Privacy Policy

Last updated: 30 October 2026

Nakodu is a forum app where people join communities ("hubs"), post, comment, vote and chat. This policy explains what we collect, why, and what you can do about it. We have tried to keep it short and plain.

What we collect

Your account

Username and password. Your password is stored only as a secure hash; we can't read it. We do not ask for your email address or phone number.
Birthday. Asked when you sign up, to check you're old enough to join and to see 18+ content. It's never shown to anyone.
Profile picture and cover photo. A generated avatar, or photos you upload.
Settings, such as who can message you, notification choices and the people you block.

What you post

Posts, comments, polls, images, votes, saved and hidden posts, the hubs you join and the people you follow.
Chat messages between you and other people, and messages to hub moderators. These are stored on our servers so they can be delivered; they are not end-to-end encrypted.
Reports you make, and moderation actions taken on your content.

Technical information

Push notification token, a code from Google that lets us send notifications to your phone. It's deleted when you log out.
Crash reports. If the app crashes, a report with the device model, Android version and technical details of the crash is sent to Firebase Crashlytics. It doesn't include your posts or messages.
Server logs. Our hosting providers keep short-lived logs of requests (such as IP address and time) for security and to keep the service running.
Sign-up check. To stop automated sign-ups, logging in and signing up use Cloudflare Turnstile, which checks your device and connection for signs of automation.

How we use it

To run Nakodu: show your posts, deliver messages and notifications, and keep you logged in.
To keep it safe: enforce the rules, fight spam and abuse, and investigate reports.
To fix problems, using crash reports.

We don't sell your data, we don't show ads, and we don't use your data to build advertising profiles.

What other people can see

Your username, profile picture, cover photo, sparks, followers, posts and comments are public, including to people without an account. Posts in private and members-only hubs are visible only to their members. Chats are visible only to the people in them. Messages to a hub's moderators are visible to you and that hub's moderators.

Services we use

Supabase stores the database, images and accounts, and runs our server code (servers in the EU).
Google Firebase delivers push notifications and collects crash reports.
Cloudflare Turnstile checks sign-ups and logins for bots.
Vercel hosts this website.
YouTube, Spotify and TikTok players load only when you tap play on a video or track in a post. They are then subject to those companies' own privacy policies. YouTube videos use YouTube's privacy-enhanced mode.
Link previews are fetched by our server, not your phone, so the sites you see previews of don't learn your IP address.

How long we keep it

Your account and content stay until you delete them or your account.
When you delete your account, your profile, password, birthday, settings, votes, chats, follows and push tokens are deleted. Posts and comments you didn't delete stay up but are no longer linked to you; they show the author as "[deleted]". Delete them first if you want them gone.
Nightly backups are kept for up to 14 days and then removed.
Crash reports are kept for 90 days.

Your choices and rights

Edit or delete any post or comment you've written.
Change who can message you, block people, and turn off notifications in Settings.
Delete your account at any time in the app: Settings, Account, Delete account. See Delete your account for other ways.
Depending on where you live, you may have rights to access, correct, export or delete your data, or to object to how we use it. Contact us and we'll help.

Children

Nakodu is not for children under 13, and 18+ content needs a birthday showing you're an adult. If you believe a child under 13 has an account, contact us and we will delete it. See our child safety standards.

Security

Connections to Nakodu are encrypted, passwords are hashed, and access to data is limited by strict database rules. No system is perfectly secure, so please use a password you don't use anywhere else.

Changes

If we change this policy in a way that matters, we'll update the date above and let you know in the app.

Contact

Email support@nakodu.top.