Privacy Policy
Version 1.0.0 · Last updated 24 October 2026
NoPrompt is a camera-only social app. This policy explains what it collects, why, and how long it keeps it. It describes the software as it actually behaves rather than what an app of this kind typically does. In it, "we" and "us" mean the operator of NoPrompt, and "the app" means NoPrompt for iOS and Android.
Who is responsible for your data
Where data protection law applies, the operator of NoPrompt is the controller of the personal data described here. Write to hi@engineeredby.ai about anything in this policy, including to use the rights described below.
What we collect
When you create an account
NoPrompt has no passwords. You sign in with Apple or Google, and we receive and store an identifier for that account, plus your email address and name if the provider supplies them. The name becomes your starting display name. Apple often supplies a private relay address instead of your real one; that is fine and we treat it the same way. If you sign in with Google and your Google account has a profile photo, we copy it once, when the account is created, into our own storage as your starting profile photo; after that nothing is fetched from Google to show it. You then choose a username, which is permanent, and may add or change a display name, a bio and a profile photo. We also record when you accepted the Terms.
What you post
Photos for posts and stories, captions, comments and likes. Because posting is camera-only, photos are captured in the app rather than selected from your library — we never read your photo library, and the app does not ask for access to it, except when you deliberately choose a profile photo.
Retake transparency data
Every photo is stored with the number of takes it took, the time it was captured and the time it was posted. This is shown publicly alongside the photo to everyone who can see the post — it is the central feature of the app, not analytics. It is recorded when you capture and is never editable afterwards.
Your social graph
Friendships, pending friend requests, and the list of accounts you have blocked. Blocking is mutual and invisible: a blocked account is not told, and the two of you disappear from each other's view everywhere in the app.
Story views
When you open someone's story, we record that you viewed it and when. The story's author can see who viewed it.
Reports you make
If you report a post, story, comment or account, we store what was reported, who reported it, the reason you selected and any note you add, so it can be acted on. The operator is emailed each report — its reason, your note, and the item and account it concerns — so it can be reviewed quickly.
Sessions and technical logs
We keep a record for each signed-in device so you can see and revoke your active sessions. It gains a new row each time the device's sign-in token refreshes (about every 15 minutes of use), so a stolen token can be detected. Rows are deleted 30 days after they expire. Sign-in tokens are stored hashed, never in a form we can read back. Our servers keep operational request logs — a request identifier, the route, the app's version and platform, and the outcome — with credentials, request bodies and IP addresses excluded from what is logged. The server uses your IP address in memory only, to limit how many requests can come from one address; Cloudflare and our host also see it while they carry your traffic to us.
On this website
noprompt.app is a static site served by Cloudflare. It sets no cookies, runs no scripts and loads nothing from other sites. Cloudflare processes visitors' IP addresses to deliver it.
What we do not collect
These are properties of the software, and they are unusual enough to state plainly:
- No analytics or tracking. The app contains no analytics SDK, no crash reporting SDK, no advertising identifier and no third-party tracker of any kind.
- No location data. The app never requests location permission, and location metadata is deliberately stripped from every photo during processing, before it is stored. Photos we hold do not carry the coordinates of where they were taken.
- No advertising. We do not sell or share your data with advertisers.
- No contact list access. The app never reads your contacts.
Who your content is visible to
New accounts are private. While yours is private, your posts and stories are visible only to accounts you have accepted as friends. If you make it public, they are visible to signed-in users who are not blocked. Either way, your username, display name and profile photo can be seen by signed-in users, so people can recognise whom they are adding; your bio and posts stay hidden from non-friends while your account is private. Stories are visible for 24 hours from the moment they were captured, and the author can see who viewed them.
Photos reach the app through private links that expire: after at most seven days for posts and profile photos, and one day for stories. Anyone handed such a link can open the photo until it expires, even without the app. The links are long and unguessable and are not listed anywhere, but treat them as you would the photo itself.
When a post, story or comment is reported, the person reviewing the report can see it, including its photo.
Why we use it
Where the GDPR or UK GDPR applies, these are our purposes and the legal basis for each:
- To provide NoPrompt — your account and sign-in, posting, stories, the retake data, friends, likes, comments and story views, showing your content to the people your settings allow, and copying your Google profile photo when you sign up. Basis: performing our contract with you, the Terms (Art. 6(1)(b)).
- To keep it safe — reports, holding reported items, reviewing and removing content, suspending accounts, blocking, and refusing offensive words in usernames, display names, bios, captions and comments. Basis: our legitimate interest, and our users', in a service free of abuse (Art. 6(1)(f)), and legal obligations where the law requires us to act on illegal content (Art. 6(1)(c)).
- To keep accounts and the service secure — sessions, detecting reuse of a stolen sign-in token, rate limits and request logs. Basis: our legitimate interest in protecting your account and the service (Art. 6(1)(f)).
- To meet legal obligations — answering lawful requests from authorities and keeping records the law requires. Basis: legal obligation (Art. 6(1)(c)).
