Privacy Policy

Last modified September 5, 2026

Nooberly, Inc. ("Nooberly", "we", "us") runs the Nooberly app and the website at nooberly.com. This page explains what we collect about you, why, who else handles it, what other people can see, how long we keep it, and what you can do about it. We wrote it in plain English on purpose. If anything is unclear, write to team@nooberly.com.

1. The short version

Nooberly is for adults. You must be 18 or older to have an account.
Your face is your identity here. You scan it once. One person gets one account. The face record stays even if you leave — that is how nobody can shed a bad reputation by signing up again.
You choose how precisely people see where you are: exact, approximate (the default), or hidden.
We do not sell your data. There are no ads and no advertising code in the app.
Other members see the profile you build, the reviews you have received and your Star Power. Guests who have not joined see less.
You can delete your account in the app any time. It waits 33 days in case you change your mind, then it goes — except the safety records listed in Section 10.

2. What we collect

Almost everything below is something you give us or create in the app. The rest is what your phone tells us so the app can work.

What	Where it comes from	Good to know
Name and email	Your Google or Apple sign-in.	Your email is your login key, not your identity. We do not show it to other members.
Date of birth and gender	You enter them at signup.	Both are locked after signup. The app shows other people your age, not your birthday.
Profile	You build it: username, display name, profession, languages, what you offer and what you are looking for, a status line, relationship status, your area, a profile photo, optional photos, and your profile video.	Much of the text is drafted by our AI from what you say in your video. You can edit it.
Face scan	A 3D face scan at signup. We may ask again on a new phone or after a while.	Stored as a face record on our own verification server. See Section 4.
Location	Your phone's position when you open the app and each time you come back to it. On the Exact setting, also the street address your phone derives from it.	Stored at the precision you choose. See Section 5.
Posts	The video, title, description, tags and meeting spot of anything you post.	The meeting spot is public — it is the point of the post.
Chats	Text, photos, voice notes and video clips you send; transcripts of voice notes and clips; typing and read signals.	Voice notes and clips are transcribed so they can be captioned.
Reviews	The star rating, words and optional video you give and receive.	Reviews can only come from someone you actually dealt with — there are no drive-by ratings.
Your AI	The questions you answer to train your own AI, photos you add to it, and your conversations with Nooberly's AI.	Conversations are saved to your account so the AI keeps context.
Calendar	Your availability switch, the time blocks you set, and your timezone.	Used to show when you are free and to suggest meeting times.
Device	A random device ID, the phone model and operating system, a push notification token, on iPhone a call token, and the IP address and rough city of each sign-in.	One active device at a time. The city helps you recognise your own sessions.
Purchases	Whether you are a Supporter and until when, and receipts for tips.	Payments go through Apple or Google. Card details never reach us.
Safety records	Reports you make or receive, people you block or mute, security incidents on your account, and behaviour flags our AI derives from reviews.	Kept to keep the community safe. See Section 10.

3. Why we use it

To run the app — your account, profile, posts, chats, calls, reviews and calendar.
To verify who you are — one face, one account; to stop fraud, and to stop people who were removed from coming back under a new name.
To show you people and posts nearby, and to show you to them, at the precision you chose.
To keep people safe — automated checks on videos, photos and post titles; handling reports; enforcing blocks.
To run Nooberly's AI — transcribe your video, fill in your profile, answer questions, draft a review when you ask, suggest meeting times, and let your own AI answer other members.
To score reviews and work out Star Power, badges and Sooper Power.
To send notifications you have turned on.
To confirm purchases made through Apple or Google.
To meet our legal obligations and respond to lawful requests.

We do not use your data for advertising, and we do not build advertising profiles.

4. Your face

Before your first scan we show you a consent screen that says, in short: your face becomes your key; one human, one account, ever; your face record stays even if you leave; and going available shares your location at the precision you pick. When you tap "I agree — start the scan", we record the time of that agreement on your account.

