Privacy Policy

Last modified October 26, 2026

Nooberly, Inc. ("Nooberly", "we", "us") runs the Nooberly app and the website at nooberly.com. This page explains what we collect about you, why, who else handles it, what other people can see, how long we keep it, and what you can do about it. We wrote it in plain English on purpose. If anything is unclear, write to team@nooberly.com.

1. The short version

Nooberly is for adults. You must be 18 or older to have an account.
Your face is your identity here. You scan it at signup, and again if you sign in on a new phone. One person gets one account. The face record stays for three years after you leave or stop signing in — that is how nobody can shed a bad reputation by signing up again the next day — and for ten years if you were flagged for serious conduct.
You choose how precisely people see where you are: exact, approximate (the default), or hidden.
We do not sell your data. There are no ads and no advertising code in the app.
Other members see the profile you build, the reviews you have received and your Stars. Guests who have not joined see less.
You can delete your account in the app any time. It waits 33 days in case you change your mind, then it goes — except the safety records listed in Section 10.

2. What we collect

Almost everything below is something you give us or create in the app. The rest is what your phone tells us so the app can work.

What	Where it comes from	Good to know
Name and email	Your Google or Apple sign-in.	Your email is your login key, not your identity. We do not show it to other members.
Date of birth and gender	You enter them at signup.	Both are locked after signup. The app shows other people your age, not your birthday.
Profile	You build it: username, display name, profession, languages, what you offer and what you are looking for, a status line, relationship status, your area, a profile picture, optional photos, and your Hello video if you record one.	Your name starts as the one from your Google or Apple sign-in, and you pick what you offer; what you are looking for starts as the same list. You can edit it.
Face scan	A 3D face scan at signup. We may ask again on a new phone or after a while.	Stored as a face record on our own verification server. See Section 4.
Location	Your phone's position when you open the app and each time you come back to it. On the Exact setting, also the street address your phone derives from it.	Stored at the precision you choose. See Section 5.
Posts	The video, title, description, tags and meeting spot of anything you post.	The meeting spot is public — it is the point of the post.
Chats	Text, photos, voice notes and video clips you send; transcripts of voice notes and clips; typing and read signals.	Voice notes and clips are transcribed so they can be captioned.
Reviews	The star rating, words and optional video you give and receive, and any Stars given with them (how many).	Reviews can only come from someone you actually dealt with — there are no drive-by ratings.
Your AI	The questions you answer to train your own AI, photos you add to it, and your conversations with Nooberly's AI.	Conversations are saved to your account so the AI keeps context. A question the AI could not answer is also kept, without your name, for up to 12 months.
Calendar	Your availability switch, the time blocks you set, and your timezone.	Used to show when you are free and to suggest meeting times.
Device	A random device ID, the phone model and operating system, a push notification token, on iPhone a call token, and the IP address and rough city of each sign-in.	One active device at a time. The city helps you recognise your own sessions.
Purchases	Whether you are a Supporter and until when, and receipts for tips.	Payments go through Apple or Google. Card details never reach us.
Safety records	Reports you make or receive, people you block or mute, security incidents on your account, and behaviour flags our AI derives from reviews.	Kept to keep the community safe. See Section 10.

Ignore, the daily count and the letter picture. If you Ignore a first message, we keep a private mark of that chat and its sender until you reply to them. Only you can see it, and the sender is not told. To hold new chats, applications included, to 11 a day with people who are not yet your contacts, we keep a record of each new chat you open with someone who is not a contact: who it was with, and when. Other members cannot see whom it lists: it is only counted, and it is kept even after the chat or your account is deleted. If you record a Hello and add no picture, a still from your Hello becomes your profile picture. With neither, or if you choose the letter, our server makes one: the first letter of your name on a plain colour tile.

