Privacy Policy

Last updated: October 2026

nCommon ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information about you when you use our mobile application.

1. Information We Collect

Account information: When you create an account, we collect your name, username, email address, date of birth, and password.

Profile information: Profile photo, bio, and interests you choose to share.

Location data: We collect your precise GPS location when the app is in use to show you nearby activities and display your posts on the map. We do not collect location data when the app is closed.

Activity data: Posts you create, join requests you send or receive, conversations, and hangout confirmations.

Device information: Push notification tokens, device type, and operating system version for sending notifications.

Usage data: How you interact with the app, including post views and feature usage, to improve the product.

2. How We Use Your Information

We use the information we collect to:

• Show you activities happening near your location
• Connect you with other users for in-person activities
• Send push notifications about activity near you and requests you've received
• Send one email if you haven't opened the app in two weeks (every email has an unsubscribe link, and you can turn it off in Settings)
• Improve and personalize your experience
• Enforce our Terms of Service and keep the platform safe
• Respond to support requests

3. How We Share Your Information

With other users: Your display name, profile photo, bio, interests, and activity posts are visible to other users within your broadcast radius.

Service providers: We use the following third-party services to operate nCommon:

• Supabase (database and authentication)
• Expo and Firebase (push notifications)
• Google Places API (venue search)
• Apple / Google (app distribution)

These providers only receive the data necessary to perform their services and are bound by confidentiality obligations.

Legal requirements: We may disclose your information if required by law or to protect the safety of our users.

We do not sell your personal information to third parties.

4. Data Retention

Active posts expire automatically after the time period you set. Expired posts are removed from the map but retained in our database for safety and support purposes for 90 days before deletion.

Your account and profile data are retained for as long as your account is active. You may delete your account at any time, which will remove your profile and personal data within 30 days.

5. Your Rights and Choices

You can:

• Update or delete your profile at any time within the app
• Block other users who make you uncomfortable
• Turn off push notifications in your device settings
• Request a copy of your data by contacting us
• Delete your account from the profile settings screen

Residents of California (CCPA) and the European Economic Area (GDPR) have additional rights including the right to access, correct, and request deletion of your data. Contact us at privacy@ncommon.app to exercise these rights.

6. Children's Privacy

nCommon is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a minor, we will delete it promptly.

7. Security

We use industry-standard security measures including encrypted connections (TLS), hashed passwords, and row-level security policies on our database. However, no method of transmission or storage is 100% secure.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app. Continued use of nCommon after changes take effect constitutes your acceptance of the updated policy.

9. The nCommon Launch List

Before the app launches, you can join our launch list at ncommon.app. If you do, we collect your email address and ZIP code, plus anything optional you choose to share: your city or area, your first name, the activities you’re interested in, and which kind of phone you use. If you arrive through a friend’s link, we also record that link’s referral code so we can count who joined through it, and we give you a link of your own to share. We note the short code in a link that brought you to the site, if there is one, to learn which of our posts and events people come from.

We use this only to email you launch news and early-access invitations for your area, and to decide where nCommon opens first (your ZIP code tells us whether you’re in the Austin area) and which activities to feature. We don’t sell it or share it with advertisers. Every email includes a way to unsubscribe, and you can ask us to delete your details at any time by emailing privacy@ncommon.app.

Website analytics and advertising. ncommon.app uses Google Analytics to count visits and see how people find the site: pages viewed, the link or code that brought you here, your general region, and your device and browser type. The home page also uses the Meta Pixel (for Facebook and Instagram ads), so we can measure our ads and show them to people who have visited the site. These tools use cookies and similar technology, and Google and Meta process the data under their own privacy policies. We also count when someone joins the launch list, but your email address, ZIP code, city and name are never sent to Google or Meta. To opt out, turn on Global Privacy Control in your browser (we then don’t load the advertising pixel at all), block cookies for this site, use Google’s opt-out add-on, or adjust your Meta ad preferences.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at privacy@ncommon.app.