Privacy Policy
How we handle your personal data
Last updated 17 October 2026
1. Who is responsible
NOMA is operated by Lluis Moxo, an individual in Spain, as a personal, non-commercial project without a profit-making purpose. The app is free, with no subscriptions, payments or advertising. Contact: contact@capconsultor.eu.
Lluis Moxo is the controller of the personal data described in this policy. You can contact the controller at contact@capconsultor.eu.
2. Data we process
Account information includes your sign-in identifier, email, name, handle, profile picture, bio, date of birth, gender, traveller type and optional phone number and Instagram handle, where provided. Apple or Google supply the information you authorise during sign-in. The App Review account uses a password stored as a salted hash.
We process your selected countries and cities, wishlist, journals, photos, posts, stories, locations attached to content, friendships, requests, comments, likes, blocks and reports. Technical information includes sessions, device notification tokens and request and security logs.
If you enable contact discovery, hashed phone numbers are sent for matching and invitations. Contact names remain on your device. Hashed phone numbers are still personal data; hashing does not make them anonymous.
3. Purposes and legal bases
We process account, content and social information to provide the service you request (performance of our agreement with you). We process limited technical and moderation information to protect accounts, prevent abuse, resolve reports and maintain the service (legitimate interests in a safe and reliable service), and where necessary to comply with legal obligations.
Optional access to contacts, location, photos, camera and notifications is controlled through your device permissions. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. We do not sell your data or use it for advertising profiling.
Before accepting submitted content, our server applies automated text rules and a locally hosted image classifier to help enforce our community rules. The image classifier focuses on sexual imagery and may make mistakes; it does not detect every kind of harmful content. We do not send your content to an external moderation API. A rejected submission can be challenged by contacting contact@capconsultor.eu for human review. Reports are also reviewed by the operator.
4. Location and permissions
NOMA does not continuously track your location or publish a live location. If you allow it, your device location can help you select a place. Places you choose to attach to content are stored with that content and visible to its audience.
You can manage permissions in iOS Settings → Apps → NOMA. You can select places manually without location permission; features requiring a refused permission will be unavailable until you enable it.
5. Who can see your information
Visibility depends on your profile and content settings and the sharing actions you take. Content may be visible to selected friends, close friends or a broader audience when you choose that option. Information exposed in profiles and discovery helps people find each other.
A public journal link can be opened by anyone who has the link, including someone without an account. Do not share such a link for information you want to keep private. You can revoke journal sharing. Other people may keep copies or screenshots of content they have already seen.
6. Service providers and international processing
NOMA uses Neon for its PostgreSQL database, Backblaze B2 for media storage, Cloudflare for media delivery and Vercel for API hosting. Apple and Google provide sign-in; Apple also delivers push notifications. Providers receive information needed for their functions and may process technical information in different countries.
Where personal data is transferred outside the European Economic Area, applicable data protection safeguards are required, such as an adequacy decision or standard contractual clauses. Contact contact@capconsultor.eu to request information about the safeguards applicable to your data. Information may also be disclosed where required by law or necessary to handle a rights complaint.
7. Retention and account deletion
Account data is kept while needed to provide your account and requested features. You can request deletion inside the app through Settings → Account. Deletion disables access and removes personal profile information, sign-in credentials, sessions and associated content from active systems. Media deletion may be completed by a retry process if a storage service is temporarily unavailable.
A stripped account record may remain to preserve database references. Limited moderation or security records may be retained where necessary to resolve reports, prevent abuse or meet legal obligations. Backups and caches expire according to the relevant provider retention cycle; deletion from all copies is not instantaneous.
8. Your rights and complaints
You may request access, correction, erasure, portability and restriction of your personal data, and object to processing based on legitimate interests. Write to contact@capconsultor.eu; we may ask for proportionate information to verify account ownership. We normally respond within one month, subject to extensions allowed by law.
You may lodge a complaint with the Spanish Data Protection Agency (AEPD, https://www.aepd.es) or your local data protection authority. NOMA is intended for people aged 14 or above; contact us if you believe a younger child has an account.
9. Changes
We will update this policy when the service or its processing changes, and provide any notice or request any consent required by law.