Updated 22 October 2026 · early version, we'll refine this before launch

Privacy Policy

Applies to: the Nerdies mobile app (iOS and Android) and any Nerdies web pages that show shared content.

1. The short version

• Nerdies is where you share what you're into, with the stats to prove it. To do that, we store your account, your profile, and the things you post.
• We use your data to run the app. We do not sell it. We do not show ads.
• You decide who sees each NerdStats and Post: everyone, or only your followers.
• You can delete your account inside the app (Settings). That removes your data.
• Questions or requests: the contact address we will publish before launch.

The rest of this page explains the details.

2. Who is responsible for your data

The data controller (in Turkish law, "veri sorumlusu") is Nerdies, run by its founder. Full legal details will be published before launch.

Contact: the contact address we will publish before launch

3. What we collect

3.1 Account data

• Your email address, if you sign in with email. We send you a one-time 6-digit code. There is no password.
• If you sign in with Apple or Google: the identifier and email address they give us. With Apple, this can be a private relay address. We do not get your Apple or Google password.
• Your username (chosen by you), and the niches you pick (for example dev, coffee, design).
• Your sign-in sessions (so you stay logged in).

3.2 Profile data

• Display name, bio, profile picture, and your default visibility setting (public or followers only). All of these are optional except the username.
• Your profile is visible to other Nerdies users. Profile pictures are stored in a bucket that can be opened by anyone who has the file link.

3.3 Content you create

• NerdStats: a photo, the crop you chose, the niche, the stat values you enter (for example commits, coding time, dose in, brew time), and optional text.
• Posts: text (up to 500 characters) and up to 4 images, with an optional niche.
• Projects: project name, tag (@you#project), niche, description, tools, links, banner, logo, Story blocks (images and text), the people you add as editors, and the credit you give them.
• Comments, reactions, mentions: the comments you write, the reactions you give, and the people and projects you mention.
• Visibility and links: who can see each item, and which projects an item is linked to.
• We store the uploaded photo uncropped, plus the crop you chose, so the app can show it in different layouts. We also store image sizes.

-

3.4 Social data

• Who you follow and who follows you.
• Who you have blocked.
• Your Activity feed: reactions, comments and new followers directed at you.
• Reports you send about content or users, including the reason you write. See section 8.

3.5 Technical data

• When you use the app, our backend provider (Supabase) and the infrastructure behind it process technical data such as IP address, device and app version, request logs, and error information. This is needed to deliver the service, keep it secure and fix bugs.
• If we use Expo / EAS services to build or update the app, they may process technical data such as device type and app version.
• Camera and photo library: the app asks for access only when you choose to take or pick a photo. We receive only the photos you choose to upload.
• Push notifications are not part of the first version.

3.6 What we do not collect

• We do not collect your precise location.
• We do not read your contacts.
• We do not track you across other apps or websites, and we do not use advertising identifiers.

4. Why we use your data, and our legal basis

| Why | Data | Legal basis (KVKK Art. 5) | Legal basis (GDPR Art. 6) |

|---|---|---|---|

| Create and run your account, sign you in | Account data | Necessary for performing a contract | Contract |

| Show your profile and content to the people you chose | Profile data, content, social data | Necessary for performing a contract | Contract |

| Keep the service safe: spam, abuse, reports, blocks, rate limits | Technical data, reports, content | Legitimate interest; legal obligation | Legitimate interests; legal obligation |

| Fix bugs and keep the service running | Technical data | Legitimate interest | Legitimate interests |

| Respond to your requests and legal notices | Contact data, account data | Legal obligation; legitimate interest | Legal obligation; legitimate interests |

| Anything that needs your explicit consent (for example, future optional features) | As described when we ask | Explicit consent | Consent |

We do not use your data for advertising, we do not sell it, and we do not make automated decisions that have legal effects on you.

5. Who we share data with

Other users. What you post is shown according to its visibility. Public items can be seen by every Nerdies user (and, if we add public web pages for shared items, by anyone with the link). Items set to "followers only" are shown to your followers. Your username, display name, bio and profile picture are visible on your profile. Blocked users cannot interact with you.

