Myst — last updated: 5 July 2026
This policy explains which personal data Myst collects, why, and what your rights are. It falls within the framework of the General Data Protection Regulation (GDPR).
We collect: your username, your password (stored only in hashed form, never in plain text), your age, your gender, an approximate country inferred from your IP address, your photos and your bio, a technical device identifier, the messages and media you send, and, if you turn it on, a notification token.
This data is used to provide the service (profile, messaging, discovery, stories), to ensure safety and moderation (countering abuse, banning offending accounts) and to send you the notifications you have chosen to enable.
Processing rests on performance of the contract (providing the service), our legitimate interest (safety and abuse prevention) and your consent (push notifications, access to the camera, microphone and gallery).
Your username, photos and bio are visible in the Discover feed and on your public page. In a conversation you start, they are shown to the other person only once you choose to share your profile.
We do not sell your data. It may be processed by our technical providers, strictly in order to run the service: server hosting, delivery of push notifications, and moderation and support assisted by artificial intelligence. These providers are bound by confidentiality.
Your data is kept for as long as your account exists. Stories are deleted automatically after 24 hours. When your account is deleted, your personal data is erased, subject to any legal retention obligations.
We put reasonable measures in place: hashed passwords, secret session tokens, access to private media restricted through signed links. No system is entirely foolproof, however.
You have a right of access, rectification, erasure, objection and portability over your data. You can exercise most of these rights directly in the Application (editing your profile, deleting your account) or by contacting us.
The Application is forbidden to anyone under 18. We do not knowingly collect data concerning minors; any account identified as such is deleted.
This policy may change. The date of the last update appears at the top of the document.
For any question about your data, or to exercise your rights: nutriatlas.fit@gmail.com.