← Back to Nibbul
Privacy

Your data, your terms.

We collect the bare minimum we need to run Nibbul — nothing for ads, nothing for trackers. Here's exactly what we hold and why.

Last updated · 21 May 2026 · UK GDPR compliant

The short version
  • No ads. We don't sell or share your data with advertisers.
  • No trackers. No cookies, no analytics, no IDFA.
  • EU storage. Your data lives on Supabase EU servers.
  • You're in control. Delete everything anytime from Profile → Delete Account.
1

Who we are

Nibbul is an outcome-first messaging application operated by Thomas Hughes ("we", "us", "our"). Contact us at hello@nibbul.co.

This Privacy Policy explains what personal data we collect when you use Nibbul, why we collect it, how long we keep it, who we share it with, and your rights under the UK General Data Protection Regulation (UK GDPR).

2

Data we collect & why

Data
Email address
Why we collect
Create + authenticate your account via magic link
Basis
Contract
Data
Handle (username)
Why we collect
Identify you to other users
Basis
Contract
Data
Profile photo (optional)
Why we collect
Personalise your profile
Basis
Consent
Data
Message content + outcomes
Why we collect
Deliver the core Nibbul messaging service
Basis
Contract
Data
Contact relationships
Why we collect
Build your contact list and enable messaging
Basis
Contract
Data
Device push token
Why we collect
Send push notifications when you receive a Nibbul
Basis
Consent
Data
Language preference
Why we collect
Show the app, push notifications, and emails in your chosen language
Basis
Consent
Data
Approximate location
Why we collect
Detect your country (from IP, never stored) to suggest a default language on first launch
Basis
Legitimate interest
Data
Waitlist email
Why we collect
Notify you when the app launches
Basis
Consent
3

How long we keep your data

Your account data stays for as long as your account is active. Messages are retained for 90 days after they expire or are resolved, then permanently deleted. If you delete your account, all your personal data is deleted immediately and permanently.

Waitlist email addresses are deleted once we have notified you that the app has launched.

Your IP address is processed in memory by the language-detection edge function and is never written to any log or database.

4

Who we share your data with

We share your data only with the following service providers, for the sole purpose of operating Nibbul:

SupabaseDatabase, authentication, file storage, and serverless functions (EU region).
Apple Inc.APNs push delivery. Apple receives your device token to deliver notifications.
VercelHosting of the nibbul.co landing page.
ResendTransactional email delivery (waitlist + login).

We do not sell your data. We do not share it with advertisers.

5

Your rights

Under UK GDPR you have the right to:

Access
Request a copy of the personal data we hold about you.
Rectification
Ask us to correct inaccurate data.
Erasure
Delete your account and all associated data anytime via Profile → Delete Account, or by emailing us.
Portability
Request your data in a machine-readable format.
Object
Object to processing based on legitimate interests.
Withdraw
Revoke push notification permission anytime in your device settings.

To exercise any right, email hello@nibbul.co. We respond within 30 days.

6

Cookies & tracking

Nibbul does not use tracking cookies or third-party analytics. We do not use advertising identifiers (IDFA). The app does not track you across other apps or websites.

7

Children

Nibbul is not intended for children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

8

Changes to this policy

We may update this policy from time to time. We'll notify you of material changes by posting a notice in the app or by email. Continued use of Nibbul after a change means you accept the updated policy.

9

Contact & complaints

For privacy questions, email hello@nibbul.co.

If you're unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

nibbul.co

© 2026 Nibbul · Decide Faster.