Privacy Policy

Last updated: August 11, 2026

nina (“we”, “us”) connects independent creatives with the people, spaces, and projects that need them. This policy explains what information nina collects across its web and iOS apps, how it’s used, and the choices you have. It applies to everyone who uses nina, including users in the European Union and European Economic Area (EEA), for whom nina is the data controller under the General Data Protection Regulation (GDPR).

Who we are

nina is operated by Maya Frings, based in the European Union. For any privacy question or to exercise the rights described below, contact fringsmaya@gmail.com.

Information we collect

• Account information: your email address and password (stored securely by our authentication provider, Supabase — we never see or store your password in plain text).
• Profile information: your name or username, bio, profile photo, website and social links, city, and the skills or spaces you list.
• Posts: the title, description, category, city, timeframe, optional photo, and links you add when posting a need.
• Messages: the content of messages you exchange with other users through the app.
• Activity: posts you save, matches, and reports you submit about other users or content.
• Location: the city you associate with your profile or a post (used for matching and search — we do not track precise device location).
• Push notification token: if you use the iOS app and allow notifications, a device token used to deliver match and message alerts.

We do not use cookies or similar technology for tracking or advertising. The web app uses only strictly-necessary cookies to keep you signed in, which don’t require consent under EU law.

How we use your information, and on what basis

Under GDPR, we need a legal basis for each way we use your data:

• To operate nina — creating your account, showing your profile and posts to other users, matching, and messaging. Basis: performance of our contract with you (our terms of service), since these are the core features you sign up for.
• To send match and message notifications (push and, for matches only, email). Basis: our contract with you for push and in-app notifications; consent for match emails, which you can withdraw at any time via the toggle in Profile settings without affecting any other part of the service.
• To keep the community safe — reviewing reports, enforcing blocks, and preventing abuse. Basis: our legitimate interest in keeping nina safe and functional, balanced against your rights.
• To meet legal obligations, such as responding to lawful requests from authorities. Basis: legal obligation.

We do not sell your information, we do not use it for advertising, and we do not share it with data brokers.

Who we share it with

nina relies on a small number of service providers (processors) to operate:

• Supabase — hosts our database, authentication, and file storage (profile photos, post images). Our Supabase project runs on infrastructure located in the EU (Ireland), so this data does not leave the EU/EEA.
• Resend— delivers transactional emails, such as match notifications. Resend is based in the United States. Where your data is transferred there, it is protected by Standard Contractual Clauses under Resend’s Data Processing Addendum, an EU Commission-approved safeguard for transfers outside the EU/EEA.
• Apple — delivers push notifications to the iOS app via Apple Push Notification service, using only the device token, not message content.

These providers only process data on our behalf to provide their service, under contracts that prohibit them from using it for their own purposes. We otherwise share your information only with other nina users, in the ways the app is designed to (e.g. your public profile, or messages with someone you’re matched or in contact with).

Your choices and rights

You can edit or remove most profile and post information, and block another user, at any time within the app. In addition, under GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data (most fields are editable in-app).
• Erase your data — permanently delete your account from within the app (Profile → Delete account), which removes your profile, posts, messages, and matches from our systems.
• Restrict or object to certain processing of your data.
• Receive a copy of your data in a portable, machine-readable format.
• Withdraw consent at any time, where processing is based on consent (e.g. match emails), without affecting processing that happened before the withdrawal.

To exercise any of these rights, contact fringsmaya@gmail.com. You also have the right to lodge a complaint with a data protection supervisory authority — in particular, the authority in the EU/EEA country where you live, work, or where you believe an issue occurred.

Data retention

We keep your information for as long as your account is active, which is how long we need it to provide the service. If you delete your account, your data is removed from our systems, except where we’re required to retain it for legal reasons.

Children’s privacy

nina is not directed at children under 16, and we do not knowingly collect information from them.

Changes to this policy

If we make material changes to this policy, we’ll update the date at the top of this page.

Contact

Questions about this policy or your data? Reach us at fringsmaya@gmail.com. See also our Terms of Service and Impressum.