Privacy

Expiry is not deletion — read this one

When a post reaches the end of its life it disappears from everybody else. It does not disappear from you. It moves to a private archive on your own profile, behind a tab marked only you, and it stays there.

The same is true of a trail once you end it: its lines leave everyone else and stay with you.

We say this as plainly as we can because it is the thing people most reasonably assume works the other way. Your writing is kept. What ends is other people being able to see it.

Nobody else can reach your archive. It is not in search, it is not in Explore, and there is exactly one way in: the tab on your own profile.

What we store

Your email address, so you can sign in. A password, hashed — we never see it.

Your username, name, timezone and the face you made. There are no photographs of people here; the only picture of you is a drawing you configured.

What you write, and the photos you attach to it.

Who is at a Chilling place right now and who is watching a trail, which we hold in a separate short-lived store that forgets it after ninety seconds.

What we do not do

We do not sell anything about you. We do not run advertising.

We do not measure anyone’s reach, and we do not build a profile of what you look at in order to decide what to show you. There is no ranking anywhere in this product.

We do not ask for your camera, your microphone or your location, and the app is configured to refuse them even if something tried.

Who can see what

Posts and trails: the people who follow you, until they expire.

Hangouts: only people you and they follow each other. A plan is a place and a time you will physically be, and following someone should not give a stranger that.

Messages: the people in the conversation. Messages never expire and are never closed off by the seven-day rule — correspondence is not content.

Your archive: you.

Deleting your account

You can delete your account and export your things from Settings.

Deleting removes your posts, trails, comments and reactions permanently — for real, not to an archive. Your username is released and your name becomes someone.

Two things survive on purpose. Plans you created stay, without your name on them, because other people committed to being somewhere and deleting the plan would take that from them. And an empty record of the account remains so that those references still resolve; it holds no email, no name and no content.

Asking us

Write to privacy@nadary.app and a person will answer. You can ask for a copy of everything we hold, or ask us to correct it, or ask us to delete it.