3. Why we use it

To run the app — your account, profile, posts, chats, calls, reviews and calendar.
To verify who you are — one face, one account; to stop fraud, and to recognise people who were removed if they sign up again.
To show you people and posts nearby, and to show you to them, at the precision you chose.
To keep people safe — automated checks on videos, photos and post titles; handling reports; enforcing blocks.
To run Nooberly's AI — transcribe your video, fill in your profile, answer questions, draft a review when you ask, suggest meeting times, and let your own AI answer other members.
To score reviews and work out Star Power and badges.
To send notifications you have turned on.
To confirm purchases made through Apple or Google.
To meet our legal obligations and respond to lawful requests.

We do not use your data for advertising, and we do not build advertising profiles.

4. Your face

Before you scan, we show you a screen with tips for a good scan and one line under the button: "By tapping Verify Face, you agree we store a scan of your face to keep one account per person." (On the website it reads "By starting the scan, …".) Its link, "How long we keep it", opens this section: how long the face record stays is set out below. When you tap the button that starts the scan, we record the time of that agreement on your account.

Here is what happens with the scan:

It is a 3D liveness scan. It confirms there is a live person in front of the camera, not a photo or a video.
It is matched against every face record we hold. If your face already owns an active account, we ask you to sign in to that one. If it belongs to an account that was deleted, we recognise you and offer to restore your history (Section 10). Only a genuinely new face gets the one-time 33 Star Power welcome.
It is stored on a verification server we control, running FaceTec's software, under your account ID. Your phone never talks to that server directly — only our own servers do. Accounts created before we moved to FaceTec also have a face vector stored with AWS Rekognition.
It is kept for as long as your account exists, and for three years after your last sign-in or your deletion, whichever comes first. If you have not signed in for three years we schedule your account for deletion, email you, and cancel it if you sign in within 33 days. When the three years end we delete the face record and the profile snapshot kept with it. If your account was flagged for serious conduct — threats or violence, scams or fraud, sexual content, appearing underage, impersonation, sharing someone's private information, or a ban — we keep the face record for ten years from the last incident, so that we recognise you if you sign up again.
If you record a Hello video, it must show the same person as the scan. A profile picture does not have to show you, but it must pass our content checks (no nudity, for example). We compare every picture with your verified face; if it shows a face, it must be yours.
We may ask you to scan again when you sign in on a new phone, or from time to time.
Age estimates. Our verification tools may estimate an age range from your face. We use that only to spot accounts that look under 18 for review. It never changes your age on its own.
Gender reading. If you record a Hello video, AWS Rekognition reads whether your face in it looks male or female. We keep that reading on your account. With no Hello video, nothing is read. The gender you pick at signup is your choice, and it cannot be changed later.
Photos taken together. When you take a photo with the in-app camera in a one-to-one chat, AWS Rekognition compares it with both people's profile photos, to note that the two of you met. We keep only that note.
It is never sold, and never shared with anyone for their own purposes.
It stays after you delete your account, for the time described above. This is deliberate and you should know it before you scan. Section 10 explains why and the legal basis.

5. Your location

The app asks for location permission while you are using it (not in the background). When you open the app, and each time you come back to it, we read your position and save it to your profile at the precision you have chosen. Location is what makes Nooberly work — it is how you find people near you and they find you.

You control how precise that is. Three settings, picked on the Available switch (Hidden when you switch it off):

Exact — we store your real position and the street address your phone derives from it. Others see an exact distance, like "0.4 mi".
Approximate — the default. We store a position rounded to about a kilometre and no street address; we work out only your neighbourhood and city from it. Others see a distance band, like "within 3 mi", never tighter than one mile.
Hidden — we store no position at all. Others see nothing.

The Available switch is a separate control. When it is on, you have a pin on the map, you appear in Nearby, and people can ping you about posts near you. When it is off, your pin comes off the map, post pings stop, and you show as offline — but your distance setting above still applies. You cannot be Available and Hidden at the same time; being available needs a distance.

Other members see your area — a town or neighbourhood — not your street. Posts carry their own meeting spot, which is public because it is the point of the post. We also keep the rough city of the network you sign in from, so you can tell your own sessions apart. Your location is never shared with anyone for advertising.

6. Nooberly's AI

Nooberly has one AI, and it shows up in four places: a limited guest version before you join, the concierge you can ask anything, your own AI that you train, and other members' AIs that you can talk to. It reads member data only through our own servers, never straight from the database.

