Privacy Policy

Effective November 11, 2026.

Nowish is made by Weslandia Ventures. This policy explains what the app collects, why, how long we keep it, and how to delete it.

What we collect

• Your Apple or Google account ID. When you sign in with Apple or Google, we receive an account identifier so we know it's you next time. Apple or Google may also share your account email address at sign-in; our sign-in service stores it with that ID. We never show it to anyone and never use it to contact you.
• Your display name. The name you type. People in your groups see it when you turn your light on or tap I'm Down.
• Your push token. A token for your device, and whether it is an iPhone or Android phone, so we can send you a notification when someone in your group turns their light on.
• Group data. Groups you create or join, their names and join codes, and whether you muted one. If you block or report someone, we keep that record to enforce it and review it.
• Lights and responses. Lights you turn on (group, optional note, when it was lit and ended), whether you tapped I'm Down on someone's light, and your answer to "Did you end up together?". When a notification to you fails, we log the failure so we can fix delivery.
• Your subscription. Getting lights and tapping I'm Down are free; turning your light on is a yearly subscription bought in the App Store or Google Play. Apple or Google takes the payment; we never see your card or payment details. Our purchase provider, RevenueCat, receives the purchase from the store and tells us whether your subscription is active, when it ends, which store it came from and which product it is. RevenueCat knows you only by a random ID we make for this, never your name, email or account ID. If we give you free lighting, we record that too.
• Wrong join codes. When you enter a code that matches no group, we note the time (not the code) for about an hour, so nobody can guess codes. After 10 in an hour, joining pauses until the hour is up.
• Story codes. When a group's creator shares the group to a story, we keep the separate code made for it, which stops working after 24 hours.

We do not collect your location, contacts, photos, or browsing activity. Save image adds a story card to your photos only when you ask, and the app never reads your photo library. There are no ads, no tracking across other apps, and we do not sell or share your data.

Why

Only to run the app: to sign you in, show your groups and their lights to the people in them, send a notification when a light goes on, know whether you can turn your light on, and keep people safe through blocking and reports.

Who sees what

Only members of a group see that group and its lights. Before you tap I'm Down, you see how many people are down, not who. After you tap, you see who's down. Nobody is ever shown who didn't respond. A group's member list is visible only to the person who created it.

Our service providers process this data for us: Supabase (database and sign-in), Expo (delivering notifications), RevenueCat (subscription status), Resend (emailing reports to our moderator), and Apple and Google (sign-in, notification delivery and payments).

How long we keep it

As long as your account exists, except reports (below). A light's history stays with its group until the group's creator deletes it, which deletes the group and everything in it.

Deleting your data

In the app, go to Settings, then Delete my account. This permanently deletes your profile, the groups you created, your memberships, your lights and our record of your subscription, and signs you out. If you signed in with Apple, we also revoke the app's access to your Apple ID. Deleting your account does not cancel a subscription: it keeps renewing until you cancel it in your App Store or Google Play settings. RevenueCat keeps the purchase record under the random ID, which we can no longer connect to you. Taps of I'm Down you made on other people's lights stay in their history without your name or ID.

Reports are the one exception, to keep people safe. A report you made, or one made about you, is kept after either account is deleted, without your name, and is deleted 1 year after we close it (if the person it is about is still suspended, once the suspension is lifted). If an account was suspended for breaking our terms, we keep a one-way fingerprint of its Apple or Google sign-in, which can't be turned back into your details, so the same sign-in can't create a new account. It is deleted if the suspension is lifted. If you delete your account while a report about you is still open, we keep that fingerprint until the report is closed, usually within a day, so the report can still be acted on. A copy of each report is emailed to our moderator through Resend, and we delete those emails when we close the report.

Children

Nowish is not for children under 13, and we do not knowingly collect their data.

Changes

If we change this policy, we will update this page and the effective date.

Contact

Questions or requests: support.