Service providers (processors). They process data on our behalf:

| Provider | What for | Location |

|---|---|---|

| Supabase | Database, sign-in, file storage, server functions | |

| Apple, Google | Sign-in, if you choose it; app distribution | Their own policies apply |

| Expo (EAS) | App building and updates, if used | |

| Email delivery for sign-in codes | Sending the 6-digit code | |

When you share outside Nerdies. If you use a share feature (for example sharing a NerdStats card to Instagram Stories or WhatsApp), the image you share goes to the app you choose. That app's own privacy policy applies from that point.

Legal and safety. We may disclose data if the law requires it, to answer a valid request from an authority, or to protect the rights and safety of users and the service.

Business changes. If Nerdies is transferred to a company or another owner, your data would move with it, and this policy would continue to apply until you are told about changes.

We do not sell personal data.

6. Transfers outside Turkey (and the EEA)

Our providers may process data on servers outside Turkey. Under KVKK Article 9, we only transfer data abroad using the mechanisms the law allows (for example an adequacy decision, standard contractual clauses, or your explicit consent where required).

7. How long we keep data

| Data | Kept for |

|---|---|

| Account, profile, content, social data | As long as your account exists. Deleted when you delete your account. |

| Files (photos, banners, avatars) | Same as above. They are removed from storage when you delete your account or the item. |

| Sign-in sessions | Until they expire or you sign out. |

| Reports and moderation records | |

| Server and request logs | |

| Backups | Deleted data can remain in provider backups for up to. Backups are not used to restore deleted accounts. |

When data is no longer needed, we delete it or make it anonymous.

8. Deleting your account and your content

• In the app: Settings, then Delete account. This is available in the app at all times.
• What happens: your profile, your NerdStats and Posts, your comments and reactions, your follows, your blocks, your reports, your notifications, and the files you uploaded are deleted.
• Projects: if you are the owner of a project, the project is deleted with your account, including its Story and media. If you are an editor on someone else's project, you are removed from it and your credit goes away.
• Mentions: mentions of you in other people's posts are removed.
• Delay: deletion starts immediately. Removing files from storage and backups can take up to.
• You can delete single posts, NerdStats and comments at any time.
• If you cannot use the app, email the contact address we will publish before launch from the address linked to your account and we will delete it for you.

Content you shared outside Nerdies (for example an image you posted to Instagram) is not under our control, and we cannot delete it.

9. Your rights

Under KVKK (Turkey), Article 11

You can ask us to:

• find out whether we process your personal data;
• ask for information about it if we do;
• learn the purpose of processing and whether it is used accordingly;
• learn who we transfer it to, inside or outside Turkey;
• ask for correction if it is incomplete or wrong;
• ask for deletion or destruction within the conditions of KVKK Article 7;
• ask that these corrections and deletions be told to third parties we sent the data to;
• object to a result against you that comes only from automated analysis;
• ask for compensation if you suffer damage because of unlawful processing.

Under GDPR (if it applies to you)

Access, correction, deletion, restriction, portability, objection, and withdrawal of consent at any time. You can complain to your local data protection authority.

How to use your rights

Write to the contact address we will publish before launch. We will reply as soon as possible and within 30 days at most. We may ask you to prove who you are. The request is free, unless the law allows a fee.

You also have the right to complain to the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu, KVKK) after you have applied to us first, and where it applies, to your EU data protection authority.

10. Children

Nerdies is for people aged 13 and over. We do not knowingly collect data from children under 13. If you think a child under 13 has an account, email the contact address we will publish before launch and we will delete it.

11. Security

We use the security features of our providers: encrypted connections, access rules on every database table and file bucket, and limited access for staff. NerdStats, Post and project files are stored privately and are shown only to people allowed to see them. No system is perfectly secure, so please keep your account safe.

If a data breach affects you and the law requires it, we will tell you and, where required, the KVKK Authority (as soon as possible, and at most within 72 hours) and other authorities.

12. Changes to this policy

If we change this policy in a way that matters, we will tell you in the app or by email before the change starts. The "Last updated" date at the top always shows the current version.

13. Contact

the contact address we will publish before launch