Privacy Policy

What we collect

We collect: (1) account information — your email address, username, and password (stored only as a one-way hash, never in plain text); (2) profile information you provide — display name, bio, photos, interests, and any dietary or accessibility preferences; (3) content you create or receive — lobbies you host or join, posts, comments, group memberships, chat messages, and media you upload; (4) location data you share with the app — used for lobby check-in geofencing, distances to nearby lobbies and places, and map features; (5) a device notification token — stored only after you grant push-notification permission, so we can send you app notifications; (6) payment references — when you pay, payment is handled by our payment processor (PayPal); we never see or store card numbers, only the processor's account reference for the linked method; (7) app settings — language, currency, and notification preferences; and (8) referral information if you invite others.

How we use it

We use this information to: operate the app (lobbies, matchmaking, groups, chat, discovery); keep the community safe (automated content filters, user reports, and an admin review queue); process payments, credits, and subscriptions; secure your account (session management, sign-in protection); respond to your support requests; and send notifications you have not turned off. We do not sell your personal data.

Third-party services

To run the app we work with the following services, each of which receives only what the feature needs: PayPal (checkout and payment capture — no card data is shared with us); Amazon Web Services S3 (media file storage) and Amazon SES (email, including account and transaction emails); Firebase Cloud Messaging (push notifications — your token and device registration); Google or Discord (only if you choose to sign in or link through them, they share the account identity for linking); OpenStreetMap Nominatim (converting place names to map coordinates — the entered text and your account are not shared); and Frankfurter (exchange rates — no personal data). These providers have their own privacy policies.

Push notifications and location

Push notifications and location access are only used after you grant the corresponding permission in your device settings. You can revoke either permission at any time in your device settings, and you can turn off specific app notification types in your in-app notification settings. Without location permission, check-in geofencing and nearby discovery are unavailable; the rest of the app works normally.

How long we keep it

We keep your content and account data while your account is active. Short-lived technical records are purged on a schedule: expired sign-in tokens and verification codes, ended or idle sessions, lapsed subscriptions, and expired friend requests are deleted automatically by regular cleanup jobs. When you delete your account, your account and the content you own are removed. Some historical records that merely mention your username (for example, other users' posts or messages kept for them) may retain that name string.

Your rights

You can exercise data rights directly in the app: export a bundle of your personal data (profile, balances, billing history, lobbies, posts, groups, chats, referrals, and support requests) from Account settings; delete your account (with immediate sign-out of all devices) from Account settings; manage and revoke your active sessions; and request a password reset. For other data-subject requests (access, correction, portability, erasure), contact us through the in-app Help and Support screen; we will respond through your support request.

Children

Nhom is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us through in-app support so we can delete it.

Where your data is stored

Your data is stored on cloud infrastructure operated by our hosting providers (Amazon Web Services and Firebase). For details on the specific hosting regions, or any other privacy question, contact us through in-app Help and Support; we will confirm the current configuration in writing.

Changes to this policy

We may update this policy as the app changes. When we make material changes we will update this screen and, where appropriate, notify you in-app. Continued use of the app after a change means you accept the updated policy.