Privacy Policy

What we collect

This is the complete list — there isn't a longer one hiding behind it. If it's not written here, we don't collect it.

• Account basics: your email, username, display name, and password. Your password is hashed before it ever touches our database — we can't see it, and neither can anyone who gets access to the database.
• What you post: your timeline posts, comments, reactions, poll votes, ratings and reviews, and any photos you upload.
• Home city: guessed once, automatically, from your IP address the first time you post or set your status — so posts can show "from City." We store the resulting city name only, never the IP address itself. You can switch on travel mode to show a different city temporarily, and an admin can reset a wrong guess if needed.
• Push notification subscription: only if you turn notifications on. Your browser hands us a subscription endpoint so we know where to deliver a notification — this is standard Web Push, and it necessarily passes through your browser or OS's own push service (Apple, Google, or Mozilla, depending on your device). That's how push notifications work everywhere on the web, not a third party we chose to add.

That's it. No analytics scripts, no ad SDKs, no tracking pixels, no cookies beyond the one that keeps you signed in.

What we never do

• We never sell or rent your data to anyone, for any reason.
• We never share your data with advertisers or data brokers.
• We don't run an algorithmic feed. There's no ranking model, no engagement optimization, no AI deciding what you see — your timeline is simply chronological posts from people you follow.
• No AI model is trained on your posts, messages, photos, or activity.
• We don't track you across other apps or websites.
• We don't show ads, so there's nothing to target with your data in the first place.

Who can see your data

• Your friends and followers see what you post, based on the audience you choose for each post and your own privacy setting.
• Admins and moderators can view reported content to act on a report — they don't browse accounts otherwise, and moderation actions are logged.
• Show and movie details (posters, titles, cast) come from The Movie Database (TMDB). A search you make gets sent to TMDB as a normal lookup, the same way any app that shows movie posters works — it isn't tied to your account identity.

Emails we send

Only account-related emails — password resets and security notices — sent from our own mail server. We don't use a marketing platform, and we don't send promotional email.

Data retention & deletion

Your data is kept only for as long as your account exists. You can request account deletion anytime from Settings → Data. The request opens a private support thread so Nous staff can verify that the request came from the account owner before deletion.

Completed deletion is permanent. Every post, comment, reaction, photo, and profile field tied to your account is removed after verification and final confirmation — there's no soft delete, no backup copy kept on your behalf, and no recovery period. Once it's gone, there is a 0% chance of recovering it, by you or by us.

Security

• Passwords are hashed, never stored in plain text.
• All traffic between you and Nous is encrypted (HTTPS).
• Sign-in attempts are rate-limited to make credential-guessing impractical.

Children's privacy

Nous isn't directed at children under 13, and we don't knowingly collect data from anyone under that age.

Changes to this policy

If this policy changes, we'll update the date at the top. If a change is significant, we'll let you know inside the app rather than burying it in a silent edit.

Questions

Reach us anytime through Support inside the app.