Privacy Policy

Data controller

The data controller is Filippo Arcuri, an individual based in Italy, who develops and operates NMA Chat.

For questions about privacy or the processing of personal data, contact nomorealonechat@gmail.com.

Scope of this policy

This policy applies to the website, the NMA Chat app and related features, including registration, profile, Shuffle, chat requests, conversations, Stories, Diary, reports, moderation, notifications, data export, purchases and account deletion.

NMA is reserved exclusively for people aged 18 or older.

Technical services used

NMA uses Firebase Authentication for access, Firestore for application data, Firebase Storage for photos and media, Cloud Functions for server logic and safety features, Google Sign-In for authentication, Expo for push notifications and RevenueCat for the technical management of in-app purchases related to Moments.

These providers may process data on behalf of NMA under the applicable agreements and their own terms. App stores directly manage payment, billing and full payment instrument details.

Account and access data

Data may include user ID, email address, sign-in provider, registration date and time, last access, account status and technical information needed to maintain the session and protect access.

When you use Google Sign-In, NMA receives only the information made available by the provider and needed to create or access the account.

Profile data

Data may include display name, username, date of birth or age needed to confirm the 18+ requirement, bio, photos, chat availability, preferences, settings and other information you choose to add to your profile.

The information made public or visible to other users depends on the feature used, the available settings and the profile status.

Required and optional data

Data marked as necessary during registration, access or profile completion must be provided to use the relevant features. Without this data, it may not be possible to create an account, confirm the 18+ requirement or use the service.

Bio, Diary content, Stories and other additional information are optional. You may choose not to provide them or remove them, subject to the available features and the safety needs described in this policy.

Profile photos

Profile photos are stored to display the profile, enable the interactions provided by the service and apply community rules.

A replaced or removed photo may require technical time before disappearing from all systems and may be retained separately when linked to a report, a safety review or abuse prevention.

Chat messages and media

NMA processes messages, images, videos, voice messages, Story replies and other media needed to deliver, synchronise and display conversations.

Content already sent may remain visible in existing conversations even when some account features are temporarily limited, suspended or under review.

Chat requests

Chat requests may include sender, recipient, status, opening content, technical identifiers and timing information.

Requests that do not become conversations close after 24 hours. Some minimum technical data may be retained for longer when needed for inbox integrity, non-misleading metrics, safety and abuse prevention.

Stories

Stories and related media are processed so they can be shown for the period defined by the product. Views, reactions, replies and technical data may be processed for the feature to work.

After expiry or removal, a copy may be retained when the Story is linked to a report, a safety review or an applicable obligation.

Diary, comments and reactions

Diary content may include text, images, mood and the information needed to display it on the profile and in the relevant areas of the app.

Comments, replies, likes and other reactions are linked to the account and relevant content. Removed content may be retained when needed to handle a report, an appeal or protect the service.

Special-category data provided voluntarily

Texts, photos, messages, audio, Stories or Diary content may voluntarily reveal sensitive personal information, such as sexual orientation, beliefs, health or other special-category data.

NMA does not require this information to use the service. Before publishing or sending it, consider that it may be seen by the people authorised to receive that content.

Blocks and safety preferences

NMA retains blocking relationships and preferences needed to prevent new interactions between the accounts involved, protect the inbox and apply the user’s choices.

Reports and evidence

A report may include its category, description, accounts involved, reported content, content copies, related media and context needed for review.

This information may be retained to handle the case, protect users, review appeals, reconstruct decisions and prevent further abuse.

Moderation and audit records

NMA may record warnings, limitations, reviews, suspensions, closures, restorations and other moderation actions, together with the information needed to understand the reason and verify correct application.

Measures may affect individual features or the entire account and are applied for protective, safety and community-rule purposes.

Automated tools and human review

NMA may use technical checks, automatic rules and support tools to identify anomalies, potentially unlawful content, attempts to evade safety measures or abusive behaviour.

