Privacy Policy

This Privacy Policy explains how CETUX LAB TECNOLOGIA LTDA., CNPJ 64.376.133/0001-40, Brazil (Cetux Lab, we, us, or our) handles personal information in connection with getnotchnook.com, the NotchNook application, and our communications (together, the Services).

NotchNook is published under the lo.cafe brand by lo.cafe Ltda., a company of the Cetux Lab group. Cetux Lab is the parent company and is the controller of the personal information described in this Policy.

1. Scope

The Services provide product information, downloads, help content, purchases, licences and subscription management. Payments are handled by a third-party payment processor, which acts as an independent controller for payment data; we never receive or store full card details. We update this Policy before enabling a material new data-processing activity.

2. Information we process

Depending on how you use the Services, we may process:

• Information you provide: your name, email address, the contents of messages, and any files or information you send to us.
• Purchase and licence information: the email address used at checkout, the licence key issued to you, the plan purchased, the Macs a licence is activated on (identified by a device identifier generated for that purpose), and the records our payment processor returns to us, such as amount, currency, country, payment status and refund status.
• Licence validation: the application contacts our server to confirm that a licence is valid. A licence stays valid offline for up to 30 days between checks.
• Technical and security information: IP address, device and browser information, operating-system version, approximate location derived from IP, request time, pages or endpoints requested, and security or diagnostic logs.
• App diagnostic information: if you choose to send support information, information reasonably necessary to investigate the issue, such as the app version, macOS version, and error details.

Please do not send sensitive personal information unless it is necessary and requested for a specific support matter.

3. How we use information

We use information to:

• provide, secure, operate, and improve the Services;
• process purchases and subscriptions, issue and validate licences, apply the device limit of each licence, and handle refunds, cancellations and payment disputes;
• respond to requests, support inquiries, and legal notices;
• detect, investigate, and prevent fraud, abuse, security incidents, and technical problems;
• comply with legal obligations and enforce our Terms; and
• establish, exercise, or defend legal claims.

Automatic in-app activation is available only for licences purchased through the new checkout from 24 September 2026 onward. Purchases through the previous store require an individual support review; old keys and subscriptions do not migrate automatically.

4. Legal bases

Where a legal basis is required, we process personal information with your consent, to take steps you request or perform a contract, to comply with a legal obligation, or for legitimate interests such as service security, fraud prevention, support, and improvement. We balance those interests against your rights and expectations.

5. Cookies and similar technologies

The public website is designed to operate without advertising or sales tracking. Essential technical mechanisms may be used for security, load balancing, error prevention, and basic operation. We will update this Policy before introducing non-essential analytics, advertising, or similar tracking technologies.

6. Sharing

We share information with the categories of service providers that operate the Services on our behalf:

• payment and billing providers, which process purchases, subscriptions, refunds and payment disputes;
• hosting and infrastructure providers, which run the website, the licensing service and its database;
• email delivery providers, which send licence and support messages.

These providers are bound by contract or by law to use the information only as needed to provide their service. We may change providers within these categories; the categories themselves are what this Policy describes.

We may also disclose information when required by law, to protect rights or safety, or in connection with a corporate transaction, subject to applicable law.

We do not sell personal information and do not use it for cross-context behavioral advertising.

7. International transfers

Your information may be processed in Brazil, the United States, and other countries where our service providers operate. Where required, we use appropriate safeguards for international transfers.

8. Retention

We keep information only as long as reasonably necessary for the purposes described above. Purchase and licence records are kept for as long as the licence is valid and afterwards for the period required by accounting and tax obligations, and for the resolution of disputes. Other information is kept according to its purpose and context. We may retain de-identified or aggregated information where permitted by law.

9. Security

We use reasonable technical and organizational measures designed to protect personal information. No system or transmission is completely secure, and we cannot guarantee absolute security.

10. Your rights

Subject to applicable law, you may request access to, confirmation of, correction of, deletion of, anonymization or blocking of unnecessary or excessive information, portability, information about sharing, withdrawal of consent, and review of certain automated decisions. You may also object to processing in circumstances permitted by law.

To make a request, email privacy@getnotchnook.com. We may need to verify your identity and may retain limited information where required or permitted by law, including records we must keep for tax purposes.

For individuals in Brazil, these rights are addressed under the Lei Geral de Proteção de Dados (LGPD). You may also lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD). Rights under other applicable laws, including the GDPR or U.S. state privacy laws, are preserved where they apply.

11. Children's privacy

The Services are not directed to children. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information to us, contact us at the address below.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and revise the effective date. Material changes will be communicated by an appropriate method when required by law.

13. Contact

Controller: CETUX LAB TECNOLOGIA LTDA.
CNPJ: 64.376.133/0001-40
Group company: lo.cafe Ltda., publisher of NotchNook
Country: Brazil
Email: privacy@getnotchnook.com