Privacy Policy

About This Policy

nprsn (“we,” “us,” or “our”) operates the nprsn mobile application (the “App”) and the website nprsnapp.com (the “Site”). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights regarding that information.

By creating an account or using the App, you acknowledge that you have read and understand this Privacy Policy. Your use of the App is governed by our Terms of Service, which constitute the binding agreement between you and nprsn.

Who This App Is For

nprsn is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you are under 18, do not create an account or use this App. If we become aware that a user is under 18, we will terminate their account and delete their data promptly.

What Information We Collect

Information you provide directly:

• Your first name (required to create an account) and profile photo (optional when creating an account, but required before you can go live — a navy placeholder image is displayed until one is added)
• Your date of birth, collected at signup solely to verify that you meet the 18+ age requirement. Date of birth is not stored after that verification is complete.
• Your email address, collected for email/password sign-up accounts and verified before your profile can be created. Google and Apple sign-in accounts are verified through those providers. Your email address is used to reach you for account-related communications and policy updates.
• Optional profile information including education, occupation, employment status, where you live, where you grew up, romantic status (optional), interests, and up to two personality photos
• Daily session check-in information including who you are out with, what brings you out, and what you are looking for during a session. This information is visible to other users only during an active live encounter and is not retained after your live session ends.
• Account and authentication information via email/password, Google Sign-In, or Apple Sign-In

Information collected during app use:

• Real-time GPS location data, collected only when you actively start a live session. Your precise location is used to show you other active users nearby and to facilitate the in-person meetup sequence. During an active meetup, if both users have mutually confirmed location share, background location access may be requested to maintain mutual position visibility while either user’s app is backgrounded. Mutual location visibility between meetup partners ends at QR code exchange; background location access deactivates at that same moment. General live-session location collection continues until your live session ends. Location data is deleted when your live session ends — promptly upon manual session end, and within 15 minutes upon natural timer expiration under normal operating conditions. We do not intentionally retain or archive your location history beyond this window.
• Location notes — short freeform text you may add to your position during an active meetup, visible only to your meetup partner. Location notes are not retained beyond your live session and are deleted when your session ends or is cancelled.
• Profile photos and personality photos you upload, stored in Firebase Storage. All uploaded photos are automatically scanned upon upload using Google Cloud Vision content moderation. Images flagged as violating our content standards are removed from our servers in the same step as flagging.
• Connection records between users who have mutually progressed through the app’s consent sequence
• In-app chat messages between mutually connected users. Chat is only available after two users have completed the in-person meetup sequence.
• Notification preferences and device token, used to deliver push notifications to your device
• Reports submitted through the app, which are logged and reviewed by the nprsn team

Information collected automatically:

• Firebase Authentication records your account creation date, last sign-in, and authentication method (email, Google, or Apple)
• Expo’s push notification service assigns a device token to deliver notifications to your device. This token is used to send you in-app notifications and is not used for advertising or shared with third parties for any other purpose

Analytics and Crash Reporting

nprsn does not currently use analytics services and does not track user behavior for analytics purposes. nprsn does not use crash reporting or diagnostic tools that collect device or location data. The Firebase platform we use includes analytics capabilities that we have not integrated or enabled. We may implement aggregate or de-identified usage analytics in the future, which will be disclosed in an updated version of this policy. Any such analytics would reflect trends across the platform as a whole and would not identify individual users.

How We Use Your Information

We use the information we collect to:

• Create and maintain your nprsn account
• Verify that users meet the 18+ age requirement at signup
• Verify email addresses for email/password accounts before profiles can be created
• Display your profile to other users who have reached the appropriate mutual consent step in the app’s sequence
• Provide real-time location-based matching during live sessions
• Facilitate the in-app connection and meetup sequence
• Deliver push notifications related to your live session and connections
• Moderate uploaded content to maintain platform safety standards
• Maintain platform safety, investigate reports, and prevent abuse
• Reach you for account-related communications and policy updates

We do not use your information for advertising. We do not sell your personal information. We do not use your information to build behavioral or advertising profiles unrelated to the direct operation of the App.