Your own AI answers other verified members from the answers you typed for it, your profile, your posts, your rating and local standing, and a line from your best review — all things a member can already see on your profile. About the visitor it is talking to, it reads only their own public profile and the categories their reviews were filed under — the topic of a meeting, never what someone wrote about them. If a visitor asks it to pass a message to you, it does so as your AI, and the visitor is asked to confirm first.

Automated processing you should know about:

Your Hello video (if you record one), review videos, voice notes and chat clips are transcribed by OpenAI's Whisper.
Your Hello video's transcript is checked for language that is not allowed here. If you record a new Hello later, the kinds of help you mention in it may be added to what you offer and what you are looking for. Your own AI can also tell visitors what you said in it.
Videos, photos and post titles are checked automatically for content that is not allowed here. Photos are checked by AWS Rekognition and by an OpenAI vision model.
Reviews are read by our AI to score them for Star Power and to note behaviour flags. Those flags are safety records.
When you ask the AI to draft a review, it reads your chat with that person to write it.
When a chat talks about a time to meet, an automated helper reads the recent messages in that chat to suggest a calendar time.
Photos you add to your AI are described by an OpenAI vision model so it can talk about them.
When you talk to the AI by voice, your speech is transcribed and answered by OpenAI's real-time model. If you choose to give your AI your own voice — a separate opt-in, off by default — the sample you record goes to ElevenLabs to build the voice, and we note your consent on your account.

Your conversations with the AI are saved to your account. Nobody at Nooberly reads your chats as a matter of routine. A person may read a chat only when someone reports it, or when the law requires it. When the AI cannot answer a question, we keep the question itself (for a short follow-up, with the question just before it), without your name, for up to 12 months, so we can read it and teach the AI the answer.

All of our language and vision models come from OpenAI and are used under OpenAI's API terms — your data is not used to train their models.

7. Who else handles your data

We do not sell your data. But "not sold" is not the same as "not shared". The companies below run parts of our plumbing. They handle your data as suppliers doing a job for us, never as buyers, and only for the purpose listed.

Provider	What they do for us	What they handle
FaceTec	Face liveness and face matching software, running on a server we own and control.	Your 3D face scan and face record. Processed on our server, not theirs.
Supabase	Our database, sign-in sessions, real-time chat and presence, and chat photo/voice/clip storage.	Your account, profile, posts, chats, reviews, AI conversations and settings.
Amazon Web Services	S3 stores videos and photos; CloudFront delivers them; MediaConvert transcodes video; Rekognition runs photo and video safety checks, face detection and face comparison (and holds face vectors for early accounts); SES sends our email; EC2 hosts our verification server.	Your videos, photos, Hello video, face checks, and the email you signed up with.
OpenAI	Whisper transcription; language and vision models for the AI, profile text, review scoring and safety checks; the real-time model for AI voice.	Your video and clip audio, transcripts, profile text, reviews, AI conversations, and photos you add to your AI. Used under OpenAI's API terms — not used to train their models.
ElevenLabs	Builds a voice for your AI, only if you choose that.	The voice sample you record for it.
LiveKit	Voice and video calls between members, and AI voice sessions.	Call audio and video while a call is live. We do not record calls between members.
OneSignal	Push notifications.	Your push token and device, tied to your account ID so a notification reaches your phone and nobody else's.
Apple and Google	Sign in with Apple or Google; App Store and Google Play billing for Supporter and tips; Apple's push service for incoming-call rings on iPhone.	Your sign-in identity and your purchases. Card details stay with Apple or Google.
Google Maps Platform	Maps, place search and directions, and turning a location into a place name (for example to show your area, or to answer "who is in Brooklyn?").	The places you search for and approximate locations. Never your name.
RevenueCat	Confirms App Store and Google Play purchases for us.	Your account ID and purchase receipts.
Google Maps Platform	The map in the app, place search when you type a location, and turning your stored position into a neighbourhood or city name.	Map requests, the place names you type, and your stored position.
Expo	Delivers app updates.	Basic app and device details when the app checks for an update.
ip-api.com	Turns the IP address of a sign-in into a rough city, so you can recognise your own sessions.	The IP address of each sign-in.

