Privacy Policy

1. Who we are

The New National Party of Grenada ("NNP", "we", "us", "our") is a registered political party serving Grenada, Carriacou and Petite Martinique. The data controller for any personal data collected through the NNP website (nnpnow.gd) and the NNP mobile application is the New National Party, St. George's, Grenada. You can reach us at info@nnpnow.gd or +1 (473) 440-1875.

2. What we collect

On the website

Browsing nnpnow.gd does not require an account, and the public pages do not collect personal information from visitors. We do not run third-party advertising trackers. When you make a donation, you are redirected to Stripe; payment details are entered on Stripe's domain and the NNP never sees your card number, CVC, or banking information.

In the mobile app — account

When you create an NNP account in the mobile app we collect:

• Email address and password (managed by Firebase Authentication)
• First name and last name
• Optional profile fields: constituency, polling station, party affiliation

In the mobile app — technical

To deliver push notifications and keep your account secure, the app stores:

• Firebase Cloud Messaging (FCM) push token, your device model, OS version, and the app version
• Account role (e.g. mobileUser, superAdmin) and the email of the admin associated with your account
• Account timestamps: created-at, last-login-at, last-active, and an active flag

In the mobile app — activity

We keep a record of party notifications you have received in the app — title, body, custom data fields, and read/unread state. These are stored both in your account on Firestore (under users/{uid}/notifications) and locally on your device in a private SQLite database (nnp_notifications.db) so the history is available offline.

We do not run third-party analytics, behavioural-tracking, or advertising SDKs in the app. We do not collect your contacts, calendar, photos, microphone, camera, or precise location.

3. Data categories summary

The following table summarises what data the NNP app collects, its purpose, and whether it is linked to your identity or used to track you across other companies' apps or websites.

We do not track you. None of the data collected by the NNP app is linked to data collected by other companies' apps, websites, or offline properties for advertising or measurement purposes. We do not share data with data brokers.

4. Data we do not collect

For clarity, the NNP app and website do not collect the following categories of information:

• Precise or coarse location
• Health and fitness data
• Financial information (payment cards, bank accounts)
• Sensitive information (racial/ethnic data, political opinions beyond stated party affiliation, religious beliefs, sexual orientation, trade union membership, biometric data)
• Contacts or address book
• Photos, videos, or audio
• Browsing history or search history
• Purchases or purchase history
• Gameplay content
• Advertising data or advertising identifiers (IDFA/GAID)

5. How we use your data

• Authenticate you and keep your account secure
• Deliver party news and updates via the nnp_news push channel
• Allow constituency administrators to manage and support users associated with their email
• Support voter engagement, canvassing, and campaign coordination through our partner platform (Kraken Chaos)
• Detect and address abuse or suspicious activity
• Comply with applicable laws and respond to lawful requests from authorities

6. Legal basis for processing

We process your personal data on the following legal grounds:

• Consent — When you create an account, you consent to the collection and use of your data as described in this policy. You may withdraw consent at any time by deleting your account.
• Contractual necessity — Processing your email and password is necessary to create and maintain the account you requested.
• Legitimate interest — We process device tokens and technical metadata to deliver push notifications you opted into, maintain security, and prevent abuse.
• Legal obligation — We may process or retain data where required by applicable law or a lawful request from authorities.

7. Consent and opt-out

By creating an NNP account you consent to the collection and processing of your data as described in this policy. You can withdraw or limit consent at any time through the following mechanisms:

• Push notifications — Disable notifications for the NNP app in your device's system settings (iOS: Settings > Notifications; Android: Settings > Apps > NNP > Notifications).
• Account deletion — Delete your account at any time from within the app or via our account deletion page. This permanently removes all associated data.
• Email communications — Contact us at info@nnpnow.gd to opt out of any direct communications.

