Policy & standards

Privacy Policy

This policy explains how Nera Social handles information across accounts, profiles, events, public previews, location checks, messaging, moderation, reliability, and account deletion.

Last updated: March 26, 2026

1. Overview

Nera Social is designed around small-group events, staged access to sensitive details, and behavior-based trust. That means our privacy practices are not just about storage and security. They are also about who can see what, when event details unlock, and how safety and accountability features operate over time.

This Privacy Policy explains what information we collect, how we use it, when it is visible to other users, which third parties help us operate the service, and what happens when you request deletion.

We do not sell personal information or share it with data brokers for targeted advertising.

2. Apple App Store Privacy Details

This section summarizes our current data practices in the format users expect from the App Store privacy disclosure.

Data Categories We Collect

  • Contact info such as first name and email address.
  • Location data, including approximate location for discovery and precise location when needed for in-person attendance verification.
  • User content such as profile photos, event images, check-in photos, messages, reviews, highlights, support requests, and report text.
  • Identifiers such as account IDs, device identifiers, and push tokens.
  • Usage and trust data such as event views, joins, check-ins, credits, and reliability history.
  • Diagnostics such as crash and performance information.

Permissions We May Request

  • Location permission to refresh your discovery location and to verify in-person check-ins when the feature requires it.
  • Camera permission so you can take profile, event, or check-in photos.
  • Photo-library permission so you can upload profile and event images.
  • Notification permission so we can deliver chat messages, event updates, and check-in reminders.

How Data Is Linked

Most account, event, moderation, and communication data is linked to your account because the product depends on identity, trust, and participation history. Diagnostic data may be handled in aggregate or pseudonymous form where appropriate.

Tracking & Advertising

We do not use third-party advertising SDKs to track you across apps or websites owned by other companies, and we do not sell personal information.

3. Information We Collect

3.1 Information You Provide

  • Waitlist information such as first name and email address.
  • Account and profile information such as first name, email address, date of birth, derived age, up to 6 profile photos, city, neighborhood, activity preferences, and optional profile fields like bio, interests, languages, occupation, education, height, and lifestyle details.
  • Event information such as titles, descriptions, event type, access class, venue details or meeting links, schedule, capacity, age limits, and up to 3 event images.
  • Participation and trust information such as staked credits, join and leave activity, attendance outcomes, reliability history, achievements, and completed event counts.
  • Check-in information such as attendance photos, optional notes, related timestamps, and other verification data used to confirm presence at an event.
  • Communications such as event chat messages, direct messages when unlocked through Circles, reviews, highlight captions, support requests, and safety reports.

3.2 Information Collected Automatically

  • Precise and coarse location data used for discovery refresh, distance calculations, and in-person attendance verification when relevant.
  • Device and network information such as IP address, browser or operating-system details, app version, device identifiers, and push notification tokens.
  • Usage data such as pages or screens viewed, features used, event views, joins, leaves, check-ins, and other interaction history.
  • Diagnostics such as crash and performance information.
  • Notification-state data such as which event chat is currently active so we can reduce redundant push notifications.

3.3 Information From Third Parties

  • Authentication data from Clerk and from identity providers you choose to use through Clerk, such as Google or Apple.
  • Location search and autocomplete results returned through Google Maps and Google Places services.

4. How We Use Information

We use your information to:

  • Authenticate you and maintain your Nera Social account.
  • Create, discover, join, host, and manage events, including limited public event preview pages where available.
  • Show profile and event information according to privacy settings, participation status, block state, and feature eligibility.
  • Process credits, refunds, bonuses, reliability scoring, premium or Supernova access rules, and other trust-based product mechanics.
  • Operate event chat, Circles, direct messages, reviews, highlights, push notifications, and check-in reminders.
  • Process safety reports, blocks, moderation reviews, fraud prevention, and abuse detection.
  • Improve product performance, debug issues, analyze usage trends, and develop new features.
  • Comply with legal obligations and enforce our terms, safety rules, and community standards.

5. Visibility and Access Controls

Nera Social does not treat every surface as equally public. Visibility depends on the feature, your privacy settings, whether you joined the room, and whether a block exists between users.

Public Event Previews

Upcoming and active events may have limited public preview pages. Those pages can show safe-to-share fields such as title, description, activity, schedule, city or venue name, event image, capacity, and limited host details like first name, first photo, reliability, and user kind.