We may also disclose data if the law requires it — a subpoena or court order — or if we believe it is necessary to protect someone's safety or to prevent fraud.

8. What other people can see

Other members

Members are people who have verified their face. A member who opens your profile can see:

Your display name, username, age, gender, relationship status, profession, languages, what you offer and what you are looking for, your status line, and your area (not your street).
Your profile photo, photos, and Hello video, if you have one.
Whether you are available, when you were last active, and your distance at the precision you chose.
Your posts.
Every review you have received, and the reviews you have written.
Your Star Reputation (how many Stars you have received, and from how many people), your badges, and your Supporter mark if you have one. If you have received Stars, you can appear on the Stars board for your city.
The answers you gave your AI, through your AI.
Your contacts — the people you have exchanged reviews with — and which of them they also know.

Your face, your choice. At signup you can choose to show your face only to members of your own gender. Members outside that group still see you as a person — your name and profile — but not your face or photos, unless you started a chat with them or the two of you have completed a connection.

Your QR code is a link to your profile. Anyone who scans it opens your profile in the app. If someone joins Nooberly by scanning your code, we note that you invited them.

Reports. If someone reports a chat, a person on our side may read that chat thread to decide what to do.

Guests

People who have not joined can browse the feed, watch Hello videos, and read the reviews members have been given. They see your display name, age, gender, relationship status, profession, city, languages, what you offer and are looking for, your status line, whether you are available and when you were last active, your review and badge counts, your Supporter mark, and your posts and their meeting spots. They do not see your birthday, your street or neighbourhood, your distance or position, your Star Power balance, or your contacts. Your face setting applies to guests too. Nobody is told a guest looked, and a guest cannot contact you.

9. How long we keep things

Data	How long
Profile, posts, calendar, settings	While your account exists, plus the 33-day deletion window. Then deleted.
Sign-in sessions and device records	While your account exists. Deleted with the account. The push token is detached from your account when you sign out.
Temporary uploads	Video chunks uploaded while you record are deleted automatically after one day.
Chats and messages	Kept. A chat is the record of a connection, and the other person keeps their side. If you delete your account, your chats are anchored to your face record and reattached if you come back.
Reviews, badges, behaviour flags	Kept permanently as community safety records, attached to your face record while it exists. Your name on reviews you wrote becomes "Deleted Noober" if you leave.
Star Power ledger	Kept permanently, attached to your face record while it exists. Balances cannot be reset by deleting and rejoining.
Face record and raw Hello video clips (if any)	Kept for three years after your last sign-in or your deletion, whichever comes first; ten years from the last incident if your account was flagged for serious conduct. Then deleted, with the profile snapshot. See Sections 4 and 10. Removing your Hello takes it off your profile; the file is kept with your identity record.
Reports, blocks, security incidents	Kept permanently as safety records.
Purchase receipts	Kept, attached to your face record, as a financial record.
AI conversations	While your account exists.
A snapshot of your profile details	Kept with the face record after deletion — name, username, birthday, gender, relationship status, profession, address, languages, what you offered and needed — so your account can be restored if you come back, and so age cannot be renegotiated by rejoining. Deleted with the face record, after the time in Section 4.

10. Deleting your account — and what stays

Go to Profile → Settings → Delete Account. You can also email team@nooberly.com and we will start it for you.

Deletion has a 33-day waiting period. During that time your profile is taken out of feeds and search. If you sign back in before the 33 days are up, that cancels the deletion — coming back is the cancellation. The 33 days count from the moment you confirm.

When the 33 days pass, we delete your profile, your posts, your calendar, your sessions and your sign-in account.

What stays, and why. Nooberly only works if a reputation cannot be shed by starting over. So some things are kept after deletion, attached to your face record rather than to a name. They come in two groups.

