; declining optional processing does not affect unrelated core features.

1. Who We Are

Nowly is developed and operated by SwiftPass Technologies Co., Ltd., registered at Rooms 5401 & 5402, 5/F, Block A, Building 2, Shenzhen Bay Innovation & Technology Center, No. 3156 Keyuan South Road, High-Tech Zone Community, Yuehai Sub-district, Nanshan District, Shenzhen, China. We are the controller of personal information under this policy.

2. Information We Process

We follow the principles of lawfulness, fairness, necessity, and data minimization, and process only information needed to provide and protect the Service.

2.1 Information you provide or create

Information	Purpose	Required?
Email address, verification codes, and password	Registration, sign-in, identity verification, email changes, password setup/reset, and account-security notices. Passwords are handled securely by our authentication service; we do not store or view plaintext passwords	Required for email accounts
Nickname and dial avatar	Create and display your profile; the avatar is selected from in-app dials you own	Nickname is needed for profile setup; avatar is optional
Task names, icons, tags, schedules, and to-do content	Planning, clock display, statistics, achievements, reminders, widgets, wallpapers, and cross-device sync	Needed for the relevant features
Language, reminder times, custom tags, time zone, equipped dial, and other preferences	Save settings, generate reminders, settle achievements, and keep devices consistent	Needed for the relevant features

2.2 Third-party account information

When you choose Sign in with Apple on a supported device, Apple provides an Apple user identifier and, with your authorization, your name and email address (which may be an Apple private relay address). We use these details to create, identify, or link your Nowly account. You decide whether to share your real email on Apple’s authorization screen.

2.3 Information generated through use

Information	Purpose
Account identifiers, identity-provider links, session tokens, and login state	Keep you signed in, synchronize data, and authorize operations. Session information is stored locally by the app and CloudBase SDK
Product ID, platform, transaction/order identifier, purchase time, displayed price, purchase credential, and dial entitlements	Validate non-consumable purchases with Apple App Store or Google Play, grant and restore entitlements, and prevent one purchase from being bound to multiple active accounts
Crash time/type, error name/message/stack, app version/build, OS version, device model, platform, JavaScript engine, and launch count	Diagnose crashes and improve stability. If you are signed in, the server may associate a report with your account. Error text could theoretically include user input being processed at the time
Random installation identifier, ActivityKit push tokens, task identifiers, and up to seven days of Live Activity schedules and display content	On iOS 17.2+, when you are signed in and the system supplies a token, use APNs to start, update, or end Live Activities while the app is not running

2.4 On-device processing and permissions

Task-start and daily reminders are scheduled as local notifications; the operating system stores and displays their content.
Snapshots used by widgets, Shortcuts, and wallpapers remain on the device or in a system app-group container. Live Activities may use remote push only in the circumstances above.
Only when you tap “Save image” for a founder dial certificate do we request add-only Photos access and save an image generated by the app. We do not read your photo library.
We do not record audio or request microphone capture permission; the audio component only plays app sounds.

No advertising tracking: Nowly does not include third-party advertising or behavioral analytics SDKs. We do not collect precise location, contacts, microphone content, or cross-app tracking identifiers such as IDFA, and we do not sell personal information.

3. How We Use Information

Create and manage accounts, including sign-in, verification codes, passwords, and identity-provider linking;
Provide planning, sync, statistics, achievements, dials, widgets, notifications, wallpapers, and Live Activities;
Validate purchases or official redemption transactions and grant, sync, or restore digital-item entitlements;
Troubleshoot issues, protect security, prevent fraud and abuse, and comply with legal obligations.

We do not use personal information for advertising profiles or automated decisions producing legal effects. Depending on applicable law, our legal bases include performing our contract with you, consent, legal obligations, and legitimate interests in service security.

4. How We Share Information

We do not sell personal information. We disclose it only as necessary to the following recipients or processors:

Recipient	Purpose	Information involved
Tencent Cloud / CloudBase (mainland China)	Authentication, database, cloud functions, sync, verification emails, purchase-verification support, Live Activity dispatch, and crash diagnostics	Account data, user content, settings, entitlements, diagnostics, and Live Activity data
Apple (Sign in with Apple, App Store, StoreKit, APNs)	Apple sign-in, purchases/redemptions/refunds, purchase validation, and Live Activity delivery	Apple sign-in identifiers, purchase/product details, push tokens, and Live Activity payloads
Google (Google Play, on Android)	Process and validate in-app purchases, refunds, and restoration	Product, order, and purchase-token details

We may also disclose information when required by law, legal process, or a lawful request from a competent authority. Third parties process information they independently obtain under their own terms and privacy policies.

5. Storage & International Transfers

Nowly’s account, sync, entitlement, and diagnostic backend is hosted on Tencent Cloud in mainland China. If you use Nowly outside mainland China, relevant information is transferred to mainland China. When Apple or Google login, store, purchase-validation, or push services are used, necessary information is also processed through those providers’ global infrastructure under their privacy policies and may cross borders. We use encrypted transport, access controls, and applicable transfer safeguards required by law.

6. How We Protect Information

Network traffic uses HTTPS/TLS; passwords are verified irreversibly by the authentication service and are not stored in plaintext;
Backend controls include authentication, least privilege, row-level access controls, and server-side receipt validation;
Administrative secrets are not shipped in the app; crash reports are available only to restricted operations personnel;
No measure is absolutely secure. If an incident requires notice by law, we will provide the required notice.

7. Retention

While your account is active, we retain account data, user content, preferences, and entitlements needed for the Service. After successful account deletion, associated business data is deleted or anonymized, generally beginning immediately and completed within 30 days, except transaction, tax, dispute, or other records that law requires us to retain.
Crash reports are retained for up to 30 days. Reports linked to your account are deleted with the account; signed-out reports cannot be linked to a particular user and expire under the 30-day schedule.
Live Activity tokens and schedules are cleared on sign-out/account deletion, when replaced, or when no longer needed.
To securely restore non-consumable purchases and prevent duplicate claims, after account deletion we retain an irreversible HMAC hash of the transaction identifier, the product, platform, and released status. This record contains no Apple ID, Google account, original transaction number, or deleted-account identifier and is kept only as long as needed for those purposes or legal obligations.

8. Your Rights

Access and correction: view or edit your nickname, dial avatar, email, and relevant settings in the app;
Deletion: delete tasks, or delete your account and associated data under “Account → Delete Account”;
Withdraw permissions: turn off notifications, Live Activities, or add-only Photos access in system settings; withdrawal does not affect prior lawful processing;
Submit a request: contact us to request access, a copy, correction, deletion, restriction or objection, and where applicable portability or a complaint to a regulator.

Users in China have rights under the PIPL; users in the EEA/UK have rights under the GDPR; and California users have rights to know, delete, correct, and be free from discrimination under the CCPA/CPRA. We do not sell or “share” personal information for cross-context behavioral advertising. We may verify your identity before responding to protect your account.

9. Children’s Privacy

Nowly is not directed to children under 14 (or a higher minimum age required by applicable law). We do not knowingly collect such children’s personal information. Contact us if you believe this has occurred.

10. Policy Changes

We may update this policy. We will give prominent in-app or other notice of material changes and request renewed consent where required. The “Last updated” date above identifies the latest version.

11. Contact Us

For questions, requests, or complaints about this policy or personal information, contact:

Email: ainative@swiftpass.com
Entity: SwiftPass Technologies Co., Ltd.