Privacy Policy

The short version

We store the walls you make and the messages people write on them, because that is the entire product. We store an email address for anyone who signs in, so their walls come back to them. We do not sell data, we do not run advertising, and we do not use your content to train models.

What we collect

When you sign in

• Your email address: how your account is identified.
• Your display name: shown as the author on notes you write, and as the person who gathered a wall.
• Your profile picture, if you signed in with Google and Google provided one.

Sign-in is handled by Firebase Authentication (Google LLC), which stores your credentials. We never see your password.

When you use a wall

• The wall itself: its title, description, chosen backdrop, and when it was created and updated.
• The messages: the text, the name signed to it, the profile picture of the account that signed it if there was one, the colour and font chosen, and the count of hearts it has received.
• The files: photos, GIFs, video clips and voice notes people attach.

When you write on someone's wall

Writing on a wall records that you did, in the account of the person who gathered it: your name and the fact that you contributed. That record is what puts you in their list, whether or not you ever give a birthday. Nobody else can read it: not the other people who wrote on the wall, and not anyone else holding the link.

You can remove yourself from any one person's list at any time, and doing so removes the record and any date attached to it together.

If you were signed in, we also keep a short-lived note beside your message recording that it was you who wrote it. It exists only to confirm the connection above is real, it is deleted automatically after seven days, and it is readable by nobody at all, not even the person whose wall it is. Nothing in noya lets anyone look up who wrote which message.

When a wall was made for you

If you open a wall on the link its creator sent out, we ask once whether it was made for you. Saying yes stores the wall's identifier and the time you said so, in your own account and nowhere else.

It gives you nothing over the wall: no way to change it, remove it, share it or see anything about it you could not already see with the link. The person who gathered it is not told and cannot read the record. Nothing is checked, because anyone could say it and nothing rests on it. All it does is let us ask you, once, whether you would like your own birthday known. It is deleted with your account.

Your birthday, if you choose to give one

After you write on someone's wall we may ask whether you want your birthday known, so the people whose walls you write on can see it coming when they next open Noya. Answering is entirely optional. The question is asked after your message is already posted, nothing is withheld if you decline, and we only ask once.

• We ask for the day and month only. We never ask for the year, never store one, and cannot work out your age.
• Only people whose wall you have written on can see it. When you give a date it is attached to the record described above, in the account of the person who gathered that wall. Nobody else can read it, not the other people who wrote on the wall and not anyone holding the link, and it appears in no directory or public list of any kind.
• It follows you forward, and only forward.If you later write on another person's wall, that person is told too. That is what the question asked, and it is the only thing it does.
• You can take it back at any time. Removing your birthday from Home deletes the date and every copy of it, from everyone it was shared with. Anyone it was shared with can also clear it from their own list.

The legal basis for this is your consent, given by answering the question, and you can withdraw it at any time as described above.

Your home page also lists the people whose walls you have written on, and lets you remove yourself from any one of them without touching the rest. Those names are read from the walls themselves, which already showed you who gathered them.

We do not email you about birthdays

Birthdays appear in Noya when you open it, and that is the only place they appear. We send no reminders, no notifications and no marketing of any kind, and your email address is never used for anything but identifying your account. The only message we will ever send you is a reply to one you sent us.

Private replies sent before

A wall's recipient used to be able to send a private message back to the person who gathered it. That is no longer offered, and no new ones can be sent. Any that were already sent are still stored, still readable by that one person and nobody else, and still theirs to delete at any time.

In your own browser

A wall you have not saved yet is kept entirely in your browser's local storage and never reaches our servers. The same storage remembers which notes this device has hearted, and the name you last signed a note with, so you do not type it again. It also remembers the questions you have already said no to, whether that was a wall you told us was not yours or a birthday you would rather not give, so that a refusal costs you nothing and is never recorded anywhere we can read. Clearing your browser data removes all of it, including any unsaved wall.

When you write to us

The contact form sends us your name, your email address and your message so we can answer. That is all it sends.

Who we share it with

Only the services that make the product run, and only for that purpose:

• Google Firebase: authentication, the database the walls live in, file storage and hosting.
• Our mail provider, which delivers contact-form messages to our inbox.

We will also disclose data where the law requires it. We do not sell personal data, and we do not share it with advertisers.

Who can see a wall

Anyone with the link. Walls are unlisted, meaning they are not indexed by search engines and not browsable, but a forwarded link works for whoever receives it. Treat a wall as visible to everyone it is shared with.

How long we keep it

Walls and their messages are kept until the wall's creator deletes them. Deleting a wall deletes its messages and uploaded files. Backups may hold copies for a short window before they cycle out.

Deleting your account

There is a Delete my account link at the bottom of your home page, and using it is the whole of the process. No email, no waiting period. Because it cannot be undone, and because deleting an account is exactly what someone else would want to do to yours, we ask you to sign in again first if your session is not a fresh one.

What deleting your account removes:

• Your birthday, and every copy of it. The date itself, and the copy held in the account of every person whose wall you had written on.
• The record of whose walls you have written on, in both directions. Your list of those people, and their entry for you.
• Your profile and your sign-in account: your email address, your display name, and the profile record itself, with everything it and its lists hold, including the birthdays other people had shared with you, which stop being visible to anybody the moment the account they were shared into is gone.
• The short-lived notes recording that a message was yours, described above, rather than waiting for them to expire.
• Any wall you said had been made for you: the record described above. The wall itself belongs to whoever gathered it and is untouched.

What it deliberately does not remove:

• The notes you wrote on other people's walls, signed the way you signed them. They were written for someone else and they are the gift; pulling them off would take something from the person the wall was for rather than from us. With the record above gone, nothing in Noya connects them to an account any more.
• The walls you made, and everything on them.A wall holds other people's notes and is the thing its recipient was given, so closing your account does not take it down or take it away from them. If you want a wall gone, delete that wall first, which removes its messages and uploaded files with it, and then delete your account.

If you would rather keep the account and only withdraw what it shares, you do not need any of this: your home page removes your birthday, or removes you from one person's list, on its own.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Deletion you can also do yourself, as described above. Write to support@noya.so and we will answer within 30 days. If you are in the EU or UK, you also have the right to complain to your local data protection authority.

Children

Noya is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will remove it.

Changes

When this policy changes, the date at the top of the page changes with it. Material changes will be announced on the site.

Contact

Questions go to support@noya.so or through the contact page. See also our Cookie Policy and Terms of Service.