Privacy Policy
Last updated: September 2026
This is a plain-language summary of how Noctua handles data. It is a starting template and should be reviewed by a lawyer before you rely on it.
1. Who we are
Noctua is an adults-only (18+) community for discreet listings and meetups. You can reach us through the in-app Support page.
2. What we collect
- Account: your login email.
- Profile: an anonymous handle, optional city/country (approximate area only), bio, interests and photos.
- Content: your posts, events, likes, join requests, gallery photos and hotspots.
- Messages: private 1:1 chats, event group chats, moderation messages and support requests.
- Analytics (only with your consent): Google Analytics usage data.
3. Sensitive data
Interests/kinks and anything about your sexual life are special-category data. We process them only with your explicit consent, which you give when you register and can withdraw by deleting your account.
4. Why we use it (legal basis)
To provide the service (contract), to keep the community safe (moderation, 18+), and — for sensitive data and analytics — based on your consent. We never send marketing and never sell your data.
5. How long we keep it
We keep as little as possible. Your profile and content stay while your account exists. Private 1:1 messages are removed about 24 hours after being sent. When you delete your account, we remove your profile and content from the app.
6. Who we share with
We use Google Firebase to host the app, sign you in and store data, and Google Analytics (only with consent). These providers may process data outside the EU under their own safeguards. We do not share your data with anyone else.
7. Security
Data travels over HTTPS and is encrypted at rest by our provider, with access controlled by security rules. Note: messages are not end-to-end encrypted — please avoid sharing information you would not want moderators or the provider to be able to access.
8. Your rights
You can access, correct, export or delete your data, and withdraw consent, at any time — most of it directly in your Profile (export / delete account) or via Support. You may also complain to your data protection authority (in Portugal, the CNPD).
9. Cookies
We use essential storage to keep you signed in and remember your language. Analytics cookies load only after you accept them in the cookie banner; you can reject them and the site still works.