Face Photos

nprsn is designed to minimize identifying information shared upfront. Your profile photo is displayed to nearby users during live sessions, while your name, location, and profile details remain hidden until mutual consent steps are completed. Your photo is used to provide this in-app function and is not used for facial recognition, identity verification, advertising, or any form of behavioral or advertising profiling. All uploaded photos are automatically scanned for content violations upon upload and flagged images are removed from our servers immediately. Your photo is not shared with advertising platforms, data brokers, or analytics providers. If you delete your account, your photos are deleted from active storage promptly. Backup and infrastructure-level retention practices are governed by Google/Firebase’s own terms of service, which are outside nprsn’s direct control.

Location Data

nprsn collects your precise GPS location only during an active live session that you explicitly initiate. Location collection begins when you tap “Go Live” and stops when your session ends.

When you end a session manually — by tapping “End Live Session” or logging out — your location record is deleted promptly. When a session expires naturally via its timer, your location record is removed within 15 minutes by an automated server-side process under normal operating conditions.

During an active meetup, when both users have mutually confirmed location share, nprsn may request an “Always Allow” location permission upgrade. This permission is requested only at that specific moment, only for that specific meetup pair, and is never requested at general app launch or during a standard live session. An in-app explainer screen is shown before the system permission dialog on first request. If granted, background location access remains active until both users complete the QR code exchange — at which point background location deactivates immediately. Mutual location visibility between you and your meetup partner also ends at QR code exchange. Your general live-session location — collected from the moment you tapped Go Live — continues to be collected and updated until your live session ends, at which point it is deleted per the standard session-end schedule described above. Background access also deactivates if the meetup is cancelled by either user, if either user chooses appear offline mid-meetup, upon the 1-hour meetup auto-cap, or when the live session ends. If you decline this upgrade, the meetup continues to function normally. You may revoke or downgrade this permission at any time through your device’s iOS Settings.

We do not intentionally retain or archive location history beyond these windows. We do not track your location outside of an active session.

How We Share Your Information

We do not sell your personal information. We share information only in the following limited circumstances:

• Firebase (Google) — our backend infrastructure provider, handling authentication, real-time database, file storage, and cloud functions. Firebase processes data on our behalf under Google’s data processing terms.
• Google Cloud Vision — our content moderation provider, which scans uploaded photos for content violations upon upload. Images are processed and flagged images removed in the same step; images are not retained by Google Cloud Vision beyond the scanning process.
• Expo — our app development and push notification platform. Expo’s notification service relays push notifications to Apple and Google on our behalf.
• Apple Sign-In — when you sign in with Apple, we receive your name and email address, which are used to create and authenticate your account.
• Google Sign-In — when you sign in with Google, we receive your name, email address, and profile photo URL via Google’s standard authentication token, which is used to create and authenticate your account. We do not separately store Google’s profile photo.
• Legal requirements — we may disclose information if required by law, court order, or to protect the safety of our users or the public.
• User interactions — once you voluntarily share information with another user through the App’s consent sequence, we cannot control how that user retains or uses what they have seen, including through screenshots or other means. Please share information only with users you are comfortable sharing it with.

Data Retention

We retain your personal information for as long as your account is active. Deletion affects different categories of data in different ways, as described below. Specific retention periods by data type:

• Real-time location data — deleted when your live session ends: promptly upon manual session end, and within 15 minutes upon natural timer expiration under normal operating conditions. Mutual location visibility between meetup partners and background location access both end at QR code exchange. No location history is intentionally retained beyond these windows.
• Location notes — deleted when your live session ends or the meetup is cancelled. Not retained beyond the active session.
• Date of birth — not retained after age verification is complete at signup.
• Email address — retained for the life of your account for account-related communications.
• Daily session check-in data — not retained after your live session ends.
• Romantic status — optional field, retained until you delete your account.
• Profile information and photos — retained until you delete your account. Photos are deleted from active storage upon account deletion; backup and infrastructure-level retention practices are governed by Google/Firebase’s own terms of service.
• Chat messages — retained until you delete your account, at which point your messages are anonymized in other users’ chat threads (see Account Deletion below).
• Connection records — retained until you delete your account or manually remove a connection. Connection records become hidden from your in-app view after approximately 7 days of inactivity but remain in the database until removed or your account is deleted.
• Notification preferences — retained while your account is active. Removed upon account deletion.
• Device token — retained while your account is active and used to deliver push notifications. Removed upon account deletion.
• Authentication records — retained while your account is active. Removed upon account deletion.
• Reports submitted — logged and retained for platform safety purposes regardless of account deletion status.
• Safety records — limited safety-related records (reports submitted, reports received, blocks initiated) may be retained after account deletion for platform safety purposes, as permitted by law. These records are stored separately from your profile and are not used for any commercial purpose.
• Suspended accounts — we may retain information associated with a suspended or terminated account for as long as reasonably necessary to enforce our Terms, investigate or prevent abuse, protect the safety of our users, prevent circumvention of account restrictions, comply with legal obligations, or resolve disputes.

