Effective 12 September 2026 · Version 1.1

Privacy at Nosotras

Nosotras helps adults form platonic friendships. We collect only the information needed to operate profiles, matching, private conversations, safety, support and account controls. We do not sell personal information and we do not use behavioral advertising.

Information you provide

Your account uses Google or Apple sign-in; we store the provider identity needed to keep your account and no password. You provide a preferred name, a private birth date used only to enforce the 18+ requirement, a membership declaration, interests, languages, discovery preferences, an optional introduction and profile photos. Messages, voice notes, chat photos, reactions, plans, reports and support tickets are stored so the features you use keep working. Your birth date, sign-in email and preferences are never shown to other members.

How information is used and shared

Supabase hosts authentication, database, private media and server functions in São Paulo. Google processes message text for translation only after both participants agree to it in their conversation; originals always remain available and revoking consent stops new processing. Amazon Web Services processes an expressly accepted live selfie and profile photo in US East (N. Virginia) for liveness and matching; this AWS account is opted out of using those inputs for service improvement. Cloudflare delivers these public pages and isolated verification assets. Expo delivers notifications after you grant permission; notifications preview activity without message text. Sentry receives error reports to fix crashes; reports contain no message content, photos or contact details. Service providers process information only to supply these functions.

Verification

We do not request identity documents, infer gender, or keep a searchable face collection. Our systems do not retain the selfie recording or the AWS reference frame. We keep the verification result, the consent record and the applicable profile photo while the account exists. AWS session results become unavailable through its API after three minutes; that is not a promise of complete erasure from every AWS system. Automatic checks of later photo changes require separate permission and can be turned off.

Safety, retention and deletion

Blocking takes effect immediately. When you delete your account, discovery and contact stop at once and automated workers then remove your account, profile, messages, translations and private media, typically within days. What stays and for how long:

• Safety reports: selected evidence is detached from deleted identities and kept while a case is open, then up to 180 days.
• Security and audit records: up to 365 days.
• Support tickets and replies: up to 180 days.
• Encrypted operational backups rotate on the provider schedule; deleted information ages out of backups as they rotate. Deletion is not instant erasure from every backup copy or from another person's device.

Release updates

You can ask us to email you when Nosotras is ready. We store only your email address, the time you asked, and whether you later confirmed or unsubscribed. We use it solely to send release news; you can unsubscribe with one click in every message or by writing to support. Unconfirmed addresses are deleted after 180 days, and unsubscribed addresses 30 days after you opt out. We do not sell or share this list.

Your choices

You can change discovery, translation and notification preferences, revoke automatic photo checks, block or report people, and delete your account in the app. You may also start account deletion from the web deletion page. Contact [email protected] for access, correction, deletion or provider-specific requests; we aim to reply within 14 days.

Children and changes

Nosotras is for people aged 18 or older. We will date every material change to this policy and highlight it in the app for at least 30 days before it takes effect.