These tools support service protection and the organisation of reviews. When context requires it, the situation may be reviewed by a person. NMA does not present automated moderation as infallible and allows appeals in the cases provided.

Push notifications

If you enable notifications, NMA may store device tokens and notification preferences to deliver requested alerts.

Tokens are updated or disabled based on settings, account status, account deletion and the service’s technical processes.

Purchase data

Moment purchases are handled by app stores and RevenueCat. NMA does not receive full card or payment instrument details.

NMA may receive the purchased product, transaction status, currency, technical environment, identifiers and other information needed to validate, restore, attribute or manage the purchase.

Data export

When you request a copy of your data, NMA processes the request, prepares the file and may provide a protected temporary link.

Request data and generated files are retained only for as long as needed to complete, make available and protect the process.

Purposes and legal bases

Data is processed to create and manage the account and provide profile, requests, chat, Stories, Diary, notifications, purchases, export and deletion features. These activities are necessary to perform the relationship with the user and provide the requested functions.

Data may also be processed for safety, fraud and abuse prevention, moderation, defence of rights, technical stability, dispute management and reliable service improvement, based on the legitimate interests of the controller and users in having a safe and functioning service.

Where required by law, processing may be based on consent, which may be withdrawn without affecting processing already carried out. Some data may also be processed to comply with legal obligations or respond to lawful requests from authorities.

Recipients of data

Data may be processed by technical providers supporting authentication, cloud infrastructure, storage, notifications, payments, assistance and safety, only to the extent needed to provide their respective services.

Content intended for other users is disclosed to the people authorised to view it based on the feature used. Data may also be disclosed to authorities or entitled parties when required by law or necessary to protect rights and safety.

International transfers

Some technical providers may process data outside the European Economic Area. In these cases, processing is carried out using the safeguards provided by applicable law, such as adequacy decisions, standard contractual clauses or other recognised safeguards.

For information about the safeguards applied to a specific processing activity, contact nomorealonechat@gmail.com.

Retention

Active account data is retained while the account remains operational and for as long as needed to provide the requested features.

Messages and content are retained for as long as needed to display them to the people involved or until they are removed through the available features. Reports, evidence, moderation records and minimum anti-abuse data may be retained for longer when needed to protect users, review appeals, prevent evasion or defend rights.

Temporary export files, invalid tokens and technical data no longer needed are removed or made unusable through periodic processes. Backups and logs may be deleted according to providers’ technical cycles and not always at the same time as active systems.

Account deletion request and completion

You can start deletion in the app through Settings → Data and access → Delete account. If you cannot access the app, you can request it through the dedicated public page or contact nomorealonechat@gmail.com.

While the request is being processed, the profile is hidden and access to features may be disabled. This temporary phase does not replace final deletion.

Once deletion is completed, the account and associated data are deleted or anonymised, except for strictly necessary information that must be retained for safety, fraud and abuse prevention, dispute management, purchases, defence of rights or applicable obligations.

Backups, logs and technical security

Backups, error logs, security events and technical records may contain limited data needed to restore the service, investigate failures and prevent abuse.

Their removal follows the technical cycles of the systems used and may not coincide with immediate removal from active systems. Access is limited to technical and safety purposes.

Data subject rights

Where provided by law, you may request access, correction, deletion, restriction, objection and portability, and withdraw consent where processing is based on it.

To exercise your rights, contact nomorealonechat@gmail.com with the relevant account details. NMA may request proportionate information to verify identity without asking for unnecessary documents.

Complaint to a supervisory authority

If you believe the processing of your data breaches applicable law, you may lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority in the country where you live or work, without affecting any other available remedies.

Minors

NMA is reserved for people aged 18 or older and is not designed for minors.

If you believe that a minor is using the service or that content involving a minor is present, contact nomorealonechat@gmail.com promptly.

Changes to this policy

This policy may be updated when the service, providers, processing activities or applicable obligations change.

Material changes will be communicated through the website, app or other appropriate channels before they take effect, where required.