Nynly — Privacy Notice

Last updated: June 2026 · Version 1.0

This Privacy Notice explains how Nynly ("Nynly," "we," "us") collects, uses, and shares personal information when you use our website and mobile applications (the "Services"). By using the Services, you agree to this Notice and to our Terms of Service.

1. Information We Collect

1.1 Information you provide

Account information: name, email address, phone number, password, role (Family or Provider), preferred language, city.
Profile information: photo, introduction video, bio, services offered, hourly rates, service radius, vehicle availability, availability calendar.
Verification documents (Providers): background check certificates (e.g., French B3 extract, Checkr report), liability insurance certificates, professional references. These are stored in a restricted-access bucket.
Messages and content: messages exchanged with other users, photos shared in chat, reviews, and ratings.
Payment information: processed directly by Stripe — Nynly never stores your full card number or bank credentials.

1.2 Information collected automatically

Device and usage data (browser type, pages viewed, approximate region derived from language/phone settings).
Advertising measurement data via Meta Pixel (see Section 5).
Approximate location only if you grant browser permission (used to sort nearby Providers; never stored on our servers for Families).

1.3 Information from third parties

Background check results from consumer reporting agencies (e.g., Checkr), with your consent, where applicable under the Fair Credit Reporting Act (FCRA).

2. How We Use Information

Provide, operate, and improve the Services (matching, search by radius, messaging, bookings, payments, invoices).
Verify Provider documents. Automated pre-screening: uploaded verification documents are analyzed by an AI model (Anthropic Claude) to detect obvious fraud (e.g., name mismatch). No document is approved by AI alone — a human administrator makes the final decision.
Send service communications (booking confirmations, receipts, review requests) and, with your consent, marketing communications (you can opt out at any time).
Prevent fraud, enforce our Terms, and comply with legal obligations (including tax reporting such as 1099-K via Stripe).

3. How We Share Information

Recipient	Purpose	What is shared
Other users	Marketplace operation	Your public profile (name, photo, video, bio, services, rates, city, badges). Families see Provider profiles; Providers see Family first name, photo/video, and messages.
Stripe	Payment processing, payouts, tax forms	Name, email, payment and payout details, transaction amounts
Checkr (when enabled)	Background checks (FCRA-regulated)	Name, date of birth, contact details — with your explicit consent
Supabase	Database & secure file hosting	Account data, messages, documents
Cloudinary	Video hosting	Introduction videos
Anthropic	AI document pre-screening & support agents	Document images submitted for verification; support conversation text
Vercel	Application hosting	Technical/usage data
Resend	Transactional email delivery	Email address, email content
Meta (Facebook)	Advertising measurement	Pixel events (see Section 5)
Authorities	Legal compliance & safety	Data required by law, court order, or to protect users — including reporting suspected crimes against children

We do not sell your personal information.

4. Your Privacy Rights

4.1 All users

Access & portability: download all your data anytime from your profile ("Download my data").
Deletion: delete your account anytime from your profile (not possible while missions are active). Some records are retained where required by law (e.g., payment records for tax purposes).
Correction: edit your profile information at any time.

4.2 California residents (CCPA/CPRA)

You have the right to know, delete, correct, and opt out of "sharing" for cross-context behavioral advertising. To exercise these rights, email privacy@nynly.com. We will not discriminate against you for exercising your rights.

4.3 Florida residents

Florida residents may have rights under the Florida Digital Bill of Rights, including access, deletion, and correction. Contact privacy@nynly.com.

4.4 European users (GDPR)

If you use the Services from the European Economic Area, you additionally benefit from GDPR rights (access, rectification, erasure, restriction, portability, objection). Legal bases: contract performance (Art. 6(1)(b)), legitimate interests (fraud prevention, Art. 6(1)(f)), consent (marketing, Art. 6(1)(a)), and legal obligation (Art. 6(1)(c)).

5. Cookies and Advertising

We use essential cookies for authentication and session management, and the Meta Pixel to measure the effectiveness of our advertising. The Pixel may collect identifiers and page events. You can limit ad tracking via your browser settings and at Meta Ad Preferences.

6. Children

The Services are strictly for adults (18+). We do not knowingly collect personal information from children. Information that Families voluntarily share about their children (for example, ages or care instructions in messages) is shared under the Family's sole responsibility and used only to facilitate the requested Care Services. We never use children's information for marketing.

7. Data Security

All traffic is encrypted in transit (TLS).
Verification documents are stored in a restricted-access bucket; access requires administrator credentials.
Database access is protected by Row-Level Security policies.
Payment credentials are handled exclusively by Stripe (PCI-DSS compliant).

No system is 100% secure. If we learn of a breach affecting your personal information, we will notify you as required by applicable law.

8. Data Retention

Account data: kept while your account is active, deleted upon account deletion except where retention is legally required.
Payment and invoice records: retained as required by tax law (typically 7 years).
Verification documents: retained while your verification badge is active; deleted upon account deletion.
Messages: deleted with your account.

9. International Transfers

Our service providers are primarily located in the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S. Where required (e.g., for EEA users), we rely on appropriate safeguards such as Standard Contractual Clauses implemented by our processors.

10. Changes to This Notice

We may update this Notice from time to time. Material changes will be announced by email or in-app notice at least 14 days before taking effect.

11. Contact

Privacy questions or requests: privacy@nynly.com