You need an Apple or Google account to use NoPrompt, because the app is built around your account; your bio, profile photo and captions are optional. We do not use your data for advertising, we do not sell it, and we do not use it to train AI models. No decision with legal or similarly significant effects on you is made by automated means alone: an item hidden automatically after reports stays hidden only until a person reviews it. None of this relies on your consent, so there is no consent to withdraw; camera access is a setting on your device, which you can turn off at any time.
Where your data is stored, and who processes it
Account and content records are held in a PostgreSQL database, and photos in S3-compatible object storage. Both are run for us by Railway in its Amsterdam region, in the Netherlands, and the database's backups are kept in the same region. These providers process personal data on our behalf, under contract, and only to provide the service:
- Railway (Railway Corporation, United States) — runs the app's server, the database, photo storage and backups.
- Cloudflare (Cloudflare, Inc., United States) — carries the app's traffic to our server and serves this website, seeing IP addresses and request details as it does.
- Resend (United States) — delivers each report to the operator by email. NoPrompt sends no email to you.
Apple and Google verify your identity when you sign in, and distribute the app. For that they act as independent controllers, under their own privacy policies. When you delete an account created with Apple, we ask Apple to revoke NoPrompt's access to your Apple ID.
Railway, Cloudflare and Resend are based in the United States, and some of their processing happens there: Railway's main operations, Cloudflare's network, and the delivery of report emails. Those transfers rely on the safeguards in each provider's data processing terms: the European Commission's standard contractual clauses (with the UK Addendum for data from the UK), or the EU–US Data Privacy Framework where the provider is certified under it. Write to us for details of these safeguards.
We may also disclose information where the law requires it, or where it is necessary to investigate abuse or protect someone's safety. If NoPrompt is ever sold or merged, account data may move with it, and we will say so here before that happens.
How long we keep it
- Stories are deleted, along with their image files, once 24 hours have passed since capture.
- Deleted posts and comments are hidden immediately and permanently erased after 30 days. A photo link handed out before you deleted the post keeps working until it expires.
- A deleted account is deactivated immediately and permanently erased after 30 days, together with its posts, stories, comments, likes, friendships, blocks, sessions and every stored image. You can cancel during those 30 days by signing in again and restoring the account. After that it cannot be recovered.
- A sign-up that is never finished (no username chosen and the Terms never accepted, with nothing posted) is deleted after 30 days, with any profile photo it had.
- Expired sessions are kept for 30 days past expiry — they are what lets us detect a stolen token being reused — and deleted afterwards.
- Reports stay as moderation records. When an account is erased, the reports it made and the reports about its content are kept with the link to the account removed.
- A suspended account is kept as it is, hidden from everyone, for as long as it stays suspended.
- Server logs are kept only as long as they are needed to run and secure the service, and are then discarded.
- Database backups, used only to recover from a failure, are overwritten on a rolling basis, so erased data drops out of them after a short time.
How we protect it
Traffic between the app and our servers is encrypted in transit. Sign-in tokens are stored only as hashes, sessions are signed with a key that never leaves the server, and the app keeps your credentials in the device's secure storage — the iOS Keychain or the Android Keystore. Photos are stored privately and reach the app only through expiring links, and location metadata is removed from every photo before it is stored. Access to production data is limited to the operator.
No service is perfectly secure. If a breach puts your data at risk, we will tell you and the relevant authorities as the law requires.
Your rights
You can edit your profile and delete your posts, comments and account from inside the app at any time. Deleting your account is the erasure path, and it is complete rather than cosmetic.
Depending on where you live, the law gives you more rights over your data. In the EEA and the UK they are the rights to:
- access your data and get a copy of it;
- have it corrected;
- have it erased;
- restrict how we use it;
- receive the data you gave us in a machine-readable format, and have it sent to another service;
- object to our using it on the basis of legitimate interests — we then stop, unless we have compelling grounds or need it for a legal claim.
To use any of them, write to hi@engineeredby.ai from the email address of the Apple or Google account you sign in with, so we can confirm the account is yours. It is free. We reply within one month; if a request is complex we may need up to two more months, and we will tell you why. If you think we have handled your data wrongly, you can complain to the data protection authority where you live or work, or where the problem happened — in the UK, the Information Commissioner's Office. We would rather you told us first. In Brazil, the LGPD gives you equivalent rights, which you can use the same way, and you can complain to the ANPD.
In the United States: NoPrompt does not sell personal information or share it for cross-context behavioural advertising, as California law uses those terms, and it does not use sensitive personal information to infer anything about you. Wherever you live, you can ask us what we hold about you, and ask us to correct or delete it, as above, and we will not treat you differently for asking. NoPrompt does not track you across other apps or websites, and does not let anyone else do so through it, so a Do Not Track signal has nothing to switch off: the app and this website work the same way whether or not your browser sends one.
Children
NoPrompt is not for children. You must be at least 13 to use it, and older where your country sets a higher minimum age for using a service like this without a parent's consent (in the EEA that age is between 13 and 16). We do not knowingly collect data from anyone younger. The Terms you accept at sign-up set the minimum age, and if we learn that an account belongs to someone under it, we delete the account and its data. If you believe a child is using NoPrompt, report the account in the app or write to hi@engineeredby.ai.
Changes to this policy
If we change this policy materially we will say so in the app before the change takes effect, and update the date at the top of this page.