Nexly
This page is maintained by the Nexly team to answer common security and privacy questions about Nexly. It describes controls that are currently enabled in the app and is not an independent certification.
Sign-in is handled by our managed authentication provider. We support email/password and social sign-in (Google, Apple). Sessions are tied to your device and you can sign out at any time from Settings.
Administrative actions are restricted via server-side role checks. Client-side role claims are never trusted on their own.
Personal data such as your phone number, verification photo and verification status is only readable by you. Other users only see public profile fields you choose to share (display name, avatar, city, bio, interests).
Private direct messages are readable only by the sender and receiver. We do not grant blanket database-level read access to staff.
Sensitive operations (verification, account deletion, partner application review) run through audited server functions, not directly from the browser.
User uploads (avatars, activity images, partner logos) are stored in private buckets and served via short-lived signed URLs. Files are not publicly listable.
Nexly runs on managed cloud infrastructure that provides hosting, database, authentication, storage and edge runtime. This page does not claim independent certification of the underlying infrastructure.
We rely on managed cloud services for hosting, database, authentication and storage, and on an AI gateway for AI-powered features. Optional integrations such as Google or Apple sign-in are only used when you choose to connect them.
You can review and edit your profile, change visibility, hide activities, and delete your account from Settings. Account deletion removes your profile and associated records.
If you believe you have found a security issue, please contact the Nexly team through the in-app support channel. Please do not publish details until we have had a chance to investigate.