Here is what happens with the scan:

It is a 3D liveness scan. It confirms there is a live person in front of the camera, not a photo or a video.
It is matched against every face record we hold. If your face already owns an active account, we ask you to sign in to that one. If it belongs to an account that was deleted, we recognise you and offer to restore your history (Section 10). Only a genuinely new face gets the one-time 33 Star Power welcome.
It is stored on a verification server we control, running FaceTec's software, under your account ID. Your phone never talks to that server directly — only our own servers do. Accounts created before we moved to FaceTec also have a face vector stored with AWS Rekognition.
Your profile video must show the same person as the scan. When you set a new profile photo, we compare it with your verified face.
We may ask you to scan again when you sign in on a new phone, or from time to time.
Age estimates. Our verification tools may estimate an age range from your face. We use that only to spot accounts that look under 18 for review. It never changes your age on its own.
It is never sold, and never shared with anyone for their own purposes.
It stays after you delete your account. This is deliberate and you should know it before you scan. Section 10 explains why and the legal basis.

5. Your location

The app asks for location permission while you are using it (not in the background). When you open the app, and each time you come back to it, we read your position and save it to your profile at the precision you have chosen. Location is what makes Nooberly work — it is how you find people near you and they find you.

You control how precise that is. Three settings, in your profile's Settings and on the Available switch:

Exact — we store your real position and the street address your phone derives from it. Others see an exact distance, like "0.4 mi".
Approximate — the default. We store a position rounded to about a kilometre and no street address; we work out only your neighbourhood and city from it. Others see a distance band, like "within 3 mi", never tighter than one mile.
Hidden — we store no position at all. Others see nothing.

The Available switch is a separate control. When it is on, you have a pin on the map, you appear in Nearby, and people can ping you about posts near you. When it is off, your pin comes off the map, post pings stop, and you show as offline — but your distance setting above still applies. You cannot be Available and Hidden at the same time; being available needs a distance.

Other members see your area — a town or neighbourhood — not your street. Posts carry their own meeting spot, which is public because it is the point of the post. We also keep the rough city of the network you sign in from, so you can tell your own sessions apart. Your location is never shared with anyone for advertising.

6. Nooberly's AI

Nooberly has one AI, and it shows up in four places: a limited guest version before you join, the concierge you can ask anything, your own AI that you train, and other members' AIs that you can talk to. It reads member data only through our own servers, never straight from the database.

Your own AI answers other verified members from the answers you typed for it, your profile, your posts, your rating and local standing, and a line from your best review — all things a member can already see on your profile. About the visitor it is talking to, it reads only their own public profile and the categories their reviews were filed under — the topic of a meeting, never what someone wrote about them. If a visitor asks it to pass a message to you, it does so as your AI, and the visitor is asked to confirm first.

Automated processing you should know about:

Your profile video, review videos, voice notes and chat clips are transcribed by OpenAI's Whisper.
Your profile video transcript is used to draft your profile text and detect your language.
Videos, photos and post titles are checked automatically for content that is not allowed here. Photos are checked by AWS Rekognition and by an OpenAI vision model.
Reviews are read by our AI to score them for Star Power and to note behaviour flags. Those flags are safety records.
When you ask the AI to draft a review, it reads your chat with that person to write it.
When a chat talks about a time to meet, an automated helper reads the recent messages in that chat to suggest a calendar time.
Photos you add to your AI are described by an OpenAI vision model so it can talk about them.
When you talk to the AI by voice, your speech is transcribed and answered by OpenAI's real-time model. If you choose to give your AI your own voice — a separate opt-in, off by default — the sample you record goes to ElevenLabs to build the voice, and we note your consent on your account.

Your conversations with the AI are saved to your account. Nobody at Nooberly reads your chats as a matter of routine. A person may read a chat only when someone reports it, or when the law requires it.

All of our language and vision models come from OpenAI and are used under OpenAI's API terms — your data is not used to train their models.

7. Who else handles your data

We do not sell your data. But "not sold" is not the same as "not shared". The companies below run parts of our plumbing. They handle your data as suppliers doing a job for us, never as buyers, and only for the purpose listed.

