Privacy
Draft for counsel review. Last updated: August 2026.
What we collect
Email for magic-link auth, username, public photo, sealed album (encrypted access control), intention preferences (structure, marriage goal, sex boundary, pace, gender, open-to), optional approximate location (grid-snapped before it leaves your device; peers see whole-mile distance only, never your coordinates), Stripe Identity verification status (not your legal name on profile), message ciphertext, and reports you submit. We also store optional self-described type/assets/means chips, per-day app open counts (not a raw event log), message row counts for coarse activity guidance (never message plaintext), and private notes you send to Intention about other people (targets cannot read those notes). Paid members may later see only coarse guidance bands when that feature is turned on — not counts, quotes, or reviewer ids. Assets are self-claims, not verified. Private notes are not a public review wall.
Location
Search location is optional. When enabled, the app snaps coordinates to a coarse grid (~2 km) before upload and stores only that snapped point for distance ranking. Other people never receive your coordinates — only a rounded distance in miles and, if you opt in, a short-lived "Available now" status (not a map pin). Turning location off deletes your snapped search point. Separately, you may share a timed live pin with one match inside Threads; those updates are end-to-end encrypted on an ephemeral channel and are not stored as precise server-side location history. Misuse of location can be reported as stalking / location misuse.
What we do not put on profiles
Legal name, phone number, or government ID images are not shown on profiles.
Messages
Direct messages are end-to-end encrypted on device. Servers store ciphertext. Threads hard-delete after 7 days unless both parties Save.
Contact
Privacy requests: support@nonrevu.com