Information we collect

We collect information you provide directly, information generated through your use of the service, and limited technical information needed to operate the platform securely.

Why we collect information

• Provide, maintain, and improve Numredy.
• Authenticate you and keep your account secure.
• Display your public profile, stories, comments, and engagement.
• Deliver notifications about activity relevant to your account.
• Operate discovery features such as search, trending, and number pages.
• Enforce our Terms, Community Guidelines, and Copyright Policy.
• Respond to support requests and legal or privacy enquiries.
• Protect the platform against abuse, spam, and security threats.

Lawful processing and data minimisation

Numredy is operated from South Africa. We process personal information in accordance with the Protection of Personal Information Act (POPIA) where it applies, and with comparable principles for users in other regions (such as the GDPR for users in the European Economic Area).

We process personal data where necessary to perform our contract with you (providing the service you signed up for), where we have a legitimate interest in operating a safe and functional platform (such as security logging and abuse prevention), and where required to comply with applicable law.

We collect only what we need for Numredy to work. We do not sell your personal information. Public content you publish (stories, comments, username) is visible to anyone who visits the platform.

Security

We use industry-standard measures including encrypted connections (HTTPS), Supabase Auth for credential handling, and Row Level Security policies in our database to restrict access to user data. No online service can guarantee absolute security; please use a strong, unique password if you register with email.

International data transfers

Numredy is operated from South Africa. Our service providers (such as Supabase and Vercel) may process data in the United States and other countries. Where personal information is transferred across borders, we take reasonable steps to ensure appropriate safeguards are in place, including contractual protections offered by our processors where applicable. Users in the European Economic Area may have additional rights regarding international transfers under the GDPR.

Third-party processors

We use trusted third parties to run Numredy. They process data only as needed to provide their services to us:

• Vercel — hosts the Numredy web application and may process request logs and deployment metadata.
• Supabase — provides authentication and the Postgres database where your account credentials and application data are stored. Profile images are referenced by URL when supplied by Google; Numredy does not use Supabase file storage for profile images.
• Google — provides optional Google Sign-In authentication. Google processes information according to its own privacy policy when you choose that sign-in method.
• Zoho Mail — receives email sent to privacy@numredy.com and support@numredy.com for privacy and support correspondence.

We do not currently offer Facebook Login. OAuth abstractions in our codebase are reserved for possible future providers and are not active for sign-in today.

Cookies and local storage

Data retention

We retain account and content data for as long as your account is active and as needed to operate the service. Server and security logs are retained for a limited period according to our providers' policies.

When you delete a comment, the comment text is replaced with "Comment deleted" and the comment row may be retained so replies remain in context. See How Numredy Works for details on comment deletion.

Account and data deletion

You may delete your Numredy account at any time from Settings → Manage My Account → Danger Zone. Follow the on-screen confirmation steps to permanently remove your account.

When an account is deleted, we remove the profile and, through database relationships, associated stories, comments, replies, story likes, number likes, follows, notifications, reports you submitted, blocks, and hidden-story preferences tied to that account. Profile image URL references stored for your account are removed.

Backups and legal holds. Encrypted database backups maintained by Supabase may retain deleted data for a limited retention window before those backups rotate. We may also retain certain information where required by law, to resolve disputes, or to prevent abuse (for example, a minimal record that a report was received).

Your rights

Depending on where you live, you may have rights under POPIA, the GDPR, or similar laws — including rights to access, correct, delete, or restrict processing of your personal information, and to object to certain processing or request portability where applicable.

• Access — view your public profile, stories, and activity through My Numredy and related pages while signed in.
• Correction — update your username, display name, email address, or password in Settings → Manage My Account. Contact privacy@numredy.com if you need a correction we cannot make in the app.
• Deletion — delete your account from Settings → Manage My Account → Danger Zone.
• Comment deletion — delete your own comments and replies from story pages.
• Engagement controls — remove story likes, number likes, and follows at any time through the relevant pages.

To exercise your rights, contact privacy@numredy.com. We will respond within the timeframe required by applicable law.

Children

Numredy is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact privacy@numredy.com.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Continued use of Numredy after changes take effect constitutes acceptance of the updated policy.