Provider	What they do for us	What they handle
FaceTec	Face liveness and face matching software, running on a server we own and control.	Your 3D face scan and face record. Processed on our server, not theirs.
Supabase	Our database, sign-in sessions, real-time chat and presence, and chat photo/voice/clip storage.	Your account, profile, posts, chats, reviews, AI conversations and settings.
Amazon Web Services	S3 stores videos and photos; CloudFront delivers them; MediaConvert transcodes video; Rekognition runs photo and video safety checks, face detection and face comparison (and holds face vectors for early accounts); SES sends our email; EC2 hosts our verification server.	Your videos, photos, profile video, face checks, and the email you signed up with.
OpenAI	Whisper transcription; language and vision models for the AI, profile text, review scoring and safety checks; the real-time model for AI voice.	Your video and clip audio, transcripts, profile text, reviews, AI conversations, and photos you add to your AI. Used under OpenAI's API terms — not used to train their models.
ElevenLabs	Builds a voice for your AI, only if you choose that.	The voice sample you record for it.
LiveKit	Voice and video calls between members, and AI voice sessions.	Call audio and video while a call is live. We do not record calls between members.
OneSignal	Push notifications.	Your push token and device, tied to your account ID so a notification reaches your phone and nobody else's.
Apple and Google	Sign in with Apple or Google; App Store and Google Play billing for Supporter and tips; Apple's push service for incoming-call rings on iPhone.	Your sign-in identity and your purchases. Card details stay with Apple or Google.
RevenueCat	Confirms App Store and Google Play purchases for us.	Your account ID and purchase receipts.
Google Maps Platform	The map in the app, place search when you type a location, and turning your stored position into a neighbourhood or city name.	Map requests, the place names you type, and your stored position.
Expo	Delivers app updates.	Basic app and device details when the app checks for an update.
ip-api.com	Turns the IP address of a sign-in into a rough city, so you can recognise your own sessions.	The IP address of each sign-in.

We may also disclose data if the law requires it — a subpoena or court order — or if we believe it is necessary to protect someone's safety or to prevent fraud.

8. What other people can see

Other members

Members are people who have verified their face. A member who opens your profile can see:

Your display name, username, age, gender, relationship status, profession, languages, what you offer and what you are looking for, your status line, and your area (not your street).
Your profile photo, photos, and profile video.
Whether you are available, when you were last active, and your distance at the precision you chose.
Your posts.
Every review you have received, and the reviews you have written.
Your Star Power, your badges, and your Supporter mark if you have one.
The answers you gave your AI, through your AI.
Your contacts — the people you have exchanged reviews with — and which of them they also know.

Your face, your choice. At signup you can choose to show your face only to members of your own gender. Members outside that group still see you as a person — your name and profile — but not your face or photos, unless you started a chat with them or the two of you have completed a connection.

Your QR code is a link to your profile. Anyone who scans it opens your profile in the app. If someone joins Nooberly by scanning your code, we note that you invited them.

Reports. If someone reports a chat, a person on our side may read that chat thread to decide what to do.

Guests

People who have not joined can browse the feed, watch profile videos, and read the reviews members have been given. They see your display name, age, gender, relationship status, profession, city, languages, what you offer and are looking for, your status line, whether you are available and when you were last active, your review and badge counts, your Supporter mark, and your posts and their meeting spots. They do not see your birthday, your street or neighbourhood, your distance or position, your Star Power balance, or your contacts. Your face setting applies to guests too. Nobody is told a guest looked, and a guest cannot contact you.

The public ledger

Each week we publish the Kingdom's money in and out at nooberly.com/ledger. It shows totals only. It never shows member names or individual amounts.

9. How long we keep things

Data	How long
Profile, posts, calendar, settings	While your account exists, plus the 33-day deletion window. Then deleted.
Sign-in sessions and device records	While your account exists. Deleted with the account. The push token is detached from your account when you sign out.
Temporary uploads	Video chunks uploaded while you record are deleted automatically after one day.
Chats and messages	Kept. A chat is the record of a connection, and the other person keeps their side. If you delete your account, your chats are anchored to your face record and reattached if you come back.
Reviews, badges, behaviour flags	Kept permanently as community safety records, attached to your face record. Your name on reviews you wrote becomes "Deleted Noober" if you leave.
Star Power and Sooper Power ledgers	Kept permanently, attached to your face record. Balances cannot be reset by deleting and rejoining.
Face record and raw profile video clips	Kept permanently, even after deletion. See Section 10.
Reports, blocks, security incidents	Kept permanently as safety records.
Purchase receipts	Kept, attached to your face record, as a financial record.
AI conversations	While your account exists.
A snapshot of your profile details	Kept with the face record after deletion — name, username, birthday, gender, relationship status, profession, address, languages, what you offered and needed — so your account can be restored if you come back, and so age cannot be renegotiated by rejoining.

