Account access
WorldNiche uses Sign in with Apple or a one-time email code. There is no WorldNiche password to remember. Session credentials are stored in iOS Keychain, and the app connects to its account service over HTTPS.
Service-side authorization checks determine which account data each signed-in user can read or change. Account administration credentials are kept out of the app and public source code.
A quiet website
This website uses HTTPS and does not embed advertising, analytics trackers, or third-party video players. The demo is hosted here. Invitation pages use a policy that prevents sending the invitation address as a referrer to another site.
Technical infrastructure can still produce access and security logs. The privacy policy explains the services involved and the limits of deletion.
Found something that needs attention?
Email boutayeb.reda@icloud.com with a description, the affected feature, and safe steps to reproduce it. Use a test account you control. Do not access another person's data, disrupt the service, or include live credentials and invite links.
Please report privately so the issue can be investigated. This page describes implemented safeguards, not a certification or a promise that any system is invulnerable.
Shared profiles pass through review
New names and photos are held privately until approved. Only server operators can make moderation decisions. A decision applies to the exact submitted revision, and selected photos cannot be replaced underneath a review. Reports and review records are kept out of the public app API. Blocking or restricting an account removes its app-managed friend access.