Nalma

Privacy policy

Effective 1 August 2026

Nalma is an app for two people who miss each other. A tap from one is felt on the other one’s phone. That is all it does, and this policy describes exactly what data is needed to make that work.

The most important part first: Nalma has no accounts. We don’t ask for your name, email, password, or access to your contacts. We don’t know who you are, and there is no way for us to find out.

1. What we do NOT collect

Worth starting here, because this is the part most often assumed backwards:

The content of what you send each other. A pulse has no content: it is a signal. There are no messages, no text, no images to store.
Audio. The app cannot record: it neither requests nor declares the microphone permission.
Location. We neither request nor use it.
Contacts, calendar or calls.
Photos. The camera is used only to read a pairing QR code, and that reading happens on your phone: the image is never stored or sent anywhere.

2. What we collect, and what for

Data	What for	How long we keep it
A device identifier — a random number the app generates the first time it opens	It is what lets your phone and your person’s recognise each other. It is not tied to you: it belongs to the device	For as long as you use the app
Random key for sending notifications and the phone’s language	Delivering the notice when a pulse arrives and the app is closed, and writing it in your language	For as long as you use the app
The pairing — which two devices, identified by their random identifier, are connected	Knowing who to deliver a pulse to	Until either of you ends it
Activity log, without content — that a pulse happened, when, and by which route it was delivered	Keeping the service working and diagnosing failures	30 days, then deleted automatically
Technical data about the phone — manufacturer, model, Android version and what vibration strength it supports	Making the vibration feel similar across different phones	30 days
Purchases — the receipt issued by Google Play	Enabling the service on both phones and restoring it if you reinstall	For as long as the entitlement lasts
Server logs — these include the IP address the phone connects from	Operating the service, detecting abuse and diagnosing failures	7 days
Crash reports — if the app closes on its own: the point in the program where it happened, the phone model and the Android version	Finding and fixing the error	Per the provider (see section 4)

About crash reports: before they leave the phone, the app strips session credentials and invitation links from them. Your IP address is not sent, nor is any identifier of a person.

3. What we do NOT do with all of this

We do not sell data. To anyone, in any form.
There is no advertising and no advertising profiling.
There is no cross-app or cross-site tracking.
There is no feed, ranking or public metric. Nobody but you knows about the two of you; the rest of the world sees nothing.

4. Who we interact with

Only the services needed for the app to work:

Google — to deliver notifications (Firebase Cloud Messaging) and to process purchases (Google Play). Google handles that data under its own policies.
Expo — the service that dispatches notifications towards Google. It receives the notification token and the text of the notice, which is always the same phrase.
Sentry — receives the crash reports described above.

Everything else — the database and the server — runs on our own infrastructure. We use no behavioural analytics services.

5. How to delete your data

Ending the pairing is done from the app, at any time and instantly. The connection between the two phones ceases to exist.
Uninstalling the app removes the identifier and the session credential from your phone. Without them, whatever is on the server side before it is deleted automatically cannot be tied to any device.
Requesting immediate deletion of whatever is still there: write to the address in section 8. Since there are no accounts, we cannot identify you by name or email: we need the device identifier, which appears at the bottom of the linking screen — the one the app shows when this phone is not connected to another — in small grey type. You can press and hold it to copy it. If you are linked, it appears once you unlink.

Beyond that, the activity log deletes itself after 30 days and the server logs after 7, with nobody having to ask.

6. Children

Nalma is not directed at children under 16, and we do not knowingly collect data from people that age.

7. Changes

If this policy changes, the date above changes. If the change affects what data we collect, we announce it inside the app before it takes effect.

8. Contact

For any privacy question, or to request deletion of your data: privacy@mail.sudaca.com.ar