Privacy Policy

Last updated: May 27, 2026

Nakama ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the Nakama Android application and associated website at nakamaai.app.

1. Information We Collect

Account Information: When you create an account, we collect your email address, display name (username), and a unique user ID. If you sign in with Google, authentication is handled entirely by Google's OAuth system — we never receive or store your Google password.

Character Data: Characters you create are stored locally on your device using the Android Room database. If you choose to publish a character, only the character's public fields — name, public bio, tags, greeting, and optionally the full character definition if you opt in — are uploaded to our servers to enable discovery by other users. Chat history, internal character definitions (when not shared), and model routing settings are never uploaded.

Chat History: Your chat messages are stored locally on your device only. We do not store your chat messages on our servers. Messages are transmitted to our AI routing backend solely for the purpose of generating AI responses and are not retained, logged, or used for any other purpose.

Usage Analytics: We collect anonymized usage events — such as which features are used, which AI models are selected, and how users navigate the app — via Firebase Analytics. This data is aggregated and cannot be used to identify you personally. You can opt out of analytics in Settings.

Crash Reports: We collect crash reports and non-fatal error logs via Firebase Crashlytics to identify and fix bugs. These reports may include device model, Android OS version, app version, and app state at the time of the crash. Crash reports do not contain your chat messages or character definitions.

Push Notification Token: If you enable push notifications, we store your Firebase Cloud Messaging (FCM) token to deliver notifications such as new DMs, likes, and comments. You can revoke this at any time in Settings → Notifications.

2. How We Use Your Information

We do not sell your personal data. We do not use your data for advertising targeting.

3. Third-Party Services

Supabase — User accounts, published character data, social features (follows, likes, comments), and DM metadata are stored in Supabase's PostgreSQL database hosted in the EU. Supabase Privacy Policy →

Firebase (Google) — Firebase Analytics collects anonymized usage events. Firebase Crashlytics collects crash reports. Firebase Cloud Messaging delivers push notifications. Firebase Privacy Policy →

Groq — AI chat responses are processed through Groq's inference API. Chat messages are transmitted to Groq to generate responses and are subject to Groq's data retention policy. Groq Privacy Policy →

OpenRouter — Some AI models are accessed through OpenRouter. The same message transmission rules apply. OpenRouter Privacy Policy →

Railway — Our backend infrastructure (API routing, moderation, translation) runs on Railway. Your data passes through Railway's infrastructure but is not stored there. Railway Privacy Policy →

Google Play Billing — Subscription purchases are processed by Google Play. We receive confirmation of purchase status but not your full payment details. Google Payments Privacy Policy →

4. Data Retention

Account data and published character data are retained until you delete your account. If you unpublish a character, it is removed from the public Discover feed immediately. Analytics data is retained for 14 months per Google's standard Analytics retention policy. Crash report data is retained for 90 days.

5. Your Rights

You have the right to access, correct, or delete your personal data at any time. To request deletion of your account and all associated data, email support@nakamaai.app with the subject "Data Deletion Request". We will process deletion requests within 30 days.

If you are a resident of the European Economic Area, you also have the right to data portability and the right to object to or restrict processing. Contact us at the address above to exercise these rights.

6. Children's Privacy (COPPA)

The SFW version of Nakama is intended for users aged 13 and older. The NSFW version is strictly for users aged 18 and older. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child under 13 has created a Nakama account, please contact us immediately at support@nakamaai.app and we will delete the account promptly.

7. NSFW Build

The NSFW version of Nakama contains explicit adult content and is distributed exclusively through direct APK download — it is not available on the Google Play Store. Access to the NSFW download requires age verification confirming you are 18 or older. By downloading the NSFW build, you confirm you are of legal age to access adult content in your jurisdiction and that such content is legal where you reside.

8. Security

We use industry-standard security measures including HTTPS for all data in transit, Row Level Security (RLS) policies in Supabase to ensure users can only access their own data, and secure credential storage. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via an in-app notice or email to the address associated with your account. Continued use of Nakama after changes constitutes your acceptance of the updated policy. The date at the top of this page reflects the most recent revision.

10. Contact

For privacy questions, data requests, or to report a concern, contact us at:

Email: support@nakamaai.app
Subject line for data requests: "Data Deletion Request" or "Privacy Inquiry"