Privacy policy
1. Who is responsible
Nabo has two roles, depending on the data:
- Building data covers the community of one building: membership, unit, posts, comments, events, listings, messages and announcements. For this data, the building's property manager, administrator or owners' association is the controller. Nabo is the processor and acts only on their instructions, under the data processing agreement (Art. 28 GDPR; Albania Law No. 124/2024).
- Account, billing and security data covers your sign-in email, sessions, devices, consent records, customer billing and security logs. For this data, Nabo is the controller: [ENTITY NAME], [ADDRESS], info@nabo-app.org.
2. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, sessions, devices, preferred language | Signing in, security, sending you notifications in your language | Contract (Art. 6(1)(b)) |
| First and last name, optional photo, phone and bio | Showing who you are to your neighbours, as your privacy settings allow | Contract |
| Building, unit, household and role | Verifying that you live in the building; letting the manager run it | Contract; the controller's legitimate interest |
| Posts, comments, reactions, events, listings, loans and messages | Providing the community features | Contract |
| Announcement delivery and acknowledgements | Letting managers show that notices reached residents | The controller's legal obligation or legitimate interest |
| Reports, moderation decisions and appeals | Keeping the community safe; statements of reasons | Legitimate interest; legal obligation (DSA) |
| Consent records: age confirmation, Terms and Privacy versions, guidelines, push choice, marketing email (off by default), official-notice consent | Proving what you agreed to and when | Legal obligation |
| Crash reports, without personal data | Fixing errors | Legitimate interest |
| Anonymous, aggregate usage counts | Knowing which features are used; no tracking and no user identifiers | Legitimate interest |
3. What your neighbours see
By default, other residents see your first name, the initial of your last name and your photo. Your unit number, full name, phone number and bio are shown only if you switch them on. Your email address is never shown to other residents. Managers see it in the roster.
4. What we do not do
We do not show advertising. We do not sell or share data for marketing, and we do not track you across other apps or websites. We read messages only to deliver them and to act on reports.
5. Where data is stored, and who helps us
All personal data is stored in the European Union, with Supabase on Amazon Web Services in Paris, France. A small number of companies help us run Nabo. They are listed, with their location and the legal basis for any transfer outside the EU, on the sub-processor page. Transfers outside the EU (for example, Apple's push notification service) are covered by Standard Contractual Clauses. For Albania, transfers rely on the Commissioner's list of adequate countries or on equivalent contractual clauses with a documented risk assessment. Customers pay through Lemon Squeezy, Nabo’s merchant of record, which handles payment and invoice details as an independent controller under its own privacy policy; Nabo never sees card numbers.
6. How long we keep data
- While you are a member, your content stays in the building until you or a moderator deletes it.
- When you move out, your access ends at once. After 12 months, your name is removed from what you wrote in that building, and your reactions, RSVPs and roster entry are deleted.
- Private messages are kept while either person still lives in the building, and deleted 12 months after both have left.
- When a building leaves Nabo, its content, photos and memberships are deleted 90 days after it is archived. The former manager can ask for a deletion certificate.
- Download links for exports expire after 7 days, and the files are then deleted.
- Kept as long as the law requires: audit logs, consent records and billing records (invoices at least 10 years where applicable).
- When you delete your account, your profile, sign-in, sessions and devices are deleted at once. What you wrote stays in the building without your name, shown as "Former resident". Delete posts first if you want them gone. Deletion reaches our sub-processors within 30 days.
7. Your rights
- Access and portability: Settings → Download my data. We email you a link, valid for 7 days, to a file with everything you have posted and chosen.
- Erasure: Settings → Delete account.
- Correction: edit your name and profile in Settings.
- Objection and restriction: write to us.
- Complaints: you may complain to the data protection authority where you live or work. In Albania, this is the Information and Data Protection Commissioner.
For building data, we pass your request to the building's controller where needed, and help them answer it.
8. Age
Nabo is for people aged 16 and over. If we learn that an account belongs to someone under 16, we hide its content, contact the email address on file, and remove the account if needed. Photos and names of children need a parent's or guardian's consent (see the community guidelines).
9. Security
All traffic is encrypted with TLS 1.2 or newer. Sign-in tokens are kept in the device's Keychain. Photos are served through short-lived links that work only for members of their building. Every table is protected by access rules that are tested automatically. If a security incident affects building data, we notify the building's controller within 72 hours of discovering it.
10. Changes
When this policy changes in a way that matters, we publish a new version and ask you to accept it in the app.