Privacy Policy
This Privacy Policy explains how Ncntrs (“we,” “our,” “us”) collects, uses, and shares your personal information when you use our mobile app or website (the “Service”). By using the Service you agree to the practices described here.
1. Data we collect
We collect the following categories of information:
- Account information: your email address, chosen name, and an avatar URL when provided by your sign-in provider.
- Authentication identifiers: a stable identifier from Apple or Google if you sign in with those services, a hashed password if you sign up with email, and Sanctum API tokens issued to your device.
- Usage data: basic technical information sent by your device or browser (IP address, platform, locale, crash reports) used to keep the Service running and secure.
- Content you provide: profile details, event listings, messages, and other content you choose to post.
2. How we use your data
- To create and maintain your account and authenticate your sessions.
- To match you with social events and other users.
- To keep the Service secure (fraud, abuse, rate-limiting).
- To respond to your support requests.
- To comply with legal obligations.
3. Sign in with Apple and Google
If you sign in with Apple or Google, those providers send us limited profile information (such as name, email, and a stable user identifier). If you use Apple’s private email relay, we receive a relay address rather than your real email. Apple and Google also send us notifications (for example, if you revoke access) so we can keep your account in sync; when they tell us you deleted your account, we delete our record.
4. Sharing
We do not sell your personal data. We share information only with:
- Service providers who help us operate the Service (cloud hosting, analytics, crash reporting) under contracts that require confidentiality.
- Other users, limited to what you choose to make visible (e.g. your name and avatar on your profile).
- Authorities when required by law, subpoena, or to protect the rights, safety, or property of Ncntrs or others.
5. Data retention and deletion
When you delete your account, your record is soft-deleted and permanently removed from our active systems after 30 days. During the grace period you can restore your account by signing in again. Limited logs may persist in backups for up to 90 days after permanent deletion and are then overwritten or purged. Where the law requires us to keep certain records (for example, tax or security logs), we retain only the minimum necessary for the required period.
6. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, or to object to or restrict certain processing. You can exercise most of these directly in the app (Profile → Delete account) or by emailing us at privacy@ncntrs.com.
7. Security
We use standard security measures — HTTPS in transit, hashed passwords, Sanctum tokens scoped to each device, and production data isolated from development environments. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as required by applicable law.
8. Children
The Service is not directed to children under 18 and we do not knowingly collect personal data from them. If we learn we have collected data from a minor, we will delete it promptly.
9. International transfers
We host the Service on cloud infrastructure that may process data in countries different from yours. We rely on appropriate legal mechanisms (such as standard contractual clauses) to protect personal data during these transfers.
10. Changes to this Policy
We may update this Policy from time to time. If changes are material, we will notify you via the app or by email. The “Last updated” date at the top indicates when the Policy was last revised.
11. Contact
Questions about privacy? Email privacy@ncntrs.com.