8. Sharing and third parties

We do not sell, rent, or share your personal data with data brokers or for advertising purposes. The only third parties that process data on our behalf are:

• Google Firebase (Authentication, Firestore, Cloud Messaging) — hosts the account database and push delivery. Firebase processes your email, password hash, user ID, FCM token, and notification data as a data processor on NNP's behalf. Firebase data centres are located in the United States. Firebase does not independently access or use your data for its own purposes beyond providing the service.
• Stripe — processes online donations made through /donate. Stripe acts as an independent data controller for the payment information you enter on their checkout page. The NNP does not receive or store your card number, CVC, or bank details. Stripe's own privacy policy governs anything you submit on their domain.
• Kraken Chaos (krakenchaos.com) — a political campaigns, canvassers, and voter engagement platform. We share mobile app account data (name, email, constituency, polling station, and party affiliation) with Kraken Chaos to facilitate canvassing operations, voter outreach, and campaign coordination on behalf of the NNP. Kraken Chaos acts as a data processor on NNP's behalf and does not use your data for its own independent purposes. For details on how Kraken Chaos handles data, refer to their privacy policy on their website.

No data collected by the NNP is shared with advertising networks, analytics platforms, data brokers, or any other third parties beyond those listed above.

9. How long we keep data

• Account data: kept until you delete your account (see Section 10) or the account is removed for inactivity after 24 months of no login.
• Inactive push tokens: automatically purged after 90 days of inactivity.
• Notifications on your device: persist until you clear them in the app or uninstall the app.
• Server logs from Firebase: retained per Google's standard retention windows (typically 30 days for operational logs).
• Backup copies: any residual copies in encrypted backups are overwritten within 90 days of deletion.

10. Your rights and account deletion

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and all associated data
• Restrict processing in certain circumstances
• Data portability — receive a copy of your data in a structured, machine-readable format
• Withdraw consent for push notifications at any time from your device's notification settings
• Object to processing based on legitimate interests

Account and data deletion

You can delete your account and all associated data in two ways:

• In the app — Open the side menu and tap Delete Account. Deletion is processed immediately.
• Via our website — Visit our account deletion page for instructions on requesting deletion without logging into the app.

What gets deleted:

• Your profile (name, email, constituency, polling station, party affiliation)
• Firebase Authentication credentials
• FCM push tokens and device metadata
• Notification history stored in your Firestore account
• Account timestamps and role assignments

What is not deleted:

• Local data on your device (the offline SQLite database) — this is removed when you uninstall the app
• Data required to be retained by law (e.g., donation records for financial reporting)

Timeline: In-app deletions take effect immediately. Email-based requests are processed within 30 days of receipt. You will receive a confirmation email once deletion is complete.

To exercise any other right listed above, email info@nnpnow.gd from the address on file. We aim to respond within 30 days. If you are not satisfied with our response, you may contact the relevant data protection authority in your jurisdiction.

11. Children's privacy

The NNP app and website are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13, in compliance with the Children's Online Privacy Protection Act (COPPA) and equivalent international standards.

If you are a parent or guardian and believe a minor has created an NNP account, please contact us at info@nnpnow.gd. We will verify the report and delete the account and all associated data within 14 days.

12. Security

Account data is encrypted in transit (TLS 1.2+) and at rest by Google's Firebase infrastructure. Passwords are hashed using industry-standard algorithms and are never stored in plaintext. Access is gated by Firestore security rules that limit what each user can read and write. Administrative access is restricted to authorised personnel only. No system is perfectly secure; if you suspect your account has been compromised, change your password immediately and let us know at info@nnpnow.gd.

13. International transfers

Because the NNP uses Firebase, your data may be transferred to and processed on servers located in the United States. Google maintains standard contractual clauses and other safeguards required to transfer personal data internationally. By creating an account, you acknowledge and consent to this transfer.

14. Updates to this policy

We may update this policy from time to time. The effective date at the top of this page reflects the most recent revision. Material changes will be announced inside the app via push notification and on this page at least 14 days before they take effect. Your continued use of the app after the updated policy takes effect constitutes acceptance of the changes. If you do not agree, you may delete your account before the effective date.

15. Governing law

This policy is governed by the laws of Grenada. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Grenada, without prejudice to your right to lodge a complaint with a supervisory authority in your country of residence.

16. Contact

If you have questions about this policy or wish to exercise any of your data rights, contact us: