Privacy policy

Nashly (“we”, “us”) is a Nashville-only app for finding and posting real-world things to do. This policy explains what we collect, why, and what you can do about it. It applies to the Nashly iOS app and nashly.app.

What we collect

• Phone number. Required to create an account. We text you one-time codes through our SMS provider (Twilio). We never show your number to other users and we don't sell it.
• Date of birth. Nashly is 18+. We use your birthday only to confirm you're an adult; it is never shown to anyone.
• Profile. Your name, handle, bio, photo, and optional interests. These are public.
• What you post. Events, group series, comments, recaps, photos, and messages. Events and recaps are public; messages are visible only to the people in the thread. Content is screened automatically (see Moderation) and may be reviewed by a person.
• Location. Two ways, both only while you use the app. (1) When you check in to an event we read your device location once to confirm you're within about 200 meters of it; we store the distance, not your coordinates. (2) If you allow it, we use your location to show what's near you. We never track you in the background.
• Activity. RSVPs, check-ins, saves, ratings, follows, and which events you view or tap. This powers your feed, streaks, badges, reminders, and your monthly recap.
• Device & push token. So we can send notifications you've turned on. You control every category in Settings.
• Business accounts. Business name, subscription status, and payment handled by Stripe. We never see your card number.

How we use it

• To run the app: show events, connect you with hosts and attendees, send reminders and updates.
• To keep it real: verify humans, prevent spam and fake attendance, enforce our rules.
• To make the feed better over time based on what you save, tap, and attend.
• To show hosts and business accounts aggregate analytics about their events (views, RSVPs, check-in counts). Hosts can see who RSVP'd and checked in to their own events, the same way attendees can. We do not sell individual attendance records or personal data to anyone.

Moderation

Every post, comment, recap, and message is screened automatically at submission by AI classifiers (OpenAI's moderation service and Anthropic's Claude). Flagged content is held for review by a person. Reported content is reviewed by a person. Classifier results and a short excerpt are kept for review and audit.

Who we share with

Service providers who process data for us under contract: Supabase (hosting and database, US), Twilio (SMS), Expo (push delivery through Apple), OpenAI and Anthropic (automated content screening), Stripe (business payments), Vercel (website). Event data may include public listings we import from Ticketmaster and SeatGeek. We share data with law enforcement only when legally required or to prevent imminent harm.

Retention & deletion

Delete your account any time in Settings → Delete account. This removes your profile, posts, RSVPs, and messages immediately; backups purge within 30 days. Engagement logs are anonymized after 90 days. Moderation records for removed content may be kept up to one year for abuse prevention.

Your rights

You can access, correct, export, or delete your data by emailing privacy@nashly.app or using Settings. Tennessee residents (TIPA), California residents (CCPA/CPRA), and residents of other states with privacy laws have rights to know, delete, correct, and opt out of sale or targeted advertising. We do not sell personal data and we do not run targeted advertising.

Children

Nashly is for adults 18 and older. We do not knowingly collect data from anyone under 18 and will delete such accounts.

Changes & contact

We'll post changes here and, for material changes, notify you in the app. Questions: privacy@nashly.app.

Draft prepared 2026-09-17; pending attorney review before launch.