Privacy Policy
Nambu · updated 17 October 2026
TBDThe grievance officer's name and email are placeholders. Set them in src/lib/site.ts before launch.
1. What we collect
- Your Google account name, email and avatar, when you sign in.
- Your username.
- Your reviews, photos, and the places you add.
- For each review or new place: your GPS position and its accuracy at that moment. We use it only for the location check.
- Removal-request contact details and proof links, if you send one.
2. What's public
Your username, avatar, reviews, photos, the places you added, and your profile page are public, including the link previews and story cards made from them.
Never public: your email, or the GPS position recorded when you post a review. When you add a place, its pin is placed where you're standing, and your profile shows it as added by you.
3. Photos
Photos are compressed on your phone before upload, which strips location data (EXIF / GPS) and other metadata.
4. Analytics and cookies
We use Vercel Web Analytics, which is cookieless and counts page views without identifying you. We set no advertising cookies. Signing in uses a session cookie so you stay signed in.
5. Who processes your data
- Supabase: database, sign-in and photo storage. Your data is stored in India (Mumbai, ap-south-1).
- Vercel: hosting and analytics. The app's server code runs in Vercel's default region in the United States (Washington, iad1); your data stays in Mumbai.
- Google: sign-in only.
6. How long we keep it
Reviews and places stay until you delete them or we remove them. Removal-request contact details are used only to verify the request and are deleted once it's resolved. Reports are kept as moderation records.
7. Your rights
Under the Digital Personal Data Protection Act, 2023 you can ask for access, correction, deletion, and grievance redress. Delete a review in the app any time. To delete your account and everything with it, email the grievance officer; we confirm within 15 days.
8. Children
Nambu is for people 18 and older to post. We don't knowingly collect data from anyone under 18; if you think we have, tell the grievance officer and we'll delete it.
9. Contact
Grievance officer: TBD · grievance@example.com
This policy was last updated on 17 October 2026. See also the Terms of use.