Privacy Policy

1. Information We Collect

Account and profile information. We collect your email address, first name, username, phone number, date of birth, gender, the genders whose Napkins you choose to see, profile photo, account identifiers, email-confirmation status, and the date and version of your legal acknowledgments. Your password is handled by our authentication provider; we do not receive it in readable form.

Content and communications. We collect the Napkins you post, including their title, description, posted coordinates, creation time, and status; favorites; responses and response notes; response selfies; connections; chat messages; blocks; reports; appeals; support messages; and related timestamps and identifiers.

Location and search information. With permission, the app obtains your location while you use it. Your current or selected coordinates may be sent to our service to load and sort nearby Napkins. If you publish a Napkin, the coordinates you choose are stored with it. Location searches and map results may also be processed by Apple through MapKit.

Device and service information. We collect an Apple Push Notification service device token if you enable notifications, along with platform, app version, notification environment, delivery events, and routing identifiers. Our systems and service providers may automatically receive IP address, request time, authentication and security events, and limited device, app, network, or diagnostic information needed to operate and protect the service.

Local app data. Napkin keeps a local copy of profile, Napkin, favorite, response, chat, and message data on your device so the app can display and refresh your account. During email-confirmed signup, an iOS-protected pending signup file may temporarily contain your profile draft and selected photo on that device. It never stores your signup password.

2. Sensitive Information

Your exact posted coordinates, date of birth, gender, viewing preferences, photos, selfies, messages, and descriptions of real-world encounters may be sensitive. A choice about whose posts you want to see may permit inferences about personal or romantic preferences. We use this information only for the service purposes described in this Policy.

Napkin currently stores profile photos and response selfies as ordinary images. We do not currently use facial recognition or create facial-geometry or other biometric templates from them.

3. How We Collect Information

• Directly from you when you create or edit an account, post or respond to a Napkin, upload an image, send a message, make a report, contact Support, or otherwise submit information.
• From your device when you grant location, camera, photo-library, or notification permission, and through normal app and server requests.
• From other users when they respond to, message, block, or report an account or content.
• From Apple and our service providers when they deliver authentication, email, mapping, notification, hosting, storage, security, and support functions.

4. How We Use Information

• Create, authenticate, maintain, and delete accounts and resume an email-confirmed signup.
• Display and sort active Napkins on the map and Discover feed, including by current or selected location and profile viewing preferences.
• Deliver responses, selfie review, connection decisions, chats, favorites, and notifications.
• Apply expiration, deletion, connection, blocking, rate-limit, and account-status rules.
• Investigate reports, review appeals, moderate content, prevent spam, fraud, harassment, ban evasion, and other abuse, and protect users and the public.
• Maintain, troubleshoot, secure, and improve the service; enforce our Terms and Community Guidelines; comply with law; and establish, exercise, or defend legal claims.
• Communicate with you about account confirmation, security, support, moderation decisions, service changes, and other operational matters.

5. What Is Public or Shared with Other Users

Active Napkins are public by design. Signed-in users and signed-out visitors may see an active Napkin’s username, title, body, creation and expiration information, and exact posted coordinates. Together, those details may identify a person, place, routine, or encounter. Do not post a private residence, another person’s live location, or identifying or sensitive information about someone else.

Your username appears with your Napkins and account activity. Profile photos are kept in private storage and are not part of the signed-out public map. A response note and response selfie are shared with the author of the Napkin you respond to; response selfies are not public. After an accepted response, connected participants may see the profile information and chat content made available to that connection.

Chat messages are shared with the other participant. Disconnecting or hiding a chat does not erase the other participant’s copy. If you delete your account, the surviving participant may keep the shared message history with your account identity replaced by "Deleted user."

6. Service Providers and Other Disclosures

We disclose information only as needed to operate and protect Napkin, as directed by you, or as permitted or required by law. Current providers include Supabase for authentication, database, private file storage, realtime updates, server functions, backups, and logs; Apple for the App Store, TestFlight, device permissions, MapKit, and push notifications; Resend for authentication email delivery; and Cloudflare and our company email provider for domain, routing, and support-email services.

