What we collect
We collect your account email, salted password hash and adult eligibility confirmation; nickname, avatar and hometown; text, photos and voice recordings you choose to upload; comments, likes, reports, blocks, gifts and transaction records; messages you send or receive and their timestamps; and necessary device and crash diagnostic information. We do not collect GPS data, contacts or precise location.
Permissions and use
The camera and photo library are used only when you take a photo, select an image or change your avatar. After you explicitly start a call, the camera provides only a local preview and the microphone generates only an in-memory volume indicator. Calls do not record, upload or transmit media, and capture stops when muted, when you leave, or when the app enters the background.
Data is used for login, displaying content, safety review, reports and blocks, transaction reconciliation and service improvements. Apple/Google process payments; we do not receive your bank card number.
Message bodies use end-to-end encryption. Private keys are stored only in secure storage on the current device; other logged-in users can read ciphertext but cannot decrypt the message body. Because the backend does not restrict record access to conversation participants, participant IDs, conversation IDs, timestamps and public keys remain readable by all logged-in users. Private keys are not synchronized between devices, so old messages may become unreadable after reinstalling the app or changing devices. The app attempts to migrate unencrypted messages sent before the upgrade when the sender opens the conversation; until migration, those messages remain publicly readable as plaintext.
Retention and deletion
You can submit a privacy request in the app or delete your account using the in-app flow. The app deletes data owned by your account and clears the local session. For message records created by earlier versions, account deletion removes only records you own. The current generic CRUD backend has no verifiable interface for revoking tokens across all devices; session status on other devices depends on backend behavior.
Encrypted backups are cleared within 30 days. Safety evidence is retained for up to 180 days. De-identified payment records retained as required by law are kept for up to 7 years.
Your rights
You can access, correct, export or delete your data, and revoke camera, microphone, photo library and notification permissions in system settings. Contact support through an in-app privacy request; we will reply to your account email.
Contact: Submit a privacy request from the Privacy Policy page in the app. You can also read the support guide.