Privacy Policy

1. Who we are

Nexlink (nexlink.ph) is operated by Manaty ITS Corp., registered with the Philippine Securities and Exchange Commission under CS201007922, acting as personal information controller. This policy covers the main Nexlink app (net.manaty.nexlink) and its web service. Nexlink Assist has a separate policy. Contact: privacy@nexlink.ph.

2. Information we process

Account. Login identifiers (email or phone, according to the method you choose), display name, profile and registered devices. Optional identity verification processes your full name, date and place of birth and the validation results; a person you choose can see and hear you during a verification call. Nexlink does not create biometric templates or request government ID numbers in this flow.

Content.We store posts, comments, messages, photos, videos and attachments (including documents and audio) for the audiences and recipients you choose. Contact matching is optional: phone numbers and email addresses are hashed on your device and we receive hashes, not your raw address book. An invitation email or SMS that you request needs the recipient's email address or phone number to be delivered.

Licoin points (LCN). Addresses, balances and the transactions recorded when points are granted or used as a discount on what Manaty sells. Deleting an account does not automatically remove independent transaction records or copies already received by others.

Location (optional). A live share in a chat lasts at most one hour and can be stopped sooner. Circle location history is enabled by your choice, with configurable frequency and retention. The app does not request background location: it records only while you use it.

Calls and remote help. Audio/video calls and remote help transmit live streams; we do not record them. Connection and session metadata (participants, devices, duration, mode and relay) may be stored. A shared screen can show personal information: choose what you display and with whom you share it. iPhone screen sharing uses the system consent and a ReplayKit broadcast extension; hosting from an Android phone uses the separate Nexlink Assist app. The pairing scanner only reads the QR code shown on your computer; it does not save or upload a photo, and pairing still requires your confirmation on the computer.

Devices and diagnostics. Device and push identifiers, network information and operational diagnostics (errors, platform, version, startup measurements and failure context) are sent to our servers. The app contains no advertising SDK.

Assistants.When you request writing assistance, or when a Page you use has enabled its agents, the necessary text is sent to the model provider configured for that function. A Page that runs on its own server is operated by that Page's operator, who processes the content hosted there.

3. The Fediverse and independent servers

Fediverse visibility is off by default. If you turn on “Visible on the Fediverse”, your public handle, display name, profile photo, public posts and their media may be published to other servers. Following someone on another server sends a Follow request carrying your public identifier. Public Pages and groups can also federate when their administrators enable it.

Those servers are independent of Nexlink and may keep or redistribute copies under their own rules. When you leave the Fediverse, Nexlink asks remote servers to remove previously federated posts (Delete) and withdraws your follows (Undo); these are requests, not a guarantee that every copy will be erased. Private messages and non-public content never federate.

4. Purposes and legal bases

We use data to provide accounts, messages, calls, Pages, matching, LCN points and the help you request, to secure the service and to diagnose failures. The bases are the provision of the service you request, your consent for optional functions, our legitimate interest in security, and legal obligations. You can decline camera, microphone, contacts or location access; functions that do not need them remain available.

5. Recipients and international transfers

The recipients and audiences you choose receive your content. Our service providers include Supabase (database, authentication, storage), Google Cloud (API hosting and our TURN relay), Firebase/Google and Apple (push notifications), Resend (email), Semaphore (SMS) and Liquichain (LCN points ledger); Cloudflare may serve as a fallback relay. Social login uses its own provider, and Page agents and writing assistance use the model provider configured for them.

Providers may process data outside the Philippines, including in the United States and Singapore, with appropriate safeguards. Nexlink does not sell your data and does not use it for cross-app advertising.

6. Retention and deletion

Account information and content are kept while your account is active. You can delete your account from Settings → Delete Account, typing DELETE to confirm: the server deletes the account and starts the cleanup of your media. You can also use nexlink.ph/data-deletion or write to privacy@nexlink.ph.

• Location history: configurable between 1 and 2160 hours, 168 hours by default.
• Media relay copies: 24 hours by default; durable replicas have their own retention.
• Pairing QR codes expire after 5 minutes. Live streams are not recorded.
• App diagnostics (client logs and startup measurements): at most 90 days, purged daily.
• Server logs: 30 days.
• Database backups: daily, kept for 7 days, after which deleted data no longer exists in any backup.

Some records may be kept longer when the law requires it or to prevent fraud and abuse.

7. Your rights, security and children

You can request access, correction, erasure, objection or portability at privacy@nexlink.ph; we answer within 15 business days.

Connections use TLS and live calls are encrypted in transit; access controls protect your account. Stored messages are not end-to-end encrypted. Security incidents are handled according to applicable obligations.

Nexlink is not intended for children under 13. We notify material changes to this policy in the app or by email.

8. Contact

You may also file a complaint with the National Privacy Commission (NPC) of the Philippines at www.privacy.gov.ph.