These providers process information for us under their terms and privacy commitments. Providers acting on our behalf are permitted to use personal information only as needed to provide their services to us, protect those services, or comply with law.

We may also disclose information when reasonably necessary to comply with law or legal process; respond to an emergency; protect a person’s safety, rights, or property; investigate fraud or abuse; enforce our rules; or complete a merger, financing, reorganization, acquisition, bankruptcy, or sale of assets, subject to appropriate protections.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and Napkin does not currently use third-party advertising or behavioral-tracking SDKs.

7. Retention and Deletion

Public Napkins. New Napkins currently expire after 60 days. A Napkin also leaves public view when it is deleted, connected, or removed through moderation. We may retain the Napkin and its status after it leaves public view for the author’s history, connection records, moderation, safety, service integrity, and legal purposes.

Favorites. A favorite is retained only through 60 days after the Napkin was originally posted and may disappear sooner if it is no longer eligible to be shown.

Responses and selfies. Pending responses remain while the related Napkin can be acted on. An accepted response selfie is scheduled for prompt deletion. When a response becomes rejected, expired, or deleted, its response selfie is currently scheduled for deletion after 7 days. Storage deletion is queued and may require retries. We may retain non-image response records and status history for service integrity, safety, and account history.

Chats. A Napkin’s expiration or deletion does not end an existing chat. Chat history remains separate from the Napkin lifecycle. Disconnecting prevents new messages but does not remove the other participant’s history.

Account deletion. You can initiate deletion in Account Settings. The deletion process removes your authentication account, private profile, profile photo, response selfies, favorites, and account-linked access; retires your authored Napkins and responses from public or account-linked use; and de-identifies shared chat records where supported by the deletion workflow. Shared messages may remain visible to the other participant as coming from "Deleted user." Moderation, security, audit, abuse-prevention, backup, or legal records may retain limited account identifiers or content snapshots when reasonably necessary.

Backups and logs. Deletion from active systems may not immediately remove information from backups, security logs, or disaster-recovery copies. Those copies are isolated from ordinary use and are overwritten or deleted under provider schedules unless we must preserve information for a legal or safety reason.

8. Your Choices and Privacy Rights

• Edit available profile information in the app and delete your own active Napkins where the feature is available.
• Use iOS Settings to revoke location, camera, photo-library, or notification permission. Revoking location does not remove the coordinates of a Napkin you already posted; delete that Napkin or your account to remove it from public view.
• Block accounts, disconnect or hide chats, and initiate account deletion in Account Settings.
• Email Support to request access, correction, deletion, or a copy of personal information; object to or limit certain processing; withdraw consent where processing depends on consent; or appeal an eligible privacy or moderation decision.
• Depending on where you live, you may have additional rights and the right not to be discriminated against for exercising them. We may need to verify your identity before fulfilling a request. Authorized agents may contact us, but we may require proof of authority and direct verification.

9. Security

We use measures designed to protect information, including authenticated access, row-level database controls, private media buckets, restricted administrative functions, encrypted transport, iOS file protection for pending signup data, server-side abuse controls, and access-limited moderation tools. No system is completely secure, and we cannot guarantee that information will never be accessed, lost, or misused. Protect your password and contact us if you suspect unauthorized access.

10. Adults Only

Napkin is only for people age 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account or appears in content in a way that violates our rules, contact Support so we can investigate and take appropriate action.

11. United States Processing and Transfers

NAPKIN APPLICATION LLC is based in Illinois. Napkin and its providers process information in the United States, including through a United States-hosted Supabase project, and may process it in other locations where providers operate. Those locations may have privacy laws different from the laws where you live.

12. Changes to This Policy

We may update this Policy as Napkin changes. We will change the effective date and provide additional notice or request a new acknowledgment when required by law. Material changes apply prospectively unless law permits otherwise.

13. Contact Us

NAPKIN APPLICATION LLC Privacy and support requests: support@napkinapplication.com Website: napkinapplication.com

Use the subject line "Privacy Request" and describe the account and request. Do not email your password, verification code, or unnecessary sensitive information.