Privacy Policy of Nova Launcher

EFFECTIVE DATE: 2026-03-03

Nova Launcher is operated by Instabridge Sweden AB following an acquisition. As part of this change, information described in this policy may be transferred to the new owner for the purposes described here.

About this Privacy Policy

We value your privacy and want to be accountable and fair to you, as well as transparent with you with regard to our processing of your personal data. This Privacy Policy therefore provides comprehensive disclosure of potential scenarios in which personal data may be collected, used, or shared. This is intended to ensure transparency and to cover all relevant circumstances. We nonetheless make every effort to minimise the collection and use of personal data, and we rely on aggregate and/or de-identified data wherever possible.

General Information

Instabridge, a Swedish company, provides the app Nova Launcher as a Service. The regulatory framework for the Services (defined below) consists principally of the General Data Protection Regulation (“GDPR”) as well as various legal acts ancillary to the GDPR as well as local laws and regulations that are applicable in jurisdictions where the Services are provided. The Privacy Policy reflects our commitments and undertakings as further outlined below.

If you reside within or outside the European Union, European Economic Area and Switzerland (“Europe”), you are entering into the Terms of Service with Instabridge Sweden AB and the terms of this Privacy Policy apply to you.

For information on our processing of personal information that is subject to the California Consumer Privacy Act (“CCPA”), please see Annex A – Supplemental CCPA Privacy Notice.

This Privacy Policy (“Privacy Policy”) describes how and when we may collect, use, secure, and share personal information collected in connection with our mobile applications, websites, content, products, and any related services (collectively, the “Services”), and your choices regarding our processing of that information. For the purposes of this Privacy Policy, “Instabridge”, “we”, “us”, or “our” refers to Instabridge Sweden AB, company reg. no. 559246-0538, and its subsidiaries, representatives, and affiliates including, our websites, applications, and other offerings that link to this Privacy Policy or otherwise make it available to you. We are the data controller of the personal data that we collect from you when using the Services, except if explicitly stated otherwise in this policy.

If you provide us with personal information about someone else, you hereby confirm that they are aware that you have provided their personal information to us, and that they consent to our use of their personal information according to this Privacy Policy.

Please read this Privacy Policy carefully. This document contains a policy statement regarding our collection, use and processing of personal data, with whom we may share your personal data and your rights in relation to your personal data. It also tells you what to expect when we collect and use personal data about you that you share with us when using our Services.

Please note that this notice does not apply to third party products or services or the practices of companies that we do not own or control, including other companies you may interact with, in or through Instabridge and/or Nova Launcher. We will not be responsible or liable for: (i) the availability or accuracy of such third-party apps or sites (ii) the content, products or services on or availability of such third party apps or sites; or (iii) your use of any such third party apps or sites.

We may update the Privacy Policy from time to time by posting a new version on novalauncher.com with an updated date (the “Effective Date”). Your continued use of the Services after the Effective Date will be an acknowledgement of your acceptance of the amended Private Policy and our updated practices. If we make material changes to our privacy policy, we will notify you and ask you to confirm your consent.

If there is any difference between the English version and any other language version of this Privacy Policy, the English version will apply (to the extent permitted by applicable law or regulation).

Information We May Collect and How We Collect It

We may collect various types of personal information, including information you provide or make available to us directly, information collected from your devices (including on web and mobile), and information collected from other sources, such as social networking sites. Some of this information may be considered “personal information” or “personal data” under applicable laws or regulations. We collect this information for various purposes including to provide and improve our Services to you.

Types of Data Collected

Personal Information you provide:

If you decide to create a user account on Instabridge services, including Nova Launcher, we will request certain personal information from you, which may include

You also provide us with personal information directly when you:

Depending on how you choose to use the Services, you may provide us with the following types of personal information:

Personal Information Collected or Generated When You Use our Services:

When you access or use our Services, we collect certain personal information from and about you and the device(s) you use. Depending on how you use the Services, this may include the following personal information:

If you have connected your user account with us to a third party application, we may receive similar information related to your interactions with the Service from such channels.

