Effective Date: 29 May 2026
Nabble is operated by Nabble Limited, a company registered in the United Kingdom. Nabble (“we,” “our,” or “us”) operates the Nabble mobile app, which allows users to borrow, lend, request, or give away items within trusted social circles. Protecting your privacy is a priority. This policy explains how we collect, use, and share your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: Nabble Limited (company no. 16829537). Contact: info@nabble.org.
Information We Collect: We collect the following personal data:
— Email address (required to create an account)
— Handle and optional location (neighbourhood or street name, as you choose to provide)
— Avatar image (optional)
— Item listings and descriptions you create
— Messages you send or receive within the app
— IP address (for security and fraud prevention)
— Device type, app version, and session data (for app performance)
— Usage and analytics data — which features you use and key actions you take in the app, such as signing up, logging in, adding an item, and sending or accepting a borrow request. This is collected using Google Analytics for our own product analytics. It is not used for advertising, not shared with data brokers, and not used to track you across other apps or websites.
— Push notification token (if you enable notifications)
Legal Basis for Processing: We process your personal data on the following legal grounds:
— Performance of a contract: account registration, item lending and borrowing, and messaging are necessary to deliver the service you signed up for.
— Legitimate interests: security monitoring, fraud prevention, and platform improvement including product analytics, where these interests are not overridden by your rights.
— Consent: push notifications. You may withdraw consent at any time in Settings.
How We Use Your Information: To enable item lending, borrowing, and sharing; operate and improve the platform; communicate with you about your account; send notifications (where consented); and detect, investigate, and prevent fraud, abuse, or illegal activity.
Content Moderation and Safety: We use manual processes to detect, review, and remove objectionable content. Reports submitted by users are reviewed and acted upon within 24 hours, including removal of content and suspension or removal of offending users where appropriate.
User-Generated Content: Nabble allows users to create and share content, including item listings, messages, and profile information. By using the app, you acknowledge that you may be exposed to content provided by other users. We do not endorse user content but take reasonable steps to moderate it.
Reporting and Blocking: Users can report or block other users directly within the app. Blocking a user immediately removes their content from your experience. Reports are sent to us for review and action.
Data Sharing: We do not sell or rent your information. Data may be shared with other users as part of core functionality (for example, your handle and item listings are visible to other users in your network). Data may also be shared with infrastructure providers acting as our processors under confidentiality obligations — including hosting, email delivery, Google (Firebase Cloud Messaging) for delivering push notifications, and Google (Google Analytics) for product analytics — or when required by law.
International Data Transfers: Some of our service providers are based outside the United Kingdom. In particular, push notifications are delivered using Google Firebase Cloud Messaging, which may process your notification token on servers in the United States, and usage analytics are processed by Google Analytics, which may process your usage data on servers in the United States. Where data is transferred outside the UK, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses, to ensure your data receives an equivalent level of protection.
Data Retention: Account data (email, handle, location, items, messages) is retained until you delete your account. IP address logs are retained for up to 90 days for security purposes. When you delete your account, your personal data is deleted from our systems within 30 days, except where retention is required by law.
Security: We implement technical and organisational measures to protect your data, including password hashing, encrypted message storage, HTTPS for all data in transit, and access controls. No method of transmission over the internet is 100% secure.
Your Rights: Under UK GDPR you have the right to: access your personal data; correct inaccurate data; request deletion of your data (via Settings → Delete Account); restrict or object to processing; and data portability. To exercise any right, contact us at info@nabble.org.
Right to Complain: You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113 if you believe we have handled your data unlawfully.
Children’s Privacy: Nabble is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you become aware that a child has provided us with personal data, please contact us so we can delete it.
Changes to This Policy: We may update this Privacy Policy from time to time. Updates will be posted within the app with a revised effective date. Continued use of the app after an update constitutes acceptance of the revised policy.