Exact coordinates, meeting links, and participant rosters are not part of those public previews.

Profile Visibility

Your public profile may include your first name, first profile photo, activity preferences, reliability score, completed event count, achievements, and profile fields you choose to fill out such as bio, interests, languages, occupation, or education.

Age, city or neighborhood, and your full photo set follow your privacy settings or may unlock for people who have shared an event with you.

Participant and Host Access

Exact event address, venue coordinates, meeting links, participant status, and similar room details unlock to hosts and event participants. Some post-event features, such as reviews, highlights, and check-ins, may further depend on participation or check-in status.

Blocks and Redaction

If a block exists, some profile, event, circle, review, highlight, or messaging surfaces may be hidden, redacted, or unavailable. In some event contexts, blocked participants may appear as hidden or redacted entries rather than fully visible profiles.

6. Location, Discovery, and Attendance Verification

Discovery Location

We maintain a discovery location used to personalize nearby event recommendations. That discovery location may be refreshed when you open or return to the app, and it may differ from the city shown on your visible profile.

Venue Data

Hosts of in-person events provide city, venue name, address, and precise coordinates. Online events may include meeting links instead. Exact location details are not shown on public preview pages.

Check-In Verification

For in-person check-ins, we may process check-in photos and precise location confirmation, including related metadata such as capture time, location accuracy, and distance-from-venue calculations. Online events do not require location proof.

We also use mapping and place-search services to help users search for venues, autocomplete locations, and open directions.

7. Safety, Blocking, and Reports

Safety features require us to process additional event and identity context so the platform can preserve the room, investigate misuse, and give users immediate distance from unwanted contact.

Blocking Records

When you block someone, we store the blocker, the blocked account, an optional reason, and the creation timestamp so we can hide or disable the relevant relationship across profiles, events, Circles, and messaging.

Reports and Moderation

Reports are tied to a specific shared event and may include the reporter, reported profile, severity, reason, detailed description, and status. Submitting a report may also create a block so the relationship does not remain socially open while review is pending.

Authorized Review

Authorized admins or support personnel may access pending report details and related event or profile context when investigating safety issues, enforcing our policies, or responding to legal or abuse-prevention requests.

8. Messaging, Circles, Reviews, and Highlights

Event Chat and Notifications

We store event-chat messages, sender information, and timestamps so participants can coordinate around a room. We may also store which chat is currently active so we can suppress redundant push notifications while you are already viewing that conversation.

Circles and Direct Messages

Nera Social forms Circles after repeated shared attendance and uses that relationship data to decide when direct messages unlock. Blocks can hide Circle relationships and disable DM access.

Reviews

Reviews may include ratings, text, tags, event identifiers, and a public or non-public setting. Depending on the feature and configuration, reviews may appear only within event context or may also appear on host-profile surfaces.

Highlights and Reactions

Event highlights may include uploaded images or video, captions, reactions, uploader identity, and timestamps. Visibility for these surfaces depends on the event context, participation status, and related access rules.

9. How We Share Information

We share information only as needed to operate Nera Social, honor your visibility settings, respond to safety issues, or comply with law.

  • With other users according to your privacy settings, event participation, block state, and the feature you are using.
  • With infrastructure and service providers that help us run authentication, storage, mapping, notifications, and backend systems.
  • With authorized admins, moderators, or support personnel when investigating safety reports, abuse, fraud, or policy violations.
  • With legal authorities or other third parties when required by law or when needed to protect users, rights, property, or platform integrity.
  • In connection with a merger, financing, acquisition, or sale of assets, subject to applicable confidentiality and data-protection obligations.
  • For other purposes when you direct us to do so or give explicit consent.

Advertising and Data Brokers

We do not sell personal information, and we do not share it with data brokers for targeted advertising.

10. Data Retention and Account Deletion

We retain information for as long as your account is active and for as long as needed to operate the service, maintain safety records, resolve disputes, prevent abuse, and comply with legal obligations.

Account Life Cycle

Your account data is retained while you use Nera Social. Operational records such as participation history, reliability changes, credit transactions, and moderation records may be retained for as long as they are needed to operate trust, safety, and support workflows.

