Your data, honestly handled.

1. What data we collect

On this website (before you create an account):

If you join the waitlist, we store your email address and, if you arrived via a referral link, the referral code that brought you here.

If you create an account in the app:

• Your email address and password (password is stored securely hashed, never in plain text)
• Onboarding details you provide: nationality, current country, destination country, reason for moving, and who's moving with you
• Your checklist progress, custom tasks, and reminders
• Content you post in the community (displayed publicly with your chosen display name, avatar, and origin country — never your email or real identity unless you choose to use your real name)
• If you add a profile photo, we store the image with your profile and may display it alongside your public community posts and profile information.
• If you apply to become a verified Expert: your expert profile and verification status. If you apply to become a The New Neighbor Expert, you can upload a document that shows where you live. We store it privately and only to check your application. Only you and our team can see it. We delete it within 30 days after we decide on your application, within 90 days if you do not complete it, or immediately when you delete your account.
• Messages you send through the app (e.g., asking an Expert a question, or messages to NewNeighbor AI)

Technical data (server logs):

Standard technical information (IP address, browser type, pages visited) may be automatically collected by our hosting infrastructure for security and performance purposes. This is not linked to your account identity beyond what's necessary for basic security.

2. How we use your data

• To personalize your checklist to your actual situation (citizenship, destination, purpose, household)
• To power NewNeighbor AI's answers to your questions (see section 4 — this involves sending relevant context to a third-party AI provider)
• To display your community posts and match you with relevant Experts
• To send you deadline reminders for time-sensitive steps in your checklist
• On iOS and Android, we use OneSignal to deliver checklist reminder push notifications and associate your profile ID with your OneSignal user.
• To send account-related emails (confirmation, password reset)
• To send occasional product updates, if you've opted in

We do not sell your personal data to third parties.

3. Legal basis for processing

• Contract necessity (Art. 6(1)(b) GDPR): account data, checklist personalization, and core app functionality — we need this data to provide the service you signed up for. This also covers the document you upload to apply as an Expert, because we need it to process your application.
• Consent (Art. 6(1)(a) GDPR): waitlist signup, marketing emails. You can withdraw consent at any time.
• Legitimate interest (Art. 6(1)(f) GDPR): basic security logs, fraud prevention, and showing service logos in the app.

4. Third parties we work with

We use the following processors to run the app. Each only receives the data necessary for their function:

• Lovable / Supabase — our app runs on Lovable's managed cloud infrastructure, built on Supabase's open-source technology and hosted in Ireland. Your data stays inside the EU and is covered by the GDPR directly, with no cross-border transfer involved.
• Anthropic (Claude API) — powers NewNeighbor AI. When you ask a question, we send your question and relevant conversation messages, together with relocation context from your profile (such as your destination country and where you are in your move), to Anthropic to generate a response. Anthropic processes this data under its own data processing terms.
• Resend — sends transactional emails (signup confirmation, password reset, checklist reminders, and — if you've joined the waitlist — our welcome email). Resend also delivers support messages and notifications related to expert verification.
• OneSignal — delivers checklist reminder push notifications on iOS and Android.
• Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service) — deliver push notifications to Android and iOS devices through OneSignal.
• Logo.dev — provides the company logos shown on the Country screen in the app. Your device requests the logos directly from Logo.dev, which can therefore see your IP address and which logo is requested. We send no account data.

5. Your rights

Under GDPR, you have the following rights:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — delete your account under Profile → Delete my account. Your profile, checklist, reminders, message contents and any expert verification document are removed immediately. Your community posts stay readable for others with your name replaced by "Former neighbor", as described in section 6. If you had unsubscribed from our emails, we keep a one-way hash of your address so we never write to you again — the address itself is not retained.
• Right to restriction of processing — ask us to limit how we use your data in certain cases.
• Right to data portability — receive the data you gave us in a structured, commonly used format.
• Right to object — object to processing based on our legitimate interest (see section 3).
• Right to withdraw consent — for marketing emails, at any time, with no consequences.
• Right to lodge a complaint — with a supervisory authority. In Sweden, this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY): www.imy.se

To exercise any right not available directly in the app, contact us at daria@thenewneighbor.app. We will respond within 30 days.

6. What happens to community content when you delete your account

To keep conversations readable for others, your posts and comments stay visible, but your name, avatar, and origin country are replaced with "Former neighbor" and cannot be restored. Your account, checklist data, personal profile and any expert verification document are permanently deleted.

7. How long we keep your data

• Account data (profile, onboarding details, checklist, reminders, messages): until you delete your account.
• Expert verification document: as described in section 1.
• Community posts and comments: stay after account deletion with your name, avatar and origin country replaced, as in section 6.
• Waitlist email address: until you unsubscribe or ask us to delete it.
• If you unsubscribed from emails: a one-way hash of your address is kept so we never write to you again, as in section 5.
• Support messages: as long as needed to answer you and document the exchange; you can ask us to delete them at any time.

8. Cookies

This website uses only session cookies necessary for the app to function (e.g., keeping you logged in). We use no third-party tracking of any kind.

9. International data transfers

Some of our processors (e.g., Anthropic) may process data outside the EU/EEA. Where this happens, it's covered by appropriate safeguards such as Standard Contractual Clauses, in line with GDPR requirements.

10. Children

The New Neighbor is not directed at children. It's intended for adults planning or making a move between EU countries.

11. Changes to this policy

We may update this policy as the app evolves. The date at the top will always reflect the latest version.

12. Contact

For any questions about this policy or your personal data:

The New Neighbor AB (org. no. 559610-9255)
Långviken 24, 938 92 Mellanström, Sweden
Represented by Daria Maria Hyppa, Founder & CEO
daria@thenewneighbor.app