Privacy notice

Draft prepared September 28, 2026. This notice describes the planned nunu service. It is not yet an effective launch policy.

Information used to provide nunu

• Account and profile details, including your account identifier, confirmed email address, verified phone number, display name and avatar. Phone numbers are verified by text message through Twilio. If you continue with Apple or Google, we receive the verified email address from that provider (with Apple, this can be a private relay address if you choose Hide My Email); we do not use your provider name or photo.
• Friend requests, friendships, blocks, invitations, reports and account-deletion requests.
• Your current location when sharing is enabled and permission is granted, including background updates if allowed. The application stores one current location record rather than a location history.
• Phone numbers and email addresses submitted for optional contact matching. Contact names and other details stay on your device, and submitted contact lists are not stored by nunu. So it does not check the same contacts again, the app keeps hashed copies of the numbers and addresses it has checked, plus the matching nunu profiles, on your device until you sign out. Contact access is not required to use invitation links. Text-message invitations are sent from your device through Messages, not by nunu.
• Camera-captured photos and videos you submit as Stories, together with publication, expiry and viewing information.
• Encrypted messaging data, including photos, videos and voice messages you send in chats, and operational metadata such as account/device identifiers, room membership, timestamps, receipts and attachment sizes. Your name (or username if you have not added one) is copied to your messaging profile so friends see who sent a message. Not all Matrix metadata is encrypted.
• When you last viewed Activity, used to count new items on the app icon and Activity tab.
• Device notification tokens and operational diagnostics used to run and troubleshoot the service.

Visibility and controls

Location is shared with direct friends, subject to your sharing choices and per-friend hiding. Stories are visible only to your direct friends. Blocking overrides future access under the service’s access rules.

Story access expires after 24 hours. Expiry of access does not mean that every stored copy or backup is immediately erased. Recipients can also retain screenshots or other copies outside our control.

Messaging and security

nunu uses Matrix end-to-end encryption for message bodies, with encryption and decryption on your devices. This does not conceal all messaging metadata or protect a message after a recipient copies it. Photos, videos and voice messages are encrypted on your device before upload, and our messaging server stores only the encrypted files. Photos and videos are re-encoded before sending, which removes location metadata. Push notifications do not include message bodies: your device decrypts a new message to show its sender and text. Notifications may include counts of unread messages and new Activity for the app icon badge. Friend request and Story notifications include the name of the person involved and pass through Apple’s push service.

Service providers

The planned providers include Supabase for authentication, application data and private media; Google Cloud for the application backend and self-hosted Matrix; Resend for operational email; Apple for Sign in with Apple and push notifications; Google for Sign in with Google; Twilio for phone verification codes; and Vercel and Cloudflare for this website and domain infrastructure. Authentication and SMS providers depend on the methods enabled at launch.

Retention and deletion

You can initiate account deletion in nunu or request help through support. If you use Sign in with Apple, nunu asks you to confirm with Apple and revokes its Apple access before recording your request. The launch policy will specify the completion timeframe, backup retention and any required retention exceptions. Deletion cannot remove copies independently held by other users.

Choices and contact

Manage permissions in iPhone Settings and sharing controls in nunu. Contact the IGB team about access, correction or deletion requests. We may verify your identity before responding.

Before launch

The operator’s legal identity and contact information, applicable regional rights, lawful bases where required, international processing arrangements, age eligibility, moderation providers and final retention schedule remain to be confirmed.