Privacy Policy

What we collect

• Account information. Email address or phone number (whichever you sign up with), a display name, timezone, and an optional birthday. If you sign in with Google or Apple, we receive only the basic profile information (name and email) they share for authentication — no access to your calendar, contacts, or other data held by those providers.
• Contacts, only if you choose to sync them. If you use “Import from contacts,” the app reads your device contacts' email addresses and phone numbers locally to check which of them are already on Now Now, and only submits that query — it does not upload your address book or store contacts who aren't already users. Matches become friend connections.
• Your “Now Now” status, when you turn it on. Flipping the toggle records that you're currently available, for how long, and who you chose to share it with (specific circles and/or specific friends, picked fresh each time — nothing about audience or duration is saved as a standing preference). Only friends you've actually shared it with can see it, and only while it's active; it disappears automatically once it decays.
• Events you create or attend. Title, location (as text you type, plus optional coordinates if you attach them — the app does not collect your live GPS location), start/end times, notes, recurrence settings, and who's invited or attending.
• Messages. Chat messages you send within an event are stored so other attendees of that event can read them.
• Circles and friend connections. Who you've added as a friend, and any circles (posting groups) you create or belong to.
• Device and session information. When you sign in, we record a device label (browser/OS, or device model on native), platform, and when that device was last active, so you can see which devices are signed in under Profile → Session security. We also log authentication events (login attempts, logouts, verification failures) with a device identifier and platform, for account-security purposes; this isn't visible to other users.
• Crash and error reports, if enabled. These are stripped of email, phone, contact info, display names, event titles, notes, and message bodies before being sent — only a user ID and technical error details are included.

What we don't collect

• Live/GPS location. No continuous location data is requested or collected from your device.
• Advertising or tracking data. No third-party advertising or analytics SDKs. Basic product-usage counts (e.g. how many events get created) are backend-only aggregates, never sold, shared, or used for advertising, and not visible to other users.

How your data is protected

All data is stored in a Postgres database (via Supabase) with row-level security enforced at the database layer — not just in the app — meaning the database itself refuses to return or modify a row unless you're authorized to see it (friend requests you're party to, events you organize or are invited to, circles you belong to, or a Now Now status someone has actually shared with you).

Who can see your data

Other Now Now users can see what you'd expect from the product: your display name and avatar to friends, events and circles you share with them, messages within events you're both part of, and your Now Now status only if you've actively shared it with them. We do not sell, rent, or share your data with third parties for advertising. The only outside services involved are the ones the app is built on: Supabase (database, authentication, function hosting), SendGrid (sending account emails such as sign-in codes and password resets), Twilio (sending SMS verification codes), and, if enabled, Sentry (crash reporting, with personal data stripped as described above).

Deleting your account

You can permanently delete your account from Profile → Delete account. This removes your profile, every event you organized (and its chat history), your messages in other people's events, your friend connections, your circles, any active Now Now status, and all other data tied to your account. This is irreversible — data is not archived or recoverable after deletion. Events you were only an attendee of (not the organizer) stay intact for the other attendees; your name is simply removed.

Children

Now Now is not intended for anyone under 13. We don't knowingly collect data from children under 13.

Questions

This is a small private beta — if you have questions about your data, ask the person who invited you, or email support@nownow.today.