Preproduction notice · 8 September 2026

Privacy at Nosotras

This notice describes the current preproduction system. It is not the final public-launch policy. Nosotras is designed for adults to form platonic friendships. We collect only information needed to operate profiles, matching, private conversations, safety, support and account controls.

Information you provide

Your account uses Google or Apple sign-in. We store the provider identity needed to keep your account, along with your profile, broad location, interests, languages and discovery preferences. Birth date is private and used to enforce the 18+ requirement. Your profile photo is private until you choose to publish a verified profile. Messages, voice notes, chat photos, reactions, plans, reports and support tickets are stored to provide the features you use.

How information is used and shared

Supabase hosts authentication, database, private media and server functions in São Paulo. Google processes text only after both participants agree to translation; originals remain available. Amazon Web Services processes an expressly accepted live selfie and profile photo in US East (N. Virginia) for liveness and matching. We opted this AWS account out of use of those inputs for service improvement. Cloudflare delivers these public pages and isolated browser verification assets. Expo may deliver notifications after permission is granted. Service providers process information to supply these functions; Nosotras does not sell personal information or use behavioral advertising.

Verification

We do not request identity documents, infer gender, or create a searchable face collection. Our code does not retain the selfie recording or AWS reference frame. We retain the verification result, consent record and applicable profile photo while the account exists. AWS session results become unavailable through its API after three minutes; that is not a promise of complete erasure from every AWS system. Automatic checks of later photo changes require separate permission and can be turned off.

Safety, retention and deletion

Blocking takes effect immediately. Reports retain selected evidence for safety review under the configured retention period. Account deletion immediately stops discovery and contact, then a retryable worker removes the account, profile, messages, translations and private media. Limited report evidence or operational records may be retained where necessary for safety, fraud prevention or legal obligations. Preproduction retention values and final launch jurisdictions remain under review.

Your choices

You can change discovery, translation and notification preferences, revoke automatic photo checks, block/report people, and delete your account in the app. You may also start account deletion from the web deletion page. Contact support@nosotrasapp.com for access, correction, deletion or provider-specific requests.

Children and changes

Nosotras is for people aged 18 or older. We will publish a reviewed, dated policy before public launch and identify material changes.