Overview
This Privacy Policy explains what information Nerve processes, why it is processed, when it may be visible to others, and the choices available to users. Nerve is operated by TC Infra.
Passkey-only accounts
Nerve uses passkeys as its only account sign-in method. Nerve does not use Google or Apple OAuth and does not ask for an email address or phone number to create or authenticate an account. Nerve does not receive the biometric information or device passcode used by your device to approve a passkey operation.
To provide passkey accounts, Nerve processes a randomly assigned user ID, passkey credential identifiers and public keys, device or installation identifiers, session data, and limited credential metadata needed to add, use, list, or revoke a passkey.
No payment data
Nerve does not offer paid accounts or in-app purchases and does not process payment card, billing, purchase, or app-store entitlement information. Apple, Google, or an app store may independently process information when you download or update the app under their own terms and privacy policies.
Encrypted private messages
Private messages and related private content are encrypted before they are sent through the Nerve service. Nerve processes and routes encrypted message envelopes rather than message plaintext. Encryption does not hide all metadata: Nerve may process sender and recipient IDs, conversation or channel IDs, timestamps, delivery state, message size, and other routing information needed to deliver and synchronize private messages.
Public posts
Public posts are public by design and are not private messages. Nerve processes the content of public posts, the associated user or author ID, timestamps, channel or topic information, interaction counts, and moderation or abuse-prevention metadata. Public posts may be viewed, copied, indexed, quoted, or shared by other users and external services. Deleting an account cannot remove copies previously made by others.
Device identifiers and push notifications
Nerve may process device or installation IDs, Apple Push Notification service tokens, Firebase Cloud Messaging tokens, notification preferences, and delivery metadata to send and troubleshoot notifications. Apple and Google process push-notification information under their own privacy policies. Notification previews and delivery behavior also depend on your device and operating-system settings.
Interaction, diagnostic, and security metadata
Nerve may process IP addresses, request times, app and operating-system versions, device type, language or locale, session and request identifiers, feature interactions, delivery status, error and crash diagnostics, rate-limit events, and security or abuse-prevention records. We use this information to operate the app, synchronize state, diagnose failures, protect accounts, prevent abuse, and maintain reliability.
IP addresses and external services
When you connect to Nerve, Nerve and the infrastructure providers that deliver or protect the service may see your IP address and standard network request metadata. Push providers may also receive network and delivery information. Other apps, browsers, websites, or external services that you choose to open or connect with Nerve may receive your IP address and request information directly from your device. Their handling of that data is governed by their own privacy policies.
How we use information
We use information only as needed to create and authenticate passkey accounts, deliver encrypted private messages, publish public posts, send notifications, synchronize app state, provide requested features, investigate problems, secure the service, prevent abuse, comply with law, and respond to user requests.
Service providers and disclosures
We do not sell personal data. We may provide limited information to infrastructure providers needed to operate Nerve, including hosting, storage, content-delivery, security, push-notification, and app-distribution providers. We may also disclose information when legally required, to investigate abuse or security incidents, or to protect users, the public, our rights, or the integrity of the service.
No ads and no tracking
Nerve does not display advertising, use advertising identifiers, build advertising profiles, or use personal data for targeted advertising. Nerve does not track users across apps or websites owned by other companies and does not sell or share personal data for cross-context behavioral advertising.
Data retention
We retain information only for as long as reasonably needed to provide Nerve, maintain security and reliability, resolve disputes, and meet legal obligations. Retention varies by data type. Encrypted messages, public posts, account records, push tokens, operational metadata, security records, and backups may have different retention periods. Backup copies age out through normal backup rotation.
Security
Nerve uses technical and organizational safeguards designed to protect information in transit and at rest. Private content is designed to remain encrypted while routed through the service. No service can guarantee absolute security. Users remain responsible for protecting their devices, passkeys, and information they choose to publish publicly.
Account deletion and user choices
Account deletion is available inside the Nerve app. An in-app deletion request disables the account and begins deletion of account data, passkey mappings, device registrations, and push tokens, subject to limited retention required for security, fraud prevention, legal compliance, dispute resolution, and backup rotation. Public posts or copies already shared with others may remain where deletion is not technically or legally possible.
Depending on where you live, you may also have rights to access, correct, delete, export, restrict, or object to certain processing of personal data, or to appeal a privacy decision. Contact us to exercise applicable rights.
Support communications
An email address or phone number is not part of a Nerve account. If you voluntarily contact us by email or another support channel, we process the contact address, message, attachments, and related diagnostic details only as needed to respond, keep appropriate support records, and protect the service. Do not send passkeys, private keys, tokens, passwords, or unnecessary sensitive information in a support request.
International processing and legal bases
Information may be processed in countries where we or our service providers operate. Where a legal basis is required, we process information to provide the service and perform our agreement with users, comply with legal obligations, protect users and the service, and pursue legitimate interests in security, reliability, support, and abuse prevention.
Users aged 13 and older
Nerve is intended for users aged 13 and older. Children under 13 must not use Nerve. If we learn that we have collected personal information from a child under 13, we will take appropriate steps to delete it. A parent or guardian may contact us about a suspected under-13 account.
Changes to this policy
We may update this Privacy Policy when Nerve or applicable requirements change. We will update the effective date on this page and provide additional notice when required.
Contact
For privacy, support, or data requests, use the Nerve support page. Nerve is operated by TC Infra.