Back to home

Privacy Policy

Last updated 6 September 2026

Draft. This document is pending review by Vietnamese counsel against Decree 13/2023 (PDPD) before Nest opens to the public.

Nest is a dating service for verified university students in Vietnam. This policy explains what we hold about you, why, how long, and what you can ask us to do about it.

1. What we collect

Account data: your email address and, if you sign up with a password, a one-way hash of that password. We never store your password itself. If you sign in with Google, we receive your email address and Google account identifier.

Profile data: your display name, date of birth, gender, who you want to meet, your university, your school or faculty, your year of study, whether you are a student or an alumnus, the district or city you give us, your written bio, and your answers to profile prompts. Other students see all of that except your date of birth and who you want to meet — in place of your date of birth they see your age in whole years.

Verification data: either an image of your student card, or a university email address that you confirm. A student card contains your photograph. It is stored in a private location, is visible only to Nest's reviewers, and is never shown to another user.

Activity data: who you liked, who you matched with, the messages you send inside a chat, blocks and reports you make, and dates you arrange through the app.

Technical data: your browser and device type, approximate region derived from your network address, and — if you turn on notifications — the push endpoint your browser gives us.

2. What we do not collect

Nest has no profile photos. There is no upload surface for them anywhere in the product, and no feature that would use one.

We do not collect your precise or device-derived location. The district or city on your profile is a short line you type yourself, and we never read it from your device, your network address or any satellite signal. We do not collect your contacts, your national ID, or any payment information. We do not sell data, and we do not run advertising.

3. Why we hold it

To operate the service — showing you profiles, delivering your messages, and enforcing the limits the product is built on.

To confirm that everyone here is a student. This is the single reason we handle a student card at all, and it is why the image is deleted soon after review.

To keep people safe — investigating reports, acting on blocks, and removing accounts that break the rules.

To notify you about things that expire: a chat closing, a new match, a reply. You choose whether to receive these.

4. How long we keep it

Verification documents are deleted 14 days after a decision is made on them, whether the decision was approval or rejection.

Messages and the chat room they belong to are deleted 30 days after the chat closes or expires. The one exception is a conversation attached to an open safety report, which we keep until that report is resolved.

Your account and profile are kept until you delete your account. Deleting your account removes your profile, your messages, and any verification document still held.

5. Who else touches it

Supabase hosts our database, authentication and file storage, in a data centre in Singapore. Vercel hosts and serves the application. Resend delivers our email. Google receives nothing beyond what is required to sign you in, and only if you choose to sign in with Google.

We disclose data to anyone else only where Vietnamese law requires it, and we will tell you unless we are prohibited from doing so.

6. Your rights

You can see and correct your profile at any time in Settings. You can delete your account from the same place, which erases the data described above.

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it, by writing to the contact address below. We answer within 30 days.

You can withdraw consent for notifications at any time in your browser or device settings, without losing access to Nest.

7. Security

Data travels over encrypted connections. Access to your rows in our database is enforced by the database itself, not only by our application code. Verification documents sit in a private store that is not reachable by URL.

No system is perfect. If a breach affects your data, we will notify you and the relevant Vietnamese authority as the law requires.

8. Age

Nest is for adults. You must be 18 or older. We check the date of birth you give us and we check it again during verification. Accounts found to belong to minors are removed.

9. Changes and contact

If we change this policy in a way that affects you, we will tell you in the app before the change takes effect.

Questions, requests, or complaints: privacy@nest-vn.com.