Privacy

This covers naymly.com, the website. The Naymly iOS app has not launched. When it does, it will have its own privacy policy, and the commitments made on the home page about how it handles your notes will be spelled out there.

When you submit the form, three things are stored:

• Your email address. So we can tell you when Naymly launches. It is lowercased before it is stored, so the same address cannot end up on the list twice.
• Which form you used. Either the one at the top of the page or the one at the bottom. This is only useful for knowing which part of the page does its job.
• The page you arrived from, if any. Your browser sends this automatically as a referrer. It tells us whether you came from LinkedIn, a search, or a link someone shared. It is a page address, not anything about you.

Nothing else. There is no name field, no company field, no phone number, and no tracking of what you did on the page before you submitted it.

To stop bots from flooding the waitlist, the server needs to notice when a lot of signups come from one place in a short time. Storing visitor IP addresses to do that would mean keeping a log of who visited, which is a bigger intrusion than the problem deserves.

So the address is never written down. It is converted into an irreversible fingerprint using a secret key, and only that fingerprint is stored. It can answer “have there been several signups from this one source in the past hour” and nothing else. It cannot be turned back into an address, and it cannot be matched against a fingerprint from anywhere else. These records are deleted automatically after 24 hours.

No analytics, no advertising pixels, and no cookies are set by this site.

One exception: the map on the home page loads its basemap from Carto (basemaps.cartocdn.com), a third party map-tile provider. Rendering it means your browser requests map tiles directly from Carto’s servers, which see your IP address and user agent the way any server does when it is asked for a file — the same as loading an image from any other domain. That request sets no cookie and reports nothing back to us. It is a rendering dependency, not tracking.

Signups are stored in a Postgres database hosted by Supabase on servers in the United States. The site itself is hosted by Vercel. Both companies can technically access the infrastructure they run, as any host can.

The database is configured so the waitlist cannot be read by the website’s public code or by anyone visiting the site. Only the server, holding a secret key, can write to it. Your address is never shown back to another visitor, and the list is never sold, rented, or shared with anyone else.

If you are outside the United States, joining the waitlist means your address is stored in the United States.

Your email address is kept until Naymly launches and the waitlist has been contacted, or until you ask for it to be deleted, whichever comes first. If the product does not ship, the list is deleted.

The anti-spam fingerprints described above are deleted after 24 hours.

Email hello@naymly.com and you can ask to see whatever is stored about you, to have it corrected, or to have it deleted. Deletion is the easy one: it is a single row and it will be gone. You do not need to give a reason, and asking will not be treated as anything other than what it is.

If what is collected changes, this page changes with it and the date at the top moves. There is no mailing list for policy updates, because sending you mail you did not ask for would defeat the point.

Naymly is an independent project based in the United States. It is not yet a registered company, so the person who runs it is responsible for the information described here.

For anything on this page, or anything it does not answer, email hello@naymly.com. A person reads that address.