Nessa authenticates users through Clerk, our third-party identity provider. When you create or sign in to your Nessa account, the information you provide to Clerk (such as your email address, and depending on the sign-in method you choose, your name or OAuth profile details) is processed by Clerk to establish and maintain your account. Nessa stores only the Clerk user id needed to associate your account with the content you create — we do not receive or store your Clerk password.

When you use Nessa's community features — creating or joining clubs, participating in challenges, posting, commenting, or liking posts — the content you submit is stored in our database and associated with your account. This includes club names, descriptions, and rules you author, challenge progress and completion data, and any posts, comments, or likes you create. This content is visible to other members according to the privacy settings of the club it belongs to.

Nessa's data is stored in a dedicated Turso (libSQL) database that is separate from the freno.me main database and the Life and Lineage database. Your Nessa community content is never shared with or accessible through those other products.

You can request the removal of your Nessa account and all associated content by contacting us here. On receipt of your request we will remove your account record, your club memberships, your challenges and participation data, and your posts, comments, and likes from the Nessa database, and we will request that Clerk delete the corresponding user record. A short grace period may apply while the deletion is processed.

We do not sell or rent your personal information. We share data with third parties only as necessary to operate Nessa: Clerk processes your authentication credentials and account metadata, and Turso hosts the database in which your community content is stored. We may also use third-party services for crash reporting and performance profiling; these services receive only anonymized data related to app performance and stability, never personal user content.

Your authentication credentials (such as your password, if you use an email/password sign-in) are handled exclusively by Clerk under Clerk's own privacy policy. Nessa never receives, stores, or transmits your password. When you sign in, Nessa receives a session token from Clerk that lets us identify you; this token is verified on each request and is not persisted in our database.

Nessa takes appropriate measures to protect your account and the content you create. Authentication is delegated to Clerk, which maintains industry-standard security for credentials and session tokens. Your community content is stored in the Nessa Turso database, access to which is restricted to authenticated, authorized API requests. We implement standard security protocols to prevent unauthorized access, disclosure, alteration, or destruction of user data.

Community content you author is shared with other Nessa members only according to the visibility rules of the club it belongs to. Public clubs expose their content to any signed-in Nessa member; private clubs restrict content to their members. You are responsible for the content you choose to post.