If You Delete Your Account

  • Account deletion is queued and may require you to cancel upcoming hosted events before the request can proceed.
  • We work to remove your profile and associated active records from our systems, including many account-linked communication, participation, moderation, and trust records.
  • We also queue cleanup of account-linked media when we can identify the stored files tied to your account.
  • Some historical event records may remain in creator-deleted or de-identified form so old rooms and community history do not break.

Backup, cache, and disaster-recovery copies may persist for a limited time after deletion and are removed from active use as part of our normal retention cycles.

11. Data Security

We implement technical and organizational measures designed to protect your information, including:

  • Encryption in transit and access-controlled backend services.
  • Authentication and session controls through Clerk and our internal authorization checks.
  • Role-limited internal access for support, moderation, and operational functions.
  • Upload validation for supported image types and file sizes before storage.
  • Secure infrastructure and storage partners for database, media, and notification delivery.

Media Handling

Uploaded images are validated for supported formats such as JPG, PNG, WebP, and HEIC or HEIF, and we enforce file-size limits before storage.

No method of transmission, storage, or processing is completely secure. While we work to protect your information, we cannot guarantee absolute security.

12. Your Privacy Rights

Depending on your location and the applicable law, you may have the following rights:

  • Access the personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of your personal information, subject to legal and operational exceptions.
  • Request a copy of your data in a machine-readable format where applicable.
  • Object to or restrict certain processing in some circumstances.
  • Withdraw consent where our processing depends on consent.

California Residents (CCPA/CPRA)

  • Right to know what personal information is collected, used, disclosed, or shared.
  • Right to request deletion of personal information, subject to exceptions.
  • Right to opt out of the sale or sharing of personal information for targeted advertising. We do not sell personal information.
  • Right to non-discrimination for exercising privacy rights.

European Residents (GDPR/UK GDPR)

  • Right to access, rectify, erase, restrict, or port personal data in certain circumstances.
  • Right to object to some forms of processing.
  • Rights related to automated decision-making and profiling where applicable.
  • Right to lodge a complaint with a supervisory authority.

To exercise these rights, contact us at privacy@trynera.com.

13. Children's Privacy

Nera Social is not intended for people under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, contact us at privacy@trynera.com so we can investigate and take appropriate action.

14. International Data Transfers

Your information may be stored or processed in countries other than your country of residence. When we transfer data internationally, we use appropriate safeguards designed to protect the information being transferred.

15. Third-Party Services

We use third-party providers to help us run the product. These providers may process information on our behalf subject to their own terms and privacy obligations.

Providers We Use

  • Clerk for authentication and account identity.
  • Google Maps and Google Places for location search, autocomplete, and mapping context.
  • Convex for database, backend logic, and real-time application infrastructure.
  • Cloudflare R2 for storage and delivery of uploaded images and other media.
  • Expo and platform push-notification services for mobile notifications and app delivery.
  • Apple and Google identity providers when you choose those sign-in options through Clerk.

16. Automated Processing

Nera Social uses automated systems to support product operations and trust mechanics. These systems may include:

  • No-show detection after check-in windows close, including related reliability adjustments and flake handling.
  • Reliability-score updates, streak bonuses, stake refunds, late-flake penalties, and other trust calculations tied to attendance behavior.
  • Premium and Supernova access gating based on reliability and attendance history.
  • Scheduled event lifecycle jobs such as activation, completion, check-in reminders, and cleanup of empty rooms.
  • Automatic Circle creation after repeated shared attendance and automated DM availability checks.
  • Basic credit refills after extended zero-balance periods where the product rules allow them.

These processes support event operations, trust, and safety rather than third-party advertising. If you believe an automated outcome has been applied in error, contact us at privacy@trynera.com.

17. Changes to This Policy and Do Not Track

We may update this Privacy Policy from time to time. If we make material changes, we may notify you by email, in-app notice, or a prominent notice on the platform. Your continued use of Nera Social after an update takes effect means the revised policy applies going forward.

We do not currently respond to browser Do Not Track signals, and we do not use data collected through Nera Social for cross-app or cross-site ad tracking.

18. Contact Us

If you have questions, concerns, or requests about this Privacy Policy, contact us at:

Email: privacy@trynera.com

Legal inquiries: legal@trynera.com