Privacy Policy

Effective October 10, 2026

1. Who we are

Neerly (neerly.net) is made by Umunhum Labs LLC, a company in the United States. Umunhum Labs LLC is the "controller" of your personal data under the GDPR. Questions or requests: [email protected].

2. What we collect

Your account

• Your name, email address and @username.
• Your password, stored only as a salted scrypt hash. We can't read it.
• Your buddy, its outfit, your trail style and the badges you've earned.
• Totals: number of shares, minutes shared, distance, times watched, weekly streaks. These are numbers only, never places.
• Who you've shared with or added (names, emails or @usernames you type), and your quick starts.

While you're sharing

• Your location from your device: latitude and longitude, accuracy, and the trail of recent points.
• Your speed (to work out an ETA), and your battery level if your browser reports it and you're using the late check.
• Your destination pin and its name, the "Heading to" or status text, and the ETA you type.
• The weather for your area, looked up with your location rounded to about 1 km, so your buddy can dress for it.
• Who is watching (people with Neerly by name; others only as "someone"), and the reactions they send.

When you watch someone's share

You don't need an account. We note that the link is being watched so the sender sees "👀 someone is watching". We don't store a profile of you. If you have a Neerly account and are signed in, the sender sees your name.

Notifications and email

• If you turn on notifications, we store the push address your browser gives us (up to 10 devices per account), and a list of the notifications we sent you for the Activity tab.
• We send email only for your account: confirming your address, resetting your password, and notices you've asked for.

Technical data

Like every website, our servers receive your IP address and browser type with each request. We use these only to deliver the service and keep it secure. They may appear in our host's short-term server logs.

3. What we don't do

• We don't keep a history of where you've been. Ended shares keep no coordinates.
• We don't track your location when you're not sharing, and the web app can't.
• We don't sell, rent or trade personal data, and we don't share it for advertising.
• We don't show ads, and we don't use advertising or analytics cookies or trackers.
• We don't use your data to train AI models.

4. How long we keep it

Deleted data may stay in our host's routine backups for a short time until they're overwritten.

5. Why we use it (legal bases)

• To provide Neerly (your account, shares, notifications): necessary to perform our agreement with you (GDPR Art. 6(1)(b)).
• Your location and notifications: your consent, which you give each time you start a share and when you allow notifications. You can withdraw it any time by stopping a share or turning notifications off (Art. 6(1)(a)).
• Security and preventing abuse (rate limits, logs): our legitimate interest in keeping Neerly safe (Art. 6(1)(f)).
• Legal obligations, if a valid legal request requires it (Art. 6(1)(c)).

6. Services that help run Neerly

We use a small number of providers. They act on our behalf and only get what they need.

If you tap Directions on a share, your maps app or Google Maps opens with that place. What happens there is covered by their privacy policy.

7. What's stored on your device

Neerly stores a sign-in token and your settings (such as saved places and your app icon choice) in your browser's local storage, so the app works. When you watch a share, the browser tab keeps a random viewer code so you're counted once. These aren't used for tracking, and they're removed when you sign out or clear your browser data. We don't use cookies for advertising or analytics, so there's no cookie banner.

8. Your rights

Under the GDPR (and similar laws elsewhere), you can:

• Access your data and get a copy in a portable format.
• Correct it. You can edit your name, username and buddy in Profile.
• Delete it. Use Profile → Delete account, or email us.
• Object to or restrict how we use it.
• Withdraw consent at any time (stop sharing, turn off notifications).
• Complain to your data protection authority. We'd appreciate the chance to fix it first.

Email [email protected] from the address on your account. We reply within 30 days and don't charge for requests.

9. Where your data is processed

Neerly's servers are in the United States. If you use Neerly from the EU, UK or elsewhere, your data is transferred to the US. We rely on our providers' Standard Contractual Clauses (or the EU-US Data Privacy Framework where a provider is certified) to protect it.

10. Security

All traffic is encrypted (HTTPS). Passwords are hashed. Share links are long random codes that stop working when the share ends. Location is deleted when a share ends, so there's no location history to leak. No system is perfectly secure; if a breach affects you, we'll tell you and the authorities as the law requires.

11. Children

Neerly isn't for children under 13, and we don't knowingly collect their data. In the EU and UK you must be 16, or have a parent's or guardian's consent. If you think a child has an account, email us and we'll delete it.

12. California and other US states

We don't sell or "share" personal information (for cross-context advertising) as those terms are defined in the California Consumer Privacy Act and similar state laws. You have the right to know, correct and delete your information, and we won't treat you differently for using these rights.

13. Changes and contact

If we change this policy, we'll update the date at the top. For important changes, we'll tell you in the app or by email before they take effect.

Umunhum Labs LLC · [email protected]