How we store your personal information

We store your personal information on industry standard servers, including through the use of the following third parties:

Personal Information Collected Using Cookies and Similar Technologies

We and our partners use various tools to collect personal information when you visit our sites and Services, including cookies, pixels, software development kits, advertising identifiers, and other similar technologies. Some of these technologies store information in the browser or on your device. Other technologies may use network-related or other information to recognize your device (e.g., IP address). Our Services use these technologies, for example, when you first request a web page, and information is then stored on your computer or other device so the website or app can access information when you make subsequent requests for pages from that Service.

Examples of Cookies we may use on our website and their purposes:

At any time, you can control the use of cookies by adjusting the settings on your browser. However, if you choose to disable some or all cookies, please note that by blocking any or all cookies, you may not have access to certain features, content, or personalization available through our Services.

If you have any questions or comments about our use of cookies, please contact privacy@novalauncher.com.

Other personal information collected using tracking technologies

Depending on the Services you use and your consent settings, we and our partners may also use these technologies to gather information about how you view and use our Services and content, and to connect your activity with other personal information we store about you. Some of these partners include:

Legal Basis for Processing Personal Information

Our legal basis for collecting and using your personal information will depend on the type of information and the context in which we collect it. In general, we collect personal information from you only:

If you have questions about the legal basis on which we collect and use your personal information, please contact us at privacy@novalauncher.com.

How We Use Personal Information

To manage our relationship and provide the Services in a satisfactory and error free manner, we need to process your data, including personal data. For example, we process your data when you create an account, if you contact our customer support team, for maintenance of the app, and for marketing purposes. If you do not provide us with certain personal information, we will not be able to provide you with the Services. Please find more detailed information on how we process your data when we manage our relationship, below.

We may use the personal information we collect for a number of business and commercial purposes, including to:

Further information with regard to ads personalisation

We display ads in Nova Launcher to help keep the product free and to support maintenance and development costs. By allowing us to process your personal data for personalised advertising, you help support Nova and allow us to continue providing and improving the app.

Please keep in mind that opting out of personalised advertising will not stop all ads from being displayed to you (i.e. opting out does not provide an ad-free experience). You can disable personalised advertising in your device settings. Additionally, you may have the option to opt out of personalised ads from advertisers and ad networks that participate in the Network Advertising Initiative, or adhere to the DAA Self-Regulatory Principles for Online Behavioral Advertising, by using their provided opt-out tools.

Use of aggregated or anonymised data

We may use your non-personal information data in an aggregated and/or anonymised form to share publicly and to third parties, for example, in reports on use trends, to partners under agreement with us, or as part of community benchmarking. Data shared in this manner cannot reasonably be used to identify you as an individual. If we create or receive de-identified information, we will not attempt to reidentify such information, unless permitted by, or required to comply with, applicable laws.

How And To Whom We Disclose Personal Information

Subject to your legal rights, we may disclose the information we collect about you, and/or may enable you to share this information, with a third parties in various ways, including:

Instabridge Sweden AB works with Branch, a third-party partner, to provide personalised content and advertisements. By using this service you acknowledge that Branch may collect and use your data in accordance with their Privacy Policy, https://legal.branch.io/discovery/discovery-privacy-policy/ and Terms and Conditions https://legal.branch.io/discovery/discovery-terms-conditions/ . Users who would like to exercise their rights to opt out of processing by Branch may visit the Branch privacy portal https://preferences.branch.io/ to submit a request. Branch provides additional information about opt-out requests on their opt-out page https://legal.branch.io/saas/privacy-opt-out/ .

Instabridge Sweden AB requires third parties to take appropriate organizational and technical safety measures to protect personal information, and to observe applicable legislation.