10. Deleting your account — and what stays

Go to Profile → Settings → Delete Account. You can also email team@nooberly.com and we will start it for you.

Deletion has a 33-day waiting period. During that time your profile is taken out of feeds and search. If you sign back in before the 33 days are up, that cancels the deletion — coming back is the cancellation. The 33 days count from the moment you confirm.

When the 33 days pass, we delete your profile, your posts, your calendar, your sessions and your sign-in account.

What stays, and why. Nooberly only works if a reputation cannot be shed by starting over. So these are kept after deletion, attached to your face record rather than to a name:

The face record itself.
The raw clips of your profile video, as identity evidence.
Reviews you were given and reviews you wrote, badges, and behaviour flags.
Your Star Power and Sooper Power ledgers.
Your chats and messages.
Reports, blocks and security incidents.
Purchase receipts.
The profile snapshot described in Section 9.

If you ever come back, we recognise your face, show you what was kept, and restore it to your new account. You never get a second 33 Star Power welcome.

Legal basis. We keep these records under our legitimate interest in keeping the community safe — stopping fraud, ban evasion and the erasing of reviews other people wrote in good faith (GDPR Article 6(1)(f)). For the face record we also rely on the explicit consent you gave on the consent screen before your first scan (GDPR Article 9(2)(a)). You can object to this retention (Section 11) and we will weigh your objection against those interests and reply.

11. Your rights

Wherever you live, you can ask us to:

Access — get a copy of the personal data we hold about you.
Correct — fix something that is wrong. Most of your profile you can edit in the app yourself. Your date of birth and gender are locked after signup; email us if one is wrong.
Delete — remove your account (Section 10), subject to the safety records kept there.
Port — receive your data in a structured, machine-readable format.
Object — object to processing we base on legitimate interest, including the retention in Section 10.
Withdraw consent — where we rely on your consent (the face scan, location permission, the AI voice). Withdrawing does not undo processing that already happened, and the face record is kept as described in Section 10.

Email team@nooberly.com. We reply within 30 days. We may ask you to confirm you are the account holder first.

If you are in the EU, EEA, UK or Switzerland

Our legal bases are: performing our contract with you (running the app and your account); your consent (the face scan, location permission, and giving your AI your voice); our legitimate interests (safety, fraud prevention, and the records kept after deletion); and legal obligation. You also have the right to complain to your local data protection authority.

If you are in California

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We collect the categories listed in Section 2, including sensitive personal information — your face scan and your precise location — which we use only for the purposes in this policy. You have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for using those rights. California's "Shine the Light" law (Civil Code Section 1798.83) lets you ask about any disclosure of personal information to third parties for their direct marketing; we make none. To make any of these requests, email team@nooberly.com.

12. Adults only

Nooberly is for people aged 18 and over. You enter your date of birth at signup, the app refuses anyone under 18, and our database refuses too. We do not knowingly allow anyone under 18 to create an account, and we do not knowingly collect personal information from anyone under 18.

If we learn that someone under 18 has an account, we will close it and delete the personal data we collected from them. If you believe that has happened, tell us at team@nooberly.com.

13. Security

Everything between the app and our servers travels over encrypted connections (TLS).
The app never talks to our cloud services directly — every call goes through our own servers.
Our face verification server sits on a private network that only our own servers can reach.
Chat photos, voice notes and clips live in private storage and are handed out with short-lived signed links.
Our database uses row-level security policies, and the app has no direct table access to columns like your birthday, address and balances.
Our storage providers encrypt data at rest.
Only one device can be signed in at a time. Signing in on a new phone can trigger a fresh face scan.

No system is perfectly secure, and we cannot promise absolute security. If you think your account has been touched by someone else, email us straight away.

14. Where your data lives

Our servers and storage are in the United States, and the providers in Section 7 process data there and in other countries where they operate. If you use Nooberly from outside the United States, your data is transferred there. Where the law requires it, we rely on approved safeguards for those transfers, such as Standard Contractual Clauses.

15. Changes to this policy

When we change this policy in a way that matters, we will tell you in the app or by email before it takes effect. The date at the top always shows the current version. Using Nooberly after a change means you accept the updated policy.

16. Contact

Privacy questions and data requests: team@nooberly.com
Everything else: team@nooberly.com or our Contact page

Nooberly, Inc.
New York, NY