Privacy Policy

Nami ("we", "us", "our") builds a sobriety and wellness companion app for iOS and Android. This Privacy Policy explains what information we collect, how we use it, and the choices you have. We wrote it in plain language because recovery is personal, and you deserve to know exactly what happens with your data.

1. Information we collect

Information you provide. When you create an account or use the app, you may give us your first name, email address, the rituals and reasons you choose to track, photos you add to your "Why" board, and notes you write inside the app. If you sign up through our website, we also record the answers you give to the onboarding questions, including what you tell us about your drinking.

Information collected automatically in the app. We collect minimal device information needed to operate the service: device model, operating system version, app version, language, and crash logs.

Information collected on our website. Our website uses product-analytics and advertising tools. They record the pages you open, the answers you give during onboarding, what you click, and a replay of your visit — text shown on the page is captured, and anything you type into a field is masked. When you enter your email address, it is used to link these records to you, and a scrambled (hashed) copy of it is sent to our advertising provider so we can tell which campaigns bring people to Nami. Section 5 names these providers.

What we do not collect. We do not collect your location, your contacts, or audio from your microphone, and we do not connect to Apple Health or Google Fit. We do not buy or sell your personal information.

2. How we use information

• To provide and improve the Nami app.
• To sync your data across your devices, if you sign in.
• To diagnose and fix bugs through anonymized crash reports.
• To understand how people find Nami and where onboarding loses them, and to measure our advertising.
• To communicate important changes to the service.

3. Where your data lives

Most of your day-to-day data — rituals, streaks, "Why" photos — stays on your device. If you create an account, we back up your data to our servers (hosted in the European Union) so you can restore it on a new phone. You can delete your account at any time from inside the app, and your backup is permanently erased.

The analytics and advertising data described in section 1 is handled by providers in the United States. When we move personal information out of the EEA or the UK, we do so under the safeguards that data-protection law requires, such as the European Commission's standard contractual clauses.

4. How long we keep your data

We keep your personal information only for as long as you have an active account. Data stored on your device remains until you delete it or uninstall the app.

When you delete your account, we permanently erase your backed-up data from our active systems within 30 days. Anonymized crash logs, which cannot be linked back to you, are retained for up to 90 days and then automatically deleted. Website analytics and advertising records are kept only as long as we need them for the purposes in section 2, under the retention settings we configure with each provider. We may retain a limited amount of information for longer only where required to comply with legal obligations, resolve disputes, or enforce our agreements; once that period ends, it is deleted.

5. Service providers

We rely on a small number of carefully chosen vendors to operate the service:

• Cloud hosting (European Union) — stores your account backup.
• Anonymous crash reporting — tells us when the app breaks.
• Email delivery — sends the messages you ask for.
• Product analytics (PostHog, United States) — website usage, onboarding answers, and session replay.
• Advertising measurement (Meta Platforms, United States) — receives a hashed copy of your email address and the fact that you reached certain steps.
• Payment processing (Stripe, through RevenueCat) — handles web subscription payments.

Apart from our advertising provider, these vendors process data only on our instructions and may not use it for their own purposes. Meta also uses the data it receives for its own purposes, as an independent controller; Meta's own privacy policy governs that use.

6. Cookies and similar technologies

Our website stores small files in your browser. Some are needed to make the site work at all. Others belong to the analytics and advertising tools in section 5 and are not strictly necessary. You can clear or block these files in your browser settings, and you can ask us to stop processing your data for advertising at any time — see section 7.

7. Your rights

Depending on where you live, you have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing (including for advertising), and to withdraw a consent you previously gave. Email [email protected] and we will respond within 30 days. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data-protection authority.

8. Children

Nami is not intended for children under 13 (or under 16 in the EEA). We do not knowingly collect data from children.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you in the app or by email before they take effect.

10. Contact

Questions or requests? Write to [email protected].