Privacy policy

Last updated: 13 October 2026

This privacy policy applies to the Nebira app and the website nebira.ch. It explains which data we process, for what purpose and where it is stored. The Swiss Federal Act on Data Protection (FADP) applies.

1. Controller

Aron Spigaglia, Sursee, Switzerland

Email: support@nebira.ch

2. Data we process

• Account: email address, password (only as an encrypted hash, nobody can read it), display name and language.
• Phone number: we verify it with an SMS code. Others only see that your number is verified – never the number itself.
• Home: postal code and town. From these we calculate an approximate location (the centre of the postal code area) for searching within a radius. We do not use GPS and do not need your address.
• Items: title, description, category, price and deposit, postal code and photos. Photos are saved anew on our server, downscaled and without metadata (in particular without GPS data).
• Loans, chats and reviews: requests and their history, messages and reviews after a loan.
• Groups: groups you create or join.
• Reports and blocks: when you report something, we store a copy of the reported content so that we can review the report – even if the content is changed later.
• Notifications: if you allow push notifications, an identifier of your device (token) so that we can send you notifications.
• Technical data: when our server is accessed, the IP address and the time are transmitted for technical reasons. We use them only for operation and protection against abuse (e.g. limiting sign-in attempts) and do not store them permanently.

3. What we use the data for

We use your data only to run Nebira: for your account, search, loans, chats, groups and reviews, to create trust and safety (verified phone number, reports, blocks) and to notify you (e.g. codes by email or SMS, notifications about requests and messages).

No ads, no tracking, no analytics services. We do not sell any data.

4. What other users see

• Your profile: display name, since when you are a member, whether your phone number is verified, and your reviews.
• Your items with postal code and town – depending on your choice, for everyone or only for members of your groups. In vacation mode they are hidden from others.
• In groups, members see the names of the other members.
• Chats are only seen by the two people involved.

Others never see your email address or phone number. Item photos are stored at random addresses that cannot be guessed, so that the app can load them; anyone who knows such an address can open the photo.

5. Where the data is stored and who receives it

• Infomaniak Network SA, Geneva (Switzerland): server, database, storage for photos and backups, and sending emails. All data of the app is stored in data centres in Switzerland.
• VADIAN.NET AG (ASPSMS), Switzerland: sends the SMS codes; receives your phone number and the text of the SMS.
• swisstopo (Federal Office of Topography): the map in the app loads map images directly from swisstopo; your IP address and the map section are transmitted.
• Apple and Google: push notifications are delivered through Apple’s service (iPhone) or Google Firebase (Android). They receive the device identifier and the content of the notification (e.g. name and message text) and may process data outside Switzerland, for example in the USA. Without your permission for notifications, no data is sent to these services. When you download the app, the terms of the App Store or Google Play also apply.

Beyond this, we only pass on data if we are legally obliged to do so.

6. How long we keep data

We keep your data as long as you have an account. You can delete your account at any time in the app (Profile → “Delete account”), see Delete account. Then:

• we delete your email address, password, phone number, display name and home and sign you out on all devices,
• we archive your items and delete their photos,
• you leave all groups.

Loans and chats remain available to the other people involved and show “deleted account”. Database backups are overwritten after 14 days. We keep reports as long as necessary to handle them and to protect against abuse.

7. Security

Connections to the app and the website are encrypted (HTTPS). We store passwords only as a hash. Only the operator has access to the server and the data. The database is backed up every day.

8. Your rights

You can at any time request information about your data, have incorrect data corrected, have your data deleted or receive it in a common format. Write to support@nebira.ch. If you believe we do not process your data correctly, you can complain to the Federal Data Protection and Information Commissioner (FDPIC).

9. Changes

We update this privacy policy when the app or the law changes. The version on this page applies; we inform about important changes in the app.