Privacy Policy

This policy explains how Mew NGL collects, uses, shares, protects, retains, and deletes information in our Android app and website.

Information we collect

• Account data: an anonymous authentication identifier, username, selected sharing platform, account settings, and acceptance of our terms.
• User content: anonymous message text, recipient username, card type, reports, hidden status, and timestamps.
• Device data: a Firebase Cloud Messaging token and device platform when notifications are enabled.
• Safety metadata: a salted IP hash, approximate country, region and city, timezone, user agent, referrer, and timestamps for abuse prevention and investigations.
• Deletion requests: the username and contact email submitted through our web deletion form.
• Local-only data: profile pictures, message cache, hidden words, theme, and preferences stored on the device.
• Diagnostics: Firebase and platform services may process technical diagnostics needed to operate notifications and the app.

How we use information

• provide private inboxes and deliver anonymous messages;
• send notifications users choose to enable;
• filter, investigate, and respond to abuse and safety reports;
• rate-limit spam, secure accounts, and prevent fraud;
• process account deletion and legal requests.

Service providers and sharing

Supabase provides authentication and database services; Firebase provides cloud messaging and related technical services; and Vercel hosts the website. We do not sell personal data. We may disclose data when legally required or necessary to protect users and address abuse.

Retention

Account content is retained while an account is active. Safety reports and limited security records may be retained after content removal when reasonably necessary for fraud prevention, legal compliance, or user safety. Stale push tokens and operational logs are periodically removed. Deletion-request records may be retained as evidence that the request was completed.

Deletion and your choices

Delete individual messages in the app, disable notifications, pause your link, or permanently delete your account in Settings. You may also use our web deletion request. Account deletion removes the authentication account and associated profile, messages, reports, push tokens, and message metadata, except limited records we must retain for the reasons described above.

Security and international processing

Data is encrypted in transit. Access is restricted through database row-level security and administrative controls. Providers may process data in countries other than your own. No system is completely secure.

Age restriction

Mew NGL is for adults aged 18 and over and is not directed to children.

Contact

Privacy requests: privacy@ngl-new.link.