Your Rights and Choices

GDPR applies to collection and processing of personal information for end users in the EU and EEA. In accordance with GDPR and other applicable privacy laws and regulations (including those in the United States) you may have the following rights:

Please note that these rights are not absolute. We may decline requests to exercise your data subject rights if there is a valid reason—such as being unable to verify your identity, the request potentially infringing on a third party’s rights or applicable law, or if fulfilling the request could disrupt our Services or prevent us from providing a requested service

In addition to the rights described above, if we have collected and processed certain types of personal information with your consent, you may withdraw that consent at any time in the manner described when you provided consent. Withdrawing your consent will not affect the lawfulness of any processing conducted prior to then, nor will it affect any processing based on lawful grounds other than consent.

If you are unhappy with our processing of your personal data and/or consider it to be in contrary to applicable legislation you may have the right to lodge a complaint with a competent supervisory data protection authority (“DPA”) (such as with the DPA in your country of residence, the DPA in the country of your place of work or the DPA in the country where the alleged infringement has occurred). In Sweden, the supervisory authority is the Swedish Supervisory Authority for Privacy Protection (“Integritetsskyddsmyndigheten”).

We will cooperate with the appropriate governmental authorities to resolve any privacy-related complaints that cannot be amicably resolved.

To exercise the aforementioned rights please contact us at the following address: privacy@novalauncher.com or Instabridge Sweden AB, Box 190, 101 23 Stockholm. In order to ensure that you receive a swift response, please state in your letter your full name and, if applicable, your address, user name and the email address used for registration, and the user id associated with your account.

We may request you provide us with information necessary to confirm your identity before responding to any request you make. Examples of our verification process may include asking you to confirm the email address, account ID or device id we have associated with you.

Only you, or someone legally authorized to act on your behalf in certain jurisdictions, may make a request to exercise the rights listed above regarding your personal information. If your personal information is subject to a law that allows an authorized agent to act on your behalf in exercising your privacy rights and you wish to designate an authorized agent, please provide written authorization signed by you and your designated agent using the information found in “How to Contact Us” below and ask us for additional instructions.

Some laws may allow you to appeal our decision if we decline to process your request. If applicable laws grant you an appeal right, and you would like to appeal our decision with respect to your request, you may do so by informing us of this and providing us with information supporting your appeal.

Data Retention

We will keep your personal data for as long as you have an account in the Services or for as long as we need to keep any personal data to comply with our legal obligations, resolve disputes, or enforce our agreements. After this your personal data will be deleted.

Data deletion requests

You can request deletion of your data directly by contacting us via email. To request data deletion, send an email to privacy@novalauncher.com with your deletion request clearly stated, and our team will process your request in accordance with applicable privacy laws.

Use By Minors

Our Services are designed for a general audience and require all users to be above the minimum age to consent for data processing as a condition of access. By installing or using our Services you represent and warrant to us that you are above the minimum age to consent for data processing in your domicile.

If you are a parent or guardian of a minor, and believe that minor has uploaded personal information in connection with our Services without your consent, or if you wish to review personal information collected from your minor child, or have that information modified or deleted, you may contact us as described in “Contact Us” below. If we become aware that a minor has provided us with personal information in violation of applicable law, we will use reasonable efforts to delete any personal information we have collected, unless we have a legal obligation to keep it.

International Transfers of Your Personal Data

If you are located in the European Union (“EU”), United Kingdom (“UK”) or Switzerland then we may transfer personal data that we collect from you to third party suppliers and trusted partners located in countries that are outside of the EU and the European Economic Area (“EEA”) (including, but not limited to the USA) or to our partners/related third parties in connection with the above purposes. The same rule applies for users outside the EU/EAA, that is your data may be transferred outside of the country from which it was originally collected. Please be aware that the countries to which we may transfer data may have data protection laws that are different from the laws where you live.

