Privacy Policy

Nellmi is an app for going out with your crew. The data controller is Mosbac, a sole proprietor, Bulevar despota Stefana 2, 21000 Novi Sad, Serbia.

For anything about your data, write to privacy@nellmi.com.

• Account: your email, the name you choose, your username and, if you want, your gender (only used for your avatar color).
• Social: friends, crews, chats, messages, photos you send, invites and your answers to them.
• Nights out: nights, places, drinks and food, rides, costs, rounds and titles.
• Sign-in: if you sign in with Apple or Google, we receive your email and name from them, and nothing else.
• Paying each other back: if you choose to, the details where friends can send you money (bank account for IPS QR, Revolut or PayPal). Only people you split a bill with see them.
• Receipt photos: when you use “Snap the bill”, the photo is sent to Anthropic (Claude) only to read the items and prices. It isn't stored by us or used to train AI models.
• Location: used on your phone with your permission, while the app is open, to know your city and suggest places near you. To show places nearby, your current position goes to our server for that one search; we don't store it and we don't keep your location history. Your home address is saved only on your phone; while you type it, the text and your approximate position go through our server to Photon (OpenStreetMap) to suggest addresses, and nothing is stored.
• Error reports: when the app crashes we receive a technical report without your name, email or IP address.
• Notifications: a device token, so we can send you invites and messages. You can turn notifications off in your phone settings.

• Waitlist: your email, and your city if you give it, so we can tell you when Nellmi launches.
• Partner form: the details you enter, so we can reply to you.
• Event and offer forms (organizers and venues): the details you enter, so we can check and publish the event or offer. Your contact details are never published.
• Visit statistics: we count visits with Cloudflare Web Analytics (pages viewed, country, device type, where the visit came from). It uses no cookies and doesn't identify you or follow you to other sites.
• We don't use analytics cookies, advertising cookies or tracking pixels on this website.

• To run the app and your account (performance of a contract).
• Location, notifications and the waitlist (your consent, which you can withdraw at any time).
• To keep Nellmi safe, fix errors and prevent abuse (our legitimate interest).
• To meet legal obligations, for example accounting.

• Your totals and monthly statistics are visible only to you. People in the same night out see that night's drinks, rounds, bills and titles, so you can split costs.
• Chat messages and photos are visible only to members of that chat.
• Nobody can add you to a night without your confirmation. Only your friends can add you to a crew chat, and you can leave it at any time.

We use trusted service providers who process data only on our instructions:

• Supabase: database and file storage for the app and the website forms (servers in the EU)
• Sentry: error reports (servers in the EU)
• Resend: sign-in emails
• Expo: app delivery and push notifications
• Anthropic: reading receipt photos (not stored, not used for training)
• Apple and Google: sign-in, if you choose it, and the map in the app (Apple Maps on iPhone, Google Maps on Android)
• Photon (komoot): address suggestions while you type your home address (nothing is stored)
• Cloudflare: website hosting, security, cookie-free visit statistics, email forwarding and the check that you're not a robot when you sign in or send a form

Some providers may process data outside the EU or Serbia; when they do, they are bound by standard contractual clauses or an equivalent safeguard.

We don't sell your data and we don't use it for advertising.

When you open a link for tickets, rides or places to stay, you leave Nellmi for the partner's site (for example a ticket seller or a booking site), where their own privacy rules apply. For some purchases we earn a commission; your price doesn't change. We don't share your account data with partners.

In the app, some screens show a partner's offers inside Nellmi: Experiences (GetYourGuide) and Where are you sleeping? (the Stay22 map of places to stay). These views load from the partners' sites and may set their own cookies and similar data on your phone, under those partners' privacy rules. We don't receive your personal data through them.

• App data: while you have an account. When you delete your account, we delete your profile, messages, photos and spending. Shared nights and crews stay for the other members, without your personal data.
• Waitlist: until launch, plus one email, then deleted. Or earlier, if you ask.
• Partner form: as long as we're in conversation, and no longer than 2 years after the last contact.
• Error reports: up to 90 days.
• Backups are overwritten within 30 days.

Under the GDPR, the UK GDPR and the Serbian Law on Personal Data Protection, you can access, correct, export and delete your data, object to or restrict how we use it, and withdraw your consent at any time.

Delete your account yourself in the app (Profile → Delete account) or see the Delete your account page. For anything else, write to privacy@nellmi.com. We reply within 30 days.

You can also complain to a data protection authority: in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs), or the authority in your country.

Nellmi is only for people 18 and older. If we learn that someone under 18 has an account, we delete it.

Your data is encrypted in transit, access is limited to what each part of the system needs, and keys are kept on our servers, never in the app.

If we make important changes, we'll tell you in the app before they apply. The date at the top shows the latest version.