Privacy and safety
What Najimi keeps, what leaves it and why, who sees your taste, and how to delete everything.
What's kept
- Your account: a guest account or an email sign-in, and your username.
- Your taste: your loves and their weights, your taste's words and picks, every feed card you saw, played, opened, loved, saved or hid, your city if you gave one.
- Chats: your messages, Najimi's answers, the circles and DMs you're in, polls and votes.
- Stories: for 24 hours, then deleted with their files; who saw them, and their reactions. Videos are made phone-ready on Najimi's own server.
- Plans, bookings and games: so Najimi can follow up and stamp your Passport.
- Photos you share: re-encoded on arrival (which strips location and camera data) and stored privately; Najimi gets a short-lived link only while it answers.
- Connected accounts: if you connect X or Instagram, your session is sealed (AES-256-GCM) the moment it arrives, opened only on the server to act for you, never shown again, and deleted when you disconnect. If you connect YouTube, Google gives Najimi read-only access to your subscriptions and likes; only the matches you keep are stored.
- Data downloads: a file you download from a platform is opened in your browser and never uploaded; only the short lists inside it leave your device. If you asked for one from Najimi, it remembers when, to remind you once.
- Businesses: what you told Najimi and the plans it built.
- Usage: today's counts for your allowances, and what Najimi's thinking cost for you.
What leaves Najimi
Only what's needed for the thing you asked:
| Service | What it gets |
|---|---|
| Qloo | The Qloo ids of your loves and their weights, tags, a city or a point on the map. Never your name. |
| OpenAI | The conversation and its context so Najimi can answer; a feed screenshot you score (read, never kept); the text of your recent posts when you bring in X or Instagram (to find the names in them); a business's website; web searches Najimi makes for facts, with your city as a rough location. |
| fal (or OpenAI) | A photo you asked Najimi to restyle, and the words for the picture. |
| ElevenLabs | A voice message you dictate, to turn into text. |
| Nuitee | Your name, email and phone when you book a room. You pay in Nuitee's own sheet; Najimi never sees your card. |
| ElevenLabs and Twilio | For a call you approved: the venue's number, your name and the booking details. The call is recorded. |
| X and Instagram | Your own session, only to read what you follow and act when you said so. |
| If you sign in with Google or connect YouTube: your sign-in, and read-only YouTube access. | |
| TikTok | If you sign in with TikTok: your sign-in. |
| Resend | Your email address, to send a sign-in code. |
| Apple, TMDB, Ticketmaster, Mapbox, Wikidata, OpenStreetMap | Names, places and times to look up. Never who you are. |
| Your phone's push service | The notification itself, for the phone you turned notifications on for. |
Who sees your taste
Settings → Who sees your taste: Everyone, Friends (people who follow each other), or Only me. The same setting decides who sees your stories. Private tastes don't appear in search, twins, the radar or the map, and nobody can start a game about them; in a circle you're in, the daily drop and Taste twins still use your loves. The radar is off until you turn it on.
Blocking and reporting
Block someone from their profile and you disappear from each other: search, twins, the radar, the map and profiles. Follows stop, a DM between you closes, they can't join your circle by link, and in a circle you share you stop hearing about each other's messages. Settings → Blocked lists them, with Unblock.
Report a person (spam, abuse, a fake account, something else): the report is saved and sent to Najimi's owner, and they're blocked too.
What Najimi will never do without you
- Call anyone, or post in your name, without your yes on the exact call script or post. In a circle, only the person who asked can say yes.
- Pay for anything. Hotels are paid by you in Nuitee's sheet. The phone caller is told never to pay or agree to a deposit.
- Say something is booked before the booking card says confirmed.
Deleting
Settings → Delete all my data removes your account and everything in it: your taste, chats, plans, games, connected sessions, businesses, notification subscriptions, files and share links. It can't be undone.
Guest accounts nobody has used for 30 days are deleted the same way, every night (unless a picture they made is in the public showcase).