1. Who we are, and who this applies to
Nolies ("we," "us," "our") operates the Nolies app and website — anonymous messaging, reels, social cards, and Nolies Connect (dating). Nolies is for people 18 and older. This policy explains what we collect across all of it, why, who we share it with, and your rights over it.
2. Information we collect
What you give us directly:
- Account info: username, email, password (hashed, never stored in plain text)
- Profile info: avatar, bio, and — if you use Nolies Connect — display name, birthdate, gender, location (country/state/city), religion (optional), and relationship purpose
- Content: messages you send or receive, reels, comments, social cards you create, and Connect chat messages
- Photos you upload, including Connect profile photos (each is reviewed before it's visible to anyone else)
- Payment info for coin purchases and Connect verification, processed by Apple/Google's in-app purchase systems — we never see or store your card details
- Anything you send us directly: support requests, feedback, appeals
What we collect automatically:
- Device info (model, OS version, a device identifier) and IP address — used for security, abuse prevention, and to enforce bans (see Section 6)
- Approximate location derived from IP (country/city level) for anonymous messages — never precise GPS
- App usage and crash data, via Firebase Analytics and Crashlytics
- A push-notification token, if you enable notifications
What we deliberately do not collect or keep:
- Your government ID photo. Nolies Connect verification is handled by Didit, our identity-verification partner — Didit confirms your identity and age to us; we never receive or store the ID image itself.
- Precise GPS location, ever.
- Payment card numbers — Apple and Google handle that entirely.
3. How we use it
- Run the app: deliver messages, load your feed, process purchases, verify your Connect profile
- Keep it safe: automated scam/spam/harassment detection, device and IP-based ban enforcement, fraud prevention
- Improve the product: aggregated, anonymized usage analytics
- Talk to you: respond to support requests, send service notifications (matches, replies, verification results)
- Meet our legal obligations: respond to lawful requests, report child exploitation material to NCMEC as required by law
We do not use your messages or Connect profile data to build advertising profiles of you sold to third parties.
4. Who we share it with
We use a small, named set of service providers to run Nolies — we don't sell your data, and we don't share it beyond what's needed to operate these services:
- Firebase (Google): hosting, push notifications, crash reporting, analytics
- Didit: identity/age verification for Nolies Connect — receives your ID for verification only; we don't receive the ID image back
- Google AdMob: shows ads in the app (only if you haven't opted for ad-free); receives an advertising identifier and, on iOS, only with your App Tracking Transparency consent
- Meta/Facebook: ad performance measurement for our own marketing, gated by the same iOS tracking consent
- Apple / Google: process in-app purchases; we receive confirmation of a purchase, never your card details
Beyond these, we share information only when legally required (a valid court order, or to report child exploitation to NCMEC), or with your explicit consent.
5. Data security
Passwords are hashed with bcrypt. Sensitive on-device data (like your Private Vault, if you use it) is encrypted locally. We apply standard technical and access-control safeguards across our systems. No method of transmission or storage is 100% secure, and we won't claim otherwise — if anything relevant to your account is affected by a security incident, we'll notify you.
6. Device and IP data — why we keep it, specifically
Unlike most of what's in this policy, device identifiers and IP addresses aren't collected to serve you better content — they exist so that a banned account can't just create a new one on the same phone. This is the mechanism behind our device-ban enforcement, and it's why removing this data isn't offered as a standalone opt-out the way marketing analytics might be.
7. Data retention
- Account and content data: kept while your account is active
- Verification decision (approved/declined), not the ID image: kept for the life of your Connect profile
- Device/IP abuse-prevention records: retained after account deletion specifically to keep a ban effective — see Section 9
- Deleted-account data: purged or anonymized within 30 days of a confirmed deletion request, except what Section 9 covers
8. Your rights
Depending on where you live (including under GDPR and CCPA), you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your account and associated data
- Export your data
- Opt out of non-essential communications
9. Deleting your account
Request deletion from Settings in the app, or by emailing privacy@nolies.xyz. We'll purge or anonymize your account, profile, messages, and Connect data — photos, matches, likes, and verification status included. Two narrow exceptions: content already reported for review may be retained briefly to complete that review, and the device/IP records described in Section 6 are kept specifically so a ban survives account deletion, consistent with the safety purpose they exist for in the first place.
10. Nolies Connect — additional notes
Your Connect dating profile is intentionally kept separate from your anonymous-messaging identity in our systems — there's no database link between the two, so someone can't work backward from a Connect match to your anonymous inbox, or vice versa. Anonymous Spark, if you opt in, works the same way: it's a de-identified signal, never traceable back to a specific message or sender.
11. Cookies (website)
Our website uses essential cookies to keep you logged into the admin/dashboard areas, and analytics cookies to understand site usage. You can control cookies through your browser settings.
12. Changes to this policy
We'll update the "Last updated" date above and, for material changes, notify you in-app before they take effect.
13. Contact us
Privacy questions or requests: privacy@nolies.xyz
Safety concerns: safety@nolies.xyz