Privacy Policy

On this website

• Email address, when you join the early-access list, plus the date you joined.
• Basic, aggregated technical data from our hosting provider (such as request logs) used to keep the site secure and available.

In the iOS app

• Account identifier. When you sign in with Apple, we receive a private identifier and, if you allow it, an email address (which may be Apple’s private relay address). We never receive your Apple password.
• Profile information. Nickname, optional avatar image, optional short bio. Real names are not required.
• Content you publish. Stories, story updates, comments and replies, reactions, and the stories and people you follow. Published content is public by design.
• Safety data. Reports you submit, users you block, and moderation decisions relating to your account or content.
• Usage and device data. Coarse analytics events (for example that a story was opened or a story was shared), app version, device type, and crash diagnostics.
• Support status. If you make a voluntary contribution, we store your subscription status and plan. Payments are handled by Apple; we never see your card details.
• Notifications. A push token, if you allow notifications.

• To operate the app: publish stories, deliver comments, and show feeds.
• To notify you about updates to stories you follow and replies to your content.
• To keep the community safe: moderation, reports, blocking, abuse prevention.
• To understand what is working, using aggregated analytics.
• To email you about the launch if you joined the early-access list, and to answer support requests.
• To meet legal obligations.

We do not sell your personal information, and we do not use your stories to target advertising.

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the app you signed up for), legitimate interests (safety, moderation, product improvement, security), consent (early-access emails, push notifications, optional analytics where required), and legal obligation. You may withdraw consent at any time.

We share only what is necessary with service providers acting on our instructions:

• Apple — sign-in, app distribution, in-app purchases, push notifications.
• Our hosting, database, and file-storage provider.
• Our email provider, to send the launch email and support replies.
• Our analytics and crash-reporting provider.

We may also disclose information when required by law, to enforce our Terms, or to protect someone’s safety. If our business is transferred, information may move with it under this policy.

Stories, updates, comments, reactions, nicknames, and avatars are public. They may be visible outside the app — for example on shareable web pages, in search engines, or in screenshots taken by other people.

Please do not include names, addresses, phone numbers, email addresses, social handles, or other details that could identify you or someone else. The app may warn you when your text looks like it contains personal information; we never silently change what you wrote.

We keep account information while your account exists. You can delete individual stories, updates, and comments at any time, and you can delete your account from Settings. When you delete your account we delete or irreversibly anonymize your profile and content within 30 days, except where we must keep limited records for legal, security, or abuse-prevention reasons. Waitlist emails are deleted on request, or after launch if you never create an account.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email info@nestfullabs.com. You may also complain to your local data protection authority.

Stranger Stories is not intended for children. You must be at least 13 years old to use it, or older where your country requires a higher minimum age (for example 16 in parts of the EEA). If we learn that a child has created an account, we delete it.

We use encryption in transit, access controls, and least-privilege access to protect your information. No service can be perfectly secure, so please be thoughtful about what you publish.

We and our providers may process information in countries other than yours, including the United States. Where required, we use appropriate safeguards such as the European Commission’s standard contractual clauses.

We will update this page when this policy changes and revise the date above. Significant changes will be announced in the app.

Nestfull Labs — info@nestfullabs.com