Privacy Policy

What we collect

Account: email or Google sign-in identifiers, and a phone number only if you use a phone sign-in.

Profile: first name, handle, house, likes, prompts, photos you upload, and rooms you mark.

Posts and plans: out-this-week posts, Going marks, check-ins, and plans you create. Check-in never stores coordinates.

Approximate location: neighborhood you choose, and a fixed Nashville-area point for weather. We do not ask for your phone's precise location.

Device and IP: request logs on Netlify, and IP analysis inside Didit during a Dating check.

Identity check: a yes or no that you are 21 or older, the date it was confirmed, session status, and a session identifier. We do not keep a birth date or birth year, legal name, document number, or images.

Browser storage: tastes, saves, plans, theme, language, and a house cookie on this device until you clear them.

Why we use it

To run the guide, keep your saves, show you rooms that fit, and, if you opt in, let other adults see the profile you chose to publish.

To confirm Dating age and that you are a real person.

To moderate reports, secure the service, and answer you when you write in.

Sub-processors

We list only services the code actually calls: Netlify (hosting and forms), Supabase (accounts, database, photo storage), Didit (Dating identity check), OpenAI (Hatch and some search), Anthropic (a Hatch fallback when configured), and ElevenLabs (spoken Hatch replies). Gemini is not called.

Maps use OpenStreetMap. Optional live place search uses Google and Foursquare. Optional driving estimates use TomTom. Google sign-in follows Google's terms.

Identity check and biometric notice

Dating is optional. Friends and Company do not ask for ID. If you start the check, Didit photographs your ID and takes a selfie for passive liveness and face match.

By tapping I agree, you consent to Didit's collection of that biometric information for the purpose of confirming you are 21 or older and that you are the person on the ID. Nash Hat does not enroll a face template. After we store the yes or no and the date, we ask Didit to delete the session images.

Illinois BIPA, Texas CUBI, and Washington biometric laws may apply. A launch switch can refuse Dating checks from Illinois. That switch is off until counsel decides.

Retention

Account rows stay until you delete the account, or we close it for safety or law. Browser copies stay until you clear this device.

Didit images are requested for deletion after a terminal decision. Webhook event identifiers stay so we can reject replays. Contact form mail stays while we need it to answer you. There is no automatic deletion schedule for correspondence.

Your choices

You can use the guide signed out. You can download your own rows and delete your account in Your Nash Hat.

Do not sell or share: we do not sell personal information and we do not share it for cross-context behavioral advertising. A California resident does not need to send a separate do-not-sell request for that statement to be true.

State privacy rights

If you live in California, Colorado, Connecticut, Virginia, Texas, Tennessee (TIPA), or Washington, you may have rights to know, correct, delete, or appeal a denial. Washington My Health My Data is listed because counsel asked us to name it; Nash Hat is not a health product and does not collect consumer health data as that law defines it, except the age result of a Dating check.

Write to hello@martori.studio. We may need to verify that the request is yours. We will not discriminate against you for exercising a right the law gives you.

Children

We do not create accounts for anyone under 18 and we do not knowingly collect personal information from children. Dating is 21 and older. Contact us if you believe a minor opened an account.

Contact

SanctuaryApp, Inc., a Delaware corporation, doing business as Nash Hat · hello@martori.studio · Contact. Legal business address: 1401 3rd Ave, Suite 516, Nashville, TN 37208.