When transferring personal data outside the EU/EEA, we will ensure that the country in which your personal data will be handled has been deemed “adequate” by the EU Commission under Article 45 of the General Data Protection Regulation (“GDPR”) or if your personal data will be transferred to a country which the EU Commission does not consider to have an adequate level of protection for personal data, we will take all necessary steps required under applicable law in order for such transfer of personal information across borders to be compliant with applicable law. We will only transfer your personal data to a country outside the EU/EEA that does not have adequate data protection laws where; (i) the transfer is being safeguarded by the use of Standard Contractual Clauses (SCCs), which have been approved by the European Commission as appropriate safeguards for international transfers under Article 46(2) of the GDPR; or (ii) where applicable, by an adequacy decision adopted by the European Commission under Article 45 of the GDPR.

By installing or using the App or Services, you consent to those transfers of personal information to other countries and to service providers.

You can find further information about the rules on data transfers outside the EU/EEA, including the mechanisms that we rely upon, on the European Commission website (https://ec.europa.eu/info/law/law-topic/data-protection_en).

How to Contact Us

Data controller

Name: Instabridge Sweden AB
Registration number: 559246-0538
Postal address: Box 190
101 23 Stockholm
E-mail address: privacy@novalauncher.com

Data Protection Officer

Postal address: Instabridge Sweden AB
Att. Data Protection Officer
Box 190
101 23 Stockholm
E-mail address: privacy@novalauncher.com

ANNEX A – SUPPLEMENTAL CCPA PRIVACY NOTICE

This Supplemental CCPA Privacy Notice supplements our Privacy Policy and only applies to our processing of personal information that is subject to the CCPA.

NOTICE AT COLLECTION

At or before the time of collection, California residents have a right to receive notice of our privacy practices. California residents can find this information below.

CATEGORIES OF SOURCES FROM WHICH PERSONAL INFORMATION IS COLLECTED

We collect personal information that you provide to us, personal information we collect automatically when you use the Services, and personal information from third-party sources.

OVERVIEW OF PERSONAL INFORMATION COLLECTED, DISCLOSED, SOLD, AND/OR SHARED

The CCPA provides California residents with the right to know what categories of personal information Instabridge has collected about them, whether Instabridge disclosed that personal information for a business purpose (e.g., to a service provider), whether Instabridge “sold” that personal information, and whether Instabridge “shared” that personal information for “cross-context behavioral advertising” in the preceding twelve months. California residents can find this information below:

Category of Personal Information Collected by Instabridge Category of Third Parties To Whom Personal Information is Disclosed to for a Business Purpose Category of Third Parties To Whom Personal Information is Sold and/or Shared
Identifiers
  • Service providers
  • Third-party services you share or interact with
  • Others, upon the instruction of a user using a profile sharing functionality
  • Our affiliates (in particular to prevent, detect and fight fraud or other illegal or unauthorized activities under our Terms)
  • Our payment service providers and fraud vendors (e.g., for anti-fraud purposes and to fight against other illegal activities)
  • Joint marketing partners
  • Other vendors and professional services organizations who assist us in relation to the business or commercial purposes laid out herein
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
  • Service providers
  • Third-party services you share or interact with
  • Not applicable
Protected classification characteristics under California or federal law
  • Not applicable
  • Not applicable
Commercial information
  • Service providers
  • Third-party services you share or interact with
  • Our payment service providers and fraud vendors (e.g., for anti-fraud purposes and to fight against other illegal activities)
  • Other vendors and professional services organizations who assist us in relation to the business or commercial purposes laid out herein
Biometric information
  • Not applicable
  • Not applicable
Internet or other electronic network activity
  • Service providers
  • Third-party services you share or interact with
  • Vendors and professional services organizations who assist us in relation to the business or commercial purposes laid out herein
Geolocation data
  • Service providers
  • Third-party services you share or interact with
  • Vendors and professional services organizations who assist us in relation to the business or commercial purposes laid out herein
Sensory data
  • Not applicable
  • Not applicable
Professional or employment-related information
  • Not applicable
  • Not applicable
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g, 34 C.F.R. Part 99))
  • Not applicable
  • Not applicable
Inferences drawn from other personal information to create a profile about a consumer
  • Service providers
  • Vendors and professional services organizations who assist us in relation to the business or commercial purposes laid out herein
Personal information that reveals a consumer’s social security, driver’s license, state identification card, or passport number
  • Not applicable
  • Not applicable
Personal information that reveals a consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account
  • Service providers
  • Not applicable
Personal information that reveals a consumer’s precise geolocation
  • Service providers
  • Third-party services you share or interact with
  • Not applicable
Personal information that reveals a consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership
  • Not applicable
  • Not applicable
Personal information that reveals the contents of a consumer’s mail, email, and text messages unless Instabridge is the intended recipient of the communication
  • Not applicable
  • Not applicable
Personal information that reveals consumer’s genetic data
  • Not applicable
  • Not applicable
Biometric information that is processed for the purpose of uniquely identifying a consumer
  • Not applicable
  • Not applicable
Personal information collected and analyzed concerning a consumer’s health
  • Not applicable
  • Not applicable
Personal information collected and analyzed concerning a consumer’s sex life or sexual orientation
  • Not applicable
  • Not applicable

