Privacy Policy

1. Who we are

Nyoma (“we,” “us,” or “our”) operates the invite-only service at nyoma.io, which gives members drop-in, self-hosted alternatives to popular platforms — for example storing your photos and videos in Immich and your media library in Jellyfin. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to the Nyoma website and the accounts we provide; it does not cover third-party services you choose to connect.

2. Information we collect

Account information

When you accept an invite and set up your account, we collect your name, email address, chosen username, and (optionally) a profile picture.

Authentication data

We store the credentials needed to sign you in securely. Passwords are hashed and never stored in plain text. If you enroll a passkey or an authenticator app for two-factor authentication, we store the data required to verify those methods — not your underlying secrets.

Content you upload

To provide the service, we store the content you choose to bring to Nyoma — such as photos and videos copied into Immich and the media in your library. This content belongs to you.

External account verification

Some features require you to verify ownership of an external account (for example Apple, Snapchat, Google, or Spotify) so we can help you back up or migrate your data. Any credentials you enter for verification are transmitted securely and used only for that session — they are not stored after the session ends. We retain only the result of the verification (such as whether it succeeded and which account it relates to).

Usage and technical data

We collect basic technical information such as log entries, IP address, and browser or device details, which help us operate, secure, and troubleshoot the service.

3. How we use your information

• To provide, operate, and maintain your account and the apps it unlocks.
• To back up, migrate, and organize the data you ask us to handle.
• To authenticate you and keep your account secure.
• To send you transactional emails related to your account and the service.
• To detect, prevent, and respond to fraud, abuse, and security incidents.

4. How your data is stored and protected

Nyoma runs on self-hosted infrastructure that we administer. We protect your data in transit with encryption, hash account passwords, and limit access to the systems that hold your content. No method of storage or transmission is perfectly secure, but we take reasonable measures to safeguard your information.

5. Third-party services

Nyoma integrates with services such as Apple, Snapchat, Google, and Spotify. Connecting any of these is always initiated by you. When you do, your use of that service is governed by its own terms and privacy policy, which we do not control.

6. Email communications

We send transactional emails only — such as sign-in (magic) links, invite messages, password reset links, backup reminders, and account-deletion notices.

7. Data retention and account deletion

We keep your information for as long as your account is active. When you delete your account, it is locked immediately and then permanently deleted after a 7-day grace period, during which you can cancel the deletion. After that period, your account, photos, and data are removed. Credentials you provided for external-account verification are never retained beyond the session in which you entered them.

8. Your rights and choices

You can review and update your account information at any time from your account settings, request a copy of the data you have stored with us, and delete your account. To make a request, contact us using the details below.

9. Children’s privacy

Nyoma is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can remove it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you.

11. Contact us

If you have questions about this Privacy Policy or your data, contact us at [email protected].