Privacy Policy

About this policy

This policy explains how NahYeah Fun handles personal information when you use NahYeah. It is written in the style of the Australian Privacy Principles. It does not say that NahYeah Fun is an APP entity.

Information we collect

When you create an account we collect your name, email, password, date of birth, gender, bio, and profile photo. A second photo is optional. The password is stored by Supabase Auth. We also store whether your bubble is visible, your in-app notification choices, and the time the account was last active in ways the app records activity.

If you allow location, we store the current latitude and longitude. A later reading replaces the earlier one. We do not keep a location history. The app has no control that deletes those coordinates. Hiding your bubble does not delete them.

We store chat requests, optional intros, Nah and Yeah decisions, chats, messages, blocks, reports, and in-app notices. Opening a chat records that the other person's messages were read, so the unread count can clear. The sender is not shown a read receipt.

The sign-in session is kept in browser storage. While you are waiting to confirm a new email address, the browser may also keep the email, bio, and photo data for up to 7 days so the photos can be saved after you sign in.

Why we use it

We use this information to create and protect your account, show profiles and distances, deliver requests, chats, and in-app notices, and review reports. Last activity is used to hide profiles from discovery after 30 days without recorded activity. It is not shown as a last-seen time.

You must be 18 or older. NahYeah uses the date of birth you supply and does not verify your age or identity.

Advertising

Google AdSense may show ads in Bubbles, the profile discovery screen. Ads are not shown in chats, requests, account screens, or these legal pages.

Google and its advertising partners may store and read cookies and similar local storage to deliver ads, measure them, and limit fraud. Where you consent, that information can be used to personalize ads. If you are in the European Economic Area, the United Kingdom, or Switzerland, NahYeah waits for Google's consent message and does not request an ad unless the required consent and legal bases are present. If you do not consent, or ads are not available, Bubbles still works and no advertisement box is shown.

When an ad loads, Google can receive the technical data its script collects on Bubbles, including your IP address and cookie or local-storage identifiers. NahYeah does not pass your name, email, photos, messages, requests, or precise coordinates into the ad tag.

You can change an advertising choice from the consent link Google shows on Bubbles, or at Google's ad settings.

Who can see it

NahYeah stores the name entered when the account is created. The account owner can see that stored name on their own profile. Other members can see the first name, age, bio, photos, and a distance label when the profile is available to them. They do not receive the rest of the stored name, and they do not see the email, date of birth, or coordinates. Distance is shown as “Less than 1 km away” or rounded to the nearest kilometre. Notices use the first name. A new-message notice can contain the whole message. A Nah notice is created even when notification settings are off.

Gender is male or female, as you choose. It is used for discovery filters and the colour around a profile photo. The profile page does not print the word Male or Female.

Admins can see reports, including the reporter's stored name and id, the reported account id, the reason, and a snapshot of the reported person's stored name, date of birth, gender, bio, and photos.

Photos

Profile photos are stored in a private Supabase storage bucket. NahYeah does not show them through public storage URLs. When the app displays a photo, it uses a signed URL that lasts about 15 minutes. A signed-in person receives that URL only when NahYeah's storage rules allow them to see the photo, such as the owner, an admin, a person in a chat or pending request, a person who blocked that member, or another member while the bubble is visible and the account is active and has not blocked them.

If a reported member later deletes their account, a copy of a reported photo can be kept in the same private bucket so an admin can review the report.

Where it is stored

Account, profile, message, report, and photo information is stored in Supabase. The connected Supabase project's configured region is Northeast Asia (Tokyo). Supabase also sends account confirmation and password-reset emails. This policy does not name a website-hosting region, and it does not say that every related process, such as account email or backups, stays in Tokyo.

Deletion

Deleting an account removes the login, profile, ordinary profile photos, and that person's requests, chats, messages, blocks, and own notices. The other person's copy of the chat is removed as well. A notice already delivered to the other person can still contain the first name and the message text. Reports can be kept, including the snapshot and any retained photo copy described above. A suspended account cannot be deleted from the app.

Access and correction

You can edit your bio and photos in the app. You can hide your bubble, change in-app notices, deactivate, or delete the account, unless it is suspended. You cannot change your name, email, gender, or date of birth in the app, and you cannot clear a saved location in the app.

To ask for a copy of your personal information, or for a correction, including a correction the app cannot make, email support@nahyeah.fun. Include the email address on the account and say what you want to access or correct. We aim to respond within 30 days.

Privacy complaints

Email support@nahyeah.fun and describe the privacy complaint. We aim to respond within 30 days. If you are not satisfied with the response, you can contact the Office of the Australian Information Commissioner.