Privacy Policy

Effective date: 16 August 2026 · Last updated: 16 August 2026

1. Who we are

Nani Sore is a photography and AI-assisted content application operated by QuaalCo (“QuaalCo,” “we,” “us,” or “our”), based in British Columbia, Canada. QuaalCo is the controller of the personal information described in this policy.

Questions about privacy can be sent to nanisore@quaal.co.

2. Information we collect

Depending on how you use Nani Sore, we may collect the following.

Information you give us

• Account information: your name and email address.
• Sign-in information: the identifier and, where you permit it, the email address associated with Sign in with Apple when you choose Apple authentication. If you use Apple's Hide My Email, we receive only the relay address.
• Date of birth: collected at signup to apply age-appropriate defaults. It is stored as a date, used only to determine which protections apply to your account, and is not displayed to other users. Not yet live — arrives with the friends feed.
• Photos: photos taken within the Nani Sore app, and photos you choose to import from your device library. Photos are uploaded to and stored using Firebase services.
• Prompts and context: any text you type to give the analysis context, and any person markers you set before taking a photo.
• Captions, tags and descriptions: the generated results attached to your posts, including any edits you make to them.
• Profile information: a display name, and anything else you choose to add or change in your profile.
• Messages and shared content: content you choose to send through Nani Sore's messaging and community features.
• Support correspondence: the contents of emails you send us, so we can answer them.
• Beta registration information: if you register on this website, we collect your name, email address, how you heard about Nani Sore, and the IP address the registration came from.

Information collected automatically

• Location: if you grant location access, the approximate or precise location attached to a post. Location is optional; Nani Sore works without it. Precise location is only ever shown at the precision the post's audience is entitled to — public posts show a city or region, never an exact place.
• Device and diagnostic information: basic technical information needed to operate the service and to diagnose crashes and errors, such as app version and operating system version.
• Photo metadata: photos may carry technical metadata such as capture time and camera settings.
• Server logs: standard web and API request logs, including IP address, used for security, abuse prevention and debugging.

Information about how you use Nani Sore

• Interaction data: which posts you heart, and which posts you reply to. Not yet live.
• Posting cadence: whether you posted in a given period, used to calculate the level shown on your profile. Not yet live.
• Follow relationships: who you follow and who follows you. Not yet live.

3. How we use information

• Provide and operate Nani Sore.
• Store, retrieve, save, and share photos and content at your request.
• Process photo-analysis requests and return AI-generated results.
• Maintain user accounts and authentication.
• Allow sharing and community features to function, and enforce who can see what.
• Choose which public posts to show you in Discover, based on the tags on photos you have taken and hearted. This is used only to pick what to display and has no effect on your level or on anyone else's reach. Not yet live.
• Send you notifications you have opted in to, and stop when you opt out.
• Respond to support requests.
• Review reported content and take action on it.
• Protect the service against abuse, fraud, spam and unauthorised access.
• Notify people who register for beta testing when testing becomes available.
• Comply with legal obligations.

Where our legal basis matters to you: we process this information to perform our agreement with you (providing the app), on the basis of your consent (location, notifications, and each individual analysis request), and on the basis of our legitimate interests in keeping the service secure and working.

4. Photos and AI processing

Photos taken inside Nani Sore are uploaded to Firebase Storage. When you explicitly tap Analyze, the photo you selected and the prompt you entered are sent to OpenAI for processing, and the generated result is returned to you and stored with your post.

Nothing is sent for analysis unless you tap the button. We do not scan, analyse or index your photos in the background.

Do not submit photographs or prompts containing information you are not authorised to share, including other people's private information. AI-generated responses may be inaccurate, incomplete or misleading, and should not be treated as professional advice of any kind. The “My Future” mode is entertainment and is not a prediction of anything.

5. Sharing and visibility

You choose what is shared. Every post is created as Local and stays private to you unless you deliberately set it to Public.

When you make a post public, the photo, its caption, its tags, your display name and the coarse location (if you attached one) become visible to other users. Please do not share content you expect to remain private.

We do not sell personal information, and we do not share it with third parties for their own marketing or advertising purposes. We may disclose information where required by law, to enforce our Terms, or to protect the rights, safety or property of users or the public.

If QuaalCo is ever involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction. We would notify you before your information became subject to a different privacy policy.

6. Service providers

We use third-party infrastructure to operate Nani Sore. These providers process information only as necessary to provide their services to us.

7. What we do not do

• We do not run advertising SDKs, and Nani Sore contains no ads.
• We do not run third-party analytics platforms such as Google Analytics in the app.
• We do not sell or rent your personal information.
• We do not track you across other companies' apps or websites, and we do not ask for the App Tracking Transparency permission.
• We do not use your photos to train our own models, and we do not grant anyone else the right to do so.
• We do not read your photos except where you have asked for an analysis, or where a post has been reported and needs review.

8. Retention and deletion

We retain account information and stored content for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements.

You can delete individual photos and posts using the controls in the app. You can delete your entire account from within the app — see Delete My Account. Deleting a post removes it from the service, including from anywhere it appeared to other users.

When a post that other people have replied to is deleted, their replies survive — a reply is the replier's own photo and their own post — but the link back to your deleted post stops rendering and your image does not survive in it. To make that possible, we keep a minimal record of the deleted post consisting only of its identifier, its author and the deletion time; the image, description, tags and location are purged.

Some information may remain temporarily in encrypted backups, or may be retained where required for legal, fraud-prevention, security or record-keeping purposes. Backups are cycled out on a rolling basis.

Beta registration records are kept until beta testing closes or you ask us to remove you, whichever is first.

9. Security

We use reasonable technical and organisational measures intended to protect information, including encryption in transit, access controls on stored data, and server-side enforcement of who is entitled to see what. No internet-based service can guarantee absolute security, and you share content at your own risk.

10. Children and teens

Nani Sore is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact nanisore@quaal.co and we will delete it.

When the friends feed launches, accounts belonging to users under 16 will be restricted by default:

• Their posts are friends-only and cannot be set public.
• Incoming follow requests require approval.
• They never appear in Discover.
• Location on their posts is coarse or off.

Age is established by self-declared date of birth at signup. This is the standard approach and is what Apple expects, but it is a default rather than a guarantee — it can be bypassed by entering a different date, and we do not describe it as verification.

11. Your rights and choices

You may update your profile information, delete photos, and delete your account at any time from within the app. Depending on where you live, you may also have rights to access, correct, delete, or obtain a copy of your personal information, and to object to or restrict certain processing.

To exercise any of these, email nanisore@quaal.co from the address on your account. We will respond within the time required by applicable law. We will not discriminate against you for exercising a privacy right.

You can also:

• Turn location access off in your device settings — Nani Sore works without it.
• Turn notifications off in your device settings.
• Withhold your email address using Apple's Hide My Email.

See Your Privacy Choices for step-by-step instructions.

12. International transfers

QuaalCo operates from Canada, and our service providers operate infrastructure in Canada, the United States and elsewhere. Using Nani Sore means your information may be processed in countries with different data protection laws than your own. We rely on our providers' standard contractual protections for these transfers.

13. Changes to this policy

We may update this Privacy Policy as Nani Sore develops. The effective date at the top indicates when the current version took effect. If we make a material change, we will provide notice in the app or by email before it takes effect.