Privacy Policy

Effective date: October 18, 2026

NotYet (“we”, “us”) is a private messaging app. This policy explains what information we collect, why, and the choices you have. We designed the app to collect as little as possible.

1. Information we collect

• Phone number. Used once to verify you are a real person. We store it only as a one-way scrambled value (a “hash”) so we can recognize repeat or banned accounts without keeping the readable number.
• Username. The name you can optionally choose to show other people that cannot be reused once taken by another user.
• Display Name. The name you choose to show other people alongside your username or by itself regardless of others having the same name.
• Device and technical information. A device identifier used to enforce bans, a push notification token so we can deliver notifications, and basic activity counts such as how often and from which device you use the app.
• Subscription information. Purchase receipts and confirmation from Apple or Google that a Premium subscription is active. We never see your card details; Apple and Google handle all payments.
• Connection information. Limited records that two accounts are connected, so messages can be delivered to the right person.

2. Information we do not collect

• We do not collect your name, email address, government ID, or precise location.
• We do not store your messages, photos, voice messages, videos or stories on our servers.
• We do not sell your information or use it for advertising.

3. Messages and content

Messages are end-to-end encrypted, meaning only you and the people in the conversation can read them. Your chats, profile cards, stories and profile photos are stored on your own device. Our servers only relay scrambled (encrypted) messages so they can reach the other person, including when their phone was off or offline.

4. Reporting abuse

You can report another user. Reporting is always your choice. When you report, you agree that the chat you are reporting, in readable form, is sent to us so we can review it. We keep reports, and records of banned accounts, so we can keep the community safe and meet legal obligations. These records are kept even if the accounts involved are later deleted.

5. How we use information

• To verify accounts and deliver messages and notifications.
• To confirm subscriptions and provide Premium features.
• To prevent abuse, enforce bans, and respond to reports.
• To comply with the law.

6. Who we share information with

We use trusted service providers to run the app, such as cloud hosting (Amazon Web Services), phone verification (Twilio), and Apple and Google for app distribution, notifications and payments. They only receive what they need to do their job. We may disclose information if required by law or to protect people's safety.

7. Deleting your account

You can delete your account inside the app. You'll confirm with a text message code, and we will then erase your phone verification data and other account data from our servers. Reports and ban records described in section 4 are retained. Because chats live on your device, deleting the app removes them from your phone.

8. Children

NotYet is for people 18 and older. We do not knowingly collect information from anyone under 13. If you believe a child under 13 has an account, contact us and we will remove it. If someone attempts to share explicit images of children please report so we can stop and expeditiously report them to any and all authorities.

9. Where we operate

NotYet is currently offered in the United States.

10. Security

We use encryption and minimize the data we hold. No system is perfectly secure, so we cannot guarantee absolute security.

11. Changes to this policy

If we change this policy, we will post the new version here and update the date above.

12. Contact us

Questions? Email support@noteverythingyet.com.