Privacy Policy

Last updated: 8 September 2026

This Privacy Policy explains what personal data NovaPod ("NovaPod", "we", "us") collects when you use the NovaPod app and website (the "Service"), how we use it, who we share it with, and the choices you have. NovaPod is the controller of your personal data.

1. Data we collect

Information you give us

• Account information — your name, username, email address, password (stored only as a salted hash), and, if you add one, a profile photo and bio.
• Content you create — projects, posts, images, captions, comments, direct messages, stickers, interests, and the theme you choose.
• Reports and support requests — the content of reports you file about other users or content, and messages you send us.

Information collected automatically

• Usage data — actions you take in the app (for example posting, following, liking), timestamps, and which features you use.
• Device and technical data — device type and operating system version, app version, approximate region inferred from your IP address, and error/diagnostic logs.
• Local storage — we store authentication tokens and a few preferences on your device to keep you signed in and remember your settings. We do not use third-party advertising or tracking cookies.

Information from third parties

• Purchases — when you buy NovaPod Pro or another paid item, Apple processes the payment and shares purchase and subscription status with us through our payments provider (RevenueCat). We do not receive your full card details.

2. How we use your data

• to create and operate your account and provide the Service;
• to display your content and connect you with other creators;
• to keep NovaPod safe — reviewing reports, enforcing our Terms, detecting spam, fraud, and abuse;
• to process purchases and manage subscriptions;
• to send you service messages such as email verification, password resets, and important account or policy notices;
• to provide support and respond to your requests;
• to fix bugs, monitor performance, and improve the Service;
• to comply with legal obligations and enforce our rights.

Where the GDPR applies, our legal bases are: performance of our contract with you (providing the Service), our legitimate interests (safety, fraud prevention, product improvement), your consent (where asked), and compliance with legal obligations.

3. Who we share data with

We do not sell your personal data. We share it only with:

• Other users — your profile, posts, projects, comments, and interactions are visible according to your settings and the nature of the feature (for example, direct messages are visible to the people in the conversation).
• Service providers that host and run NovaPod on our behalf, under contract and only for that purpose:
  • Render — application hosting;
  • MongoDB Atlas — database;
  • Cloudflare (R2 and Pages) — media storage and website delivery;
  • Resend — transactional email;
  • RevenueCat and Apple — purchases and subscription management.
• Authorities when required by law, or to protect the rights, safety, and property of NovaPod, our users, or the public.
• A successor in the event of a merger, acquisition, or sale of assets, subject to this Policy.

4. International transfers

Our providers may process data in countries other than yours, including the United States and the European Union. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. How long we keep data

We keep your account data for as long as your account is active. When you delete your account, we delete or anonymise your personal data and content within 30 days, except where we must retain limited information to comply with legal obligations, resolve disputes, or enforce our agreements. Backups are purged on a rolling schedule.

6. Your rights and choices

• Access and edit — view and change your profile information in the app at any time.
• Delete — delete your account and content from Settings › Account in the app.
• Access, portability, correction, restriction, objection — if you are in the EEA, UK, or a similar regime, you can ask us to provide a copy of your data, correct it, restrict or object to certain processing, or withdraw consent.
• California residents — you have the right to know what personal information we collect and to request deletion. We do not sell or "share" personal information as those terms are defined by the CCPA.
• Complaints — you may contact your local data protection authority.

To exercise any of these rights, email support@novapod.app.

7. Security

Data is transmitted over HTTPS, passwords are stored as salted hashes, and access to production systems is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Children

NovaPod is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

9. Changes to this Policy

We may update this Policy from time to time. We will update the "Last updated" date and, for material changes, notify you in the app or by email.

10. Contact

Privacy questions or requests: support@novapod.app.