Kept for three years, then deleted — three years after your last sign-in or your deletion, whichever comes first (ten years from the last incident if your account was flagged for serious conduct):

The face record itself.
The raw clips of your Hello video, if you recorded one, as identity evidence.
The profile snapshot described in Section 9.

Kept without a name, and not deleted when those three years end — the community and safety records (Section 9 gives how long each is kept):

Reviews you were given and reviews you wrote, badges, and behaviour flags.
Your Star Power ledger.
Your chats and messages.
Reports, blocks and security incidents.
Purchase receipts.

If you come back inside that time, we recognise your face, show you what was kept, and restore it to your new account; your Star Reputation starts again at zero, and you never get a second 33 Star Power welcome. After it, the face record and the snapshot are gone; reviews other people wrote stay with the community under "Deleted Noober".

Legal basis. We keep these records under our legitimate interest in keeping the community safe — stopping fraud, ban evasion and the erasing of reviews other people wrote in good faith (GDPR Article 6(1)(f)). For the face record we also rely on the explicit consent you gave on the consent screen before your first scan (GDPR Article 9(2)(a)). You can object to this retention (Section 11) and we will weigh your objection against those interests and reply.

11. Your rights

Wherever you live, you can ask us to:

Access — get a copy of the personal data we hold about you.
Correct — fix something that is wrong. Most of your profile you can edit in the app yourself. Your date of birth and gender are locked after signup; email us if one is wrong.
Delete — remove your account (Section 10), subject to the safety records kept there.
Port — receive your data in a structured, machine-readable format.
Object — object to processing we base on legitimate interest, including the retention in Section 10.
Withdraw consent — where we rely on your consent (the face scan, location permission, the AI voice). Withdrawing does not undo processing that already happened, and the face record is kept as described in Section 10.

Email team@nooberly.com. We reply within 30 days. We may ask you to confirm you are the account holder first.

If you are in the EU, EEA, UK or Switzerland

Our legal bases are: performing our contract with you (running the app and your account); your consent (the face scan, location permission, and giving your AI your voice); our legitimate interests (safety, fraud prevention, and the records kept after deletion); and legal obligation. You also have the right to complain to your local data protection authority.

If you are in California

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We collect the categories listed in Section 2, including sensitive personal information — your face scan and your precise location — which we use only for the purposes in this policy. You have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for using those rights. California's "Shine the Light" law (Civil Code Section 1798.83) lets you ask about any disclosure of personal information to third parties for their direct marketing; we make none. To make any of these requests, email team@nooberly.com.

12. Adults only

Nooberly is for people aged 18 and over. You enter your date of birth at signup, the app refuses anyone under 18, and our database refuses too. We do not knowingly allow anyone under 18 to create an account, and we do not knowingly collect personal information from anyone under 18.

If we learn that someone under 18 has an account, we will close it and delete the personal data we collected from them. If you believe that has happened, tell us at team@nooberly.com.

13. Security

Everything between the app and our servers travels over encrypted connections (TLS).
The app never talks to our cloud services directly — every call goes through our own servers.
Our face verification server sits on a private network that only our own servers can reach.
Chat photos, voice notes and clips live in private storage and are handed out with short-lived signed links.
Our database uses row-level security policies, and the app has no direct table access to columns like your birthday, address and balances.
Our storage providers encrypt data at rest.
Only one device can be signed in at a time. Signing in on a new phone can trigger a fresh face scan.

No system is perfectly secure, and we cannot promise absolute security. If you think your account has been touched by someone else, email us straight away.

14. Where your data lives

Our servers and storage are in the United States, and the providers in Section 7 process data there and in other countries where they operate. If you use Nooberly from outside the United States, your data is transferred there. Where the law requires it, we rely on approved safeguards for those transfers, such as Standard Contractual Clauses.

15. Changes to this policy

When we change this policy in a way that matters, we will tell you in the app or by email before it takes effect. The date at the top always shows the current version. Using Nooberly after a change means you accept the updated policy.

16. Contact

Privacy questions and data requests: team@nooberly.com
Everything else: team@nooberly.com or our Contact page

Nooberly, Inc.
New York, NY