Privacy

1. Data we collect in the app

Your phone number, the name you give, and an email address if you add one. Your phone number is used to sign you in with a one-time code. Other members never see your phone number or your email.

If you join a college or company community, the email address you verify on its domain. Other members see “Verified @domain”, never the address.

The rooms you create or join, your seats, the payments you mark as made and any payment reference you add, the host’s confirmations, and the activity in your rooms. If you host, the payment details you choose to show members of your rooms.

Login details a host saves for a room. They are encrypted at rest and shown only to members the host has confirmed.

Device and security logs, crash reports and product analytics about how the app is used.

2. What we do not collect

NeverSub never holds or processes money, so we do not collect card numbers, bank logins or other payment instruments. Payments happen outside NeverSub, between members and hosts.

We do not sell personal data.

3. Why we use personal data

We use personal data to sign you in, run rooms and communities, show members who has paid, unlock login details for confirmed members, send sign-in and verification codes, provide support, prevent abuse, meet legal duties and keep the platform safe.

Our legal bases include your consent, steps needed to provide the service you ask for, compliance with law, and legitimate uses that are proportionate and expected in running a subscription-sharing service.

You can withdraw consent for optional processing by emailing us. Withdrawal does not affect processing already completed or processing we must continue for legal, fraud-prevention or dispute reasons.

4. Who we share data with

We use an SMS provider to send sign-in codes to your phone number, and Resend to send email verification codes and plan invites.

We may share limited data with hosting providers, professional advisers, auditors, law enforcement, regulators, courts, or another entity involved in a merger or business transfer, only where there is a proper reason.

Inside the app, room members see what they need to understand a room: the host, the room terms, who has taken a seat and their payment state. A host’s chosen payment details are shown only to members of that host’s rooms.

5. Cookies and analytics on this site

We use third-party analytics services on the marketing site: product analytics, Microsoft Clarity session-recording and heatmap analytics, and Google Analytics. They help us understand which parts of the page people read, where they stop, which calls to action they use, and whether feature flags are working. Our product analytics instance is configured for EU processing. Other analytics processors may process data in the locations where they operate.

Session replay is enabled so we can find broken or confusing parts of the page. Form inputs are masked in replay, so text you type into a form is never recorded in a replay.

We do not run advertising or marketing pixels.

You can block analytics with browser privacy controls or script blockers. You can also email hello@neversub.com to opt out of optional analytics where we can identify your record, or to ask us to delete data linked to you.

6. How long we keep data

We keep account, room and payment-record data while your account is open, and afterwards only as long as needed to resolve disputes, prevent fraud and comply with law.

When you delete your account, we delete your data or make it no longer identify you, unless the law requires us to keep it.

7. Your rights

Under the Digital Personal Data Protection Act, 2023, you have rights of access, correction, erasure, grievance redressal and nomination, subject to the limits in the law.

Download your data or delete your account from You → Account in the app. You can also email hello@neversub.com to ask what data we hold about you, correct it, withdraw consent, nominate another person, or raise a grievance.

If you are in the UK or the EU, you also have the rights given by the UK or EU GDPR, including access, correction, erasure and portability.

We may need to verify that the request comes from you before acting on it. We will respond within the period required by applicable law.

8. Security

We use practical safeguards such as one-time sign-in codes, access control, server-side checks, rate limiting, encryption of saved login details, and restricted operational access.

No system is perfectly secure. If we learn of a breach that affects your personal data, we will take steps required by applicable law and communicate where required.

9. Children

NeverSub is not aimed at children. If we learn that we collected personal data from a child in a way that needs parental consent and that consent is missing, we will delete or restrict the data as required by law.

10. Storage and transfers

The app runs on infrastructure we operate. Some processors, such as SMS, email or analytics providers, may process data outside your country where their infrastructure requires it.

We will use processors only for the purposes described in this policy and subject to applicable data protection law, including any restrictions notified by a competent authority.

11. Changes to this Policy

We will update this Policy as NeverSub changes and as our processors or legal duties change.

The latest version will be posted here with its last updated date. If a material change affects how we use your personal data, we will give notice through the product or by email where practical.