USES OF PERSONAL INFORMATION

We may use and disclose the personal information that we collect for the following business and commercial purposes:

DISCLOSURE REGARDING “SALES” OF PERSONAL INFORMATION AND/OR “SHARING” FOR “CROSS-CONTEXT BEHAVIORAL ADVERTISING”

In the preceding twelve months, Instabridge has “sold” and/or “shared” personal information for cross‑context behavioral advertising purposes. Such activities may involve providing your personal information to trusted third‑party advertising partners, who may use it to deliver targeted advertising across various digital contexts. We make these disclosures in accordance with applicable law.

DISCLOSURE REGARDING OPT-OUT PREFERENCE SIGNALS

Instabridge does “sell” and “share” personal information for cross‑context behavioral advertising. If you do not wish for your personal information to be used for these purposes, you may exercise your right to opt out. To do so, please contact us at privacy@novalauncher.com. We will process your opt‑out request in accordance with the CCPA and other applicable laws.

DISCLOSURE REGARDING INDIVIDUALS UNDER THE AGE OF 16

Instabridge does not have actual knowledge of any “sale” of personal information of minors under 16 years of age. Instabridge does not have actual knowledge of any “sharing” of personal information of minors under 16 years of age for “cross-context behavioral advertising.”

DISCLOSURE REGARDING SENSITIVE PERSONAL INFORMATION

Instabridge only uses and discloses sensitive personal information for the purposes set forth in Section 7027(m) of the CCPA regulations.

NON-DISCRIMINATION

California residents have the right not to receive discriminatory treatment by us for the exercise of their rights conferred by the CCPA.

NOTICE OF FINANCIAL INCENTIVE

This Notice of Financial Incentives aims to inform you about any programs, benefits, and other financial incentive offerings, including price or service differences (collectively, “Incentive Offerings”), that we may provide in connection with the collection of your personal information so that you may make an informed decision on whether to participate in our Incentive Offerings. Such Incentive Offerings may be deemed “financial incentives” under the CCPA.

The material aspects of any Incentive Offering, along with the personal information collected in connection with an Incentive Offering, will be described at the time you are presented with the Incentive Offering.

Examples of our Incentive Offerings may include:

You can opt-in to an Incentive Offering by following the instructions that accompany the presentation of the Incentive Offering. If you subsequently wish to withdraw from the Incentive Offering, you may request such withdrawal by contacting us as set forth in “Contact Us” above.

Each Incentive Offering may be based upon our reasonable and good-faith determination of the estimated value of such an offer to our business, taking into consideration the value of the offer itself and the anticipated revenue generation that may be realized.