Privacy Policy

Last updated: February 12, 2026

1. What We Collect

Portal collects the minimum data necessary to provide the service:

  • Account information: Email address and optional username when you sign up. If you use Sign in with Apple, we receive the identity token Apple provides.
  • Usage data: Which creators you follow, widget interactions (views, taps), and app opens. This data is collected in batches and used to improve the product.
  • Device information: A randomly generated device identifier, app version, OS version, and device model. We do not collect your Apple IDFA or use any advertising tracking.

2. What We Do Not Collect

  • We do not track you across other apps or websites.
  • We do not sell your data to third parties.
  • We do not use advertising identifiers (IDFA).
  • We do not access your contacts, photos, camera, or location.
  • We do not read your music listening history — we only display publicly available data from creator profiles.

3. How We Use Your Data

  • Account & authentication: To let you sign in and persist your fan number across devices.
  • Widget delivery: To fetch and display the correct creator content on your home screen widget.
  • Analytics: To understand how people use Portal and make the product better. Analytics are aggregated and not tied to your identity.
  • Push notifications: To notify you when your favorite creator posts new content (only if you opt in).

4. Data Storage & Security

Your data is stored securely using industry-standard practices:

  • Authentication tokens are stored in the iOS Keychain, the most secure storage available on your device.
  • All network communication uses HTTPS with certificate pinning.
  • Passwords are hashed using bcrypt before storage. We never store or log plaintext passwords.
  • Our backend runs on Fly.io with encrypted-at-rest PostgreSQL databases hosted by Supabase.

5. Information About Creators

Portal displays publicly available information about music artists and creators. This section explains how we handle creator data.

What creator data we collect

  • Public profile information: Artist name, profile image, and follower/subscriber counts from official platform APIs (Spotify Web API, YouTube Data API).
  • Public content metadata: Post thumbnails, video titles, and links to original content on Instagram, TikTok, and YouTube. We store only small thumbnail images (max 400px) that serve as navigation aids linking to the original content.
  • Music metadata: Song titles, album names, and album artwork URLs from Spotify. Album art is displayed with attribution and always links back to Spotify.

Legal basis

We process creator data under legitimate interest for publicly available information about public figures, in accordance with the terms of the official platform APIs we use. All content displayed in Portal links back to the original platform, driving engagement to the creator's official profiles. Community Portals are generated entirely from publicly available data and do not imply any endorsement or affiliation.

Creator rights

If you are a creator featured on Portal, you can:

  • Claim your Portal to take full control of your profile and content.
  • Request data access to see what information we hold about you.
  • Request correction of any inaccurate information.
  • Request removal of your Community Portal entirely. We will acknowledge removal requests within 24 hours and process them within 48 hours.

For any of the above, contact us at support@mynr1.com.

6. Third-Party Services

Portal uses the following third-party services:

  • Apple Sign In: For authentication (Apple's privacy policy applies).
  • Cloudflare R2: For content delivery (images, widget data).
  • Supabase: For database hosting.
  • Fly.io: For backend hosting.

We do not share your personal data with any of these services beyond what is required for their operation.

7. Your Rights

You can:

  • Delete your account at any time from the Profile tab in the app. This permanently removes all your data from our servers.
  • Export your data by contacting us at support@mynr1.com.
  • Opt out of push notifications via iOS Settings at any time.

8. Children's Privacy

Portal is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this privacy policy from time to time. When we do, we'll update the “Last updated” date at the top of this page. Continued use of Portal after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this privacy policy? Email us at support@mynr1.com.