Privacy Policy
- This policy covers NativeServer, used only by NativeServer (NS) builds of NativeGrind.
- The standard build of NativeGrind sends nothing to us.
- Your synced data is encrypted on your device with a key only your devices hold. We can't read it.
- We don't use ads, analytics or trackers, and we never sell data.
- You can delete your account, and everything synced with it, from the app at any time.
1. Who we are
NativeServer is run by Jay Brammeld, an individual based in Scotland, who is responsible for your data under UK data protection law. Contact: jay@imaoreo.dev.
2. What this policy covers
This policy covers NativeServer (https://nativeserver.imaoreo.dev) and the NativeServer features of NS builds of the NativeGrind app. The standard build doesn't connect to NativeServer, so we receive nothing from it. Your use of Grindr itself is covered by Grindr's own privacy policy.
3. Your data
Encrypted with your key: we can't read it
When you create a NativeServer account, your device generates an encryption key that stays on your devices and is shared between them only when you link a new device. The following is encrypted with that key before it leaves your device:
- your saved Grindr accounts, including their sign-in tokens;
- your chat history;
- your chosen browsing location;
- the key the app uses to sign your media uploads.
We store this encrypted data and when it last changed so your devices can stay in sync. The labels we store it under are also derived from your key, so they don't reveal what the data is. Without your key we can't decrypt it, and if you lose every device that holds it, we can't recover it for you.
Stored so we can run your account
| What | Why |
|---|---|
| Your NativeServer account ID | To identify your account |
| Each linked device's name, public key and the date it was added | So your devices can sign in securely, and so you can see and remove them |
Used while you're connected, not kept
| What | Why |
|---|---|
| Your IP address and device ID | To make the connection work, prevent abuse and apply rate limits. Held in memory and in counters that expire within minutes, not saved to our database. |
| A one-time sign-in challenge, signed with a key kept on your device | To prove it's your linked device connecting, without sending a password. The private key never leaves your device. |
| A check for the current Terms and Privacy Policy versions | So the app knows whether to ask you to accept an updated version. This happens before you accept, and we only see your IP address, as with any web request. |
4. Backups made while you browse
To provide backups, your app also sends NativeServer some of what you see on Grindr while you use it, such as profiles, profile photos, and chat and album media. This backed-up data is not encrypted with your key, and some of it can be accessed by anyone who has its identifier. Profile records your app sends can include your approximate location at the time, rounded to an area rather than an exact point.
5. Why we can use your data
- To provide the service you signed up for (your account, linked devices and sync): this is necessary to perform our contract with you, the Terms of Service.
- To keep the service secure (IP addresses, rate limits, device sign-in): our legitimate interest in protecting the service and its users.
6. Who we share it with
We don't sell or rent data, and we don't share it with advertisers. It's only handled by the providers that host and connect our servers, under their own security obligations, and anyone we're legally required to disclose it to.
7. How long we keep it
- Account, device and encrypted sync data: until you delete your account or remove the device.
- Connection details: only while you're connected, and rate-limit counters for a few minutes.
- When you delete your account, your encrypted sync data is deleted with it. The record for the device you deleted it from (its name and public key) is kept, no longer linked to any account. Email us if you want that removed too.
8. Where it's stored and how it's protected
Data is stored on servers we operate. Connections to NativeServer are encrypted in transit, and synced data is also encrypted on your device before it's sent. If data is ever transferred outside the UK, we'll make sure appropriate safeguards are in place.
9. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it;
- get your data in a portable format.
You can delete your account and its synced data yourself in the app under Settings → NS Account, after removing any other linked devices. For anything else, email jay@imaoreo.dev. We'll reply within one month.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
10. Age
NativeServer is only for people aged 18 or over. If we learn that we hold data about someone under 18, we'll delete it.
11. Changes to this policy
If we change this policy in a way you need to know about, the app will ask you to read and accept the new version before you keep using NativeServer. The version and date are at the top of this page.
12. Contact
Questions or requests about your data: jay@imaoreo.dev.