Privacy Policy

What we collect

What reaches us is what you enter in the app, plus what is technically needed to deliver messages and notifications:

• Account data: your phone number or email address, display name, date of birth (to derive your age), and gender.
• Profile: your photos, your bio, and the discovery and search preferences you choose.
• What you post: posts, replies and stories, visible to anyone who can see your profile.
• Conversations: your message text is stored on our server so it can be delivered to the other person and shown to you both.
• Approximate location: your city or coarse coordinates, used to show distance on discovery cards. We never show anyone your precise location.
• Device data: your notification token (FCM) and platform, so we can send you alerts.
• Technical logs: IP address and request times, used for abuse prevention and rate limiting.

Contacts

If you choose to find people you know, the app computes a cryptographic hash (SHA-256) of each number on your device and sends only the hashes — never the numbers, never the names — for the server to match against people who signed up with the same number.

We do not retain those hashes after matching, and we never build profiles of people who have not signed up. The feature is entirely optional: it runs only with your explicit consent, which you can withdraw at any time.

Photo library sync

Sync is optional and off by default. If you turn it on, a copy of the photos you allow is uploaded to your account on our server to improve your profile suggestions. Synced photos are not published and are not shown to other users.

You can turn sync off and delete what was uploaded from inside the app at any time.

How we use data

We do not use the content of your private messages for anything other than delivering them, except when reviewing a report about a specific conversation.

• Running the service: creating your account, building discovery cards, delivering messages and notifications.
• Safety: reviewing reports, enforcing blocks, and preventing fake accounts and abuse.
• Improvement: understanding in aggregate what works in the app and what does not.

Who we share it with

We do not sell your data. We share it only with service providers who run parts of the app on our behalf, and only as far as needed:

• Google's notification service (Firebase Cloud Messaging), to deliver alerts.
• The hosting provider our servers and databases run on.
• The provider that sends verification messages (SMS or email).
• Legal authorities, where required by a valid legal request.

What other people see

• Your profile and posts are visible to people whose search preferences include you.
• A one-sided like is shown to nobody; a conversation opens only on a mutual match, or when you accept a message request.
• Ignoring a message request tells the sender nothing.
• Uploaded photos are served over direct links; anyone holding a link can open that photo.

Retention and deletion

We keep your data for as long as your account exists. You can delete your account from inside the app (Settings); your profile and posts disappear from other users immediately.

Data is erased from our systems within thirty days of a deletion request, except what we must keep for legal or safety reasons (an abuse report record, for example).

Your rights

You can request a copy of your data, correct it, delete it, or withdraw any consent you gave (such as photo sync or contacts). Write to support@naseb.app and we will respond within thirty days.

Security

Data travels over an encrypted connection, and passwords are stored hashed, never as plain text. No system is perfectly secure, but we limit internal access and act on vulnerabilities we learn about.

Age

The app is for people aged 18 and over. If we learn of an account belonging to someone younger, we delete it.

Changes to this policy

We may update this page. The last-updated date appears at the top, and we will tell you in the app about material changes.

Contact

For any privacy question: support@naseb.app — Naseb.