Privacy policy
Last updated: October 15, 2026
Who is responsible
Nakama is published by Hamza Hajjaj, an independent developer trading as Liminal, Place du Tomberg 16, 1200 Brussels, Belgium (BCE company number 1020.634.196). For any question about your data: hello@beliminal.be.
What we keep
- Your account: email address, password (never in plain text, only an argon2id hash), username, and, if you add them, display name, bio and profile photo, as well as the interface language, so we can send you notifications in your language. The photo is re-encoded on upload, which removes its metadata, GPS location included.
- Your tracking: the series in your library, your position (last episode or volume logged), your ratings, your reviews, your lists and your settings.
- Your social life in the app: your friends, requests, blocks and mutes, your messages and reactions in episode threads, and the reports you make (see "Reports and moderation").
- Your sessions: for each signed-in device, the IP address and the technical identifier of the browser or app, so that you can see and close your sessions in "Account and security".
- Your devices: if you turn on notifications, the notification token Apple or Google provides for your phone. It is erased when you sign out or when the service declares it expired.
- Technical data: server logs (IP addresses, requests) and short-lived anti-abuse counters. Your email address never appears in them in plain text.
- Usage statistics: screens opened, the names of actions (adding a show, logging an episode…) and whether they succeeded, the app and system versions, linked to your account identifier. Never your email address, nor the content of what you write or search. They help us understand how the app is used and improve it. You can turn them off at any time: Profile › Settings › “Usage statistics”.
What we don't do
- No ads, no advertising trackers, no advertising identifier (IDFA). Usage statistics are only used to improve Nakama.
- No selling or renting of data.
- No access to your contacts. The photo library is only used if you choose a profile photo, through the iOS picker: the app only sees the photo you chose.
What others see
Your username, your photo and your messages in threads are visible to other users who have reached the episode concerned. Your profile and activity are visible to your friends, depending on the "Profile privacy" setting. Nakama hides on the server side anything that would reveal what comes next in a series to someone who hasn't seen it yet.
Reports and moderation
When content is reported, we keep the reported content, the reason and the author of the report for the duration of moderation. Content may be hidden or removed, and an account suspended or banned: see the terms of use.
Why
Only to run the app you are using (performance of the service) and to protect it from abuse (legitimate interest: rate limits, reports, blocks).
Where and for how long
Data is hosted by Hostinger International Ltd. (61 Lordou Vironos Street, 6023 Larnaca, Cyprus), on a server located in the European Union. It is kept as long as your account exists. Encrypted backups are kept for five weeks at most. Technical logs are continuously rotated and are not archived.
Third-party services
Information about series (titles, episodes, artwork) comes from AniList. Our server fetches it for you: no personal data is sent to AniList. Only the welcome screen shown before sign-in loads a few covers directly from AniList, which then receives the device's IP address, as with any online image.
TMDB and JustWatch: the catalogue and per-country streaming availability come from TMDB, which relays data from JustWatch. Our server queries them for titles, with no personal data. The country comes from your device's regional setting and is not stored.
Sign in with Apple: if you choose this option, Apple sends us an identifier specific to Nakama, your email address (possibly a relay address that hides the real one) and, the first time, your name. We never receive your Apple password.
Sign in with Google: if you choose this option, Google sends us your identifier and your email address. We never receive your Google password.
Emails: essential emails (address verification, password reset) are sent by our host's email service, Hostinger. It receives your address and the content of the message, nothing else.
Usage statistics: they are processed by PostHog Inc., a product-analytics processor, and hosted in the European Union (Frankfurt). PostHog receives your account identifier, never your email. Legal basis: our legitimate interest in improving the app, with the option to object in the settings. When your account is deleted, this data is deleted with it.
Notifications: they go through Apple's notification service (APNs) or Google's (Firebase Cloud Messaging). It receives the text of the notice and your device's token, nothing else. That text never reveals what comes next in a series you haven't seen.
Your rights
- Export your data: Profile, then Settings, then "Import / export".
- Delete your account: Profile › Settings › Account and security › Delete account. Deletion becomes permanent after a grace period of fourteen days, during which you can sign back in to cancel it. Your data is then erased; your messages in public threads remain, but anonymised, with no link to your account.
- Access, rectification, restriction, objection: write to hello@beliminal.be. You can also lodge a complaint with the Belgian Data Protection Authority (APD).
Age
Nakama is intended for people aged 13 and over. Under 15, a parent's consent is required.
Changes
This page may change along with the app. The date at the top of the page shows the last update; for any significant change, we will write to users.