Account Deletion

You may request deletion of your nprsn account at any time from within the App under Settings. When you submit a deletion request, your account will be permanently deleted within 25 hours under normal operating conditions — following a 24-hour cancellation window and an hourly deletion sweep. You may cancel your request at any time during the 24-hour window by returning to Settings and selecting “Cancel Deletion.” After the grace period, deletion is permanent and cannot be undone.

During the 24-hour cancellation window, your account is in a pending deletion state. You will not be visible to other users and cannot go live until you either cancel the deletion request or the deletion is completed.

Deletion affects different categories of data as follows:

• Your in-app messages are anonymized first — message text is replaced with “[deleted user]” and your sender name with “deleted user”
• Other users’ connection records referencing your account are updated to show “Account deleted” with your photo removed
• Your profile information, connections, live session status, and block list are removed
• Your uploaded photos are deleted from active storage. Backup and infrastructure-level retention practices are governed by Google/Firebase’s own terms of service.
• Your authentication record is deleted last
• Limited safety-related records may be retained as described in Data Retention above
• Reports you submitted are retained for platform safety purposes

Account deletion is distinct from account suspension. If your account has been suspended by nprsn, the deletion process described above does not automatically apply. Contact us at info@nprsnapp.com with questions about a suspended account.

Your Privacy Rights

California residents: Although nprsn is not currently subject to CCPA compliance thresholds, we voluntarily extend the following rights to all California users as a matter of good practice: the right to know what personal information we collect and how we use it; the right to request deletion of your personal information; the right to request correction of inaccurate information we hold about you; and the right to opt out of any future sale of your personal information (we do not currently sell personal information). We do not discriminate against users for exercising these rights. We may take reasonable steps to verify your identity before fulfilling certain requests. To make a request, use the deletion flow in Settings or contact us at info@nprsnapp.com.

Washington residents: Washington residents may request access to, correction of, or deletion of their personal information by contacting us at info@nprsnapp.com.

All US users: Residents of other states with applicable consumer privacy laws have the right to request access to and deletion of their personal information. We may take reasonable steps to verify your identity before fulfilling certain requests. Contact us at info@nprsnapp.com to exercise these rights.

Data Security

We use technical and organizational safeguards designed to protect your information, including Firebase security controls such as encrypted data transmission and Firebase Security Rules that restrict each user’s data to their own account. Access rules are applied consistently across all data categories, including blocked-user lists and account deletion requests, which are readable and writable only by the account owner. All uploaded photos are scanned automatically for content violations upon upload. No method of transmission or storage is 100% secure. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

Children’s Privacy

nprsn is not intended for anyone under the age of 18. We do not knowingly collect personal information from minors. Age is self-reported at signup via a date of birth field — users who indicate they are under 18 are blocked from creating an account. Users signing in via Google or Apple receive the same age verification check before their account becomes active. If you believe a minor has created an account, please contact us at info@nprsnapp.com and we will investigate and delete the account promptly. Age verification is currently self-attestation only. Enhanced verification may be implemented in a future version of the App.

Third-Party Links and Services

The App may reference or link to third-party services. This Privacy Policy does not apply to those services. We encourage you to review the privacy policies of any third-party services you access.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App and updating the “Last Updated” date above. Continued use of the App after changes are posted constitutes your acknowledgment of the updated policy.

Contact Us

For privacy-related questions, requests, or concerns:

nprsn
info@nprsnapp.com
nprsnapp.com