Privacy Policy

MaskedTalk (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, retain, and safeguard information when you use the MaskedTalk mobile application.

1. Information We Collect

We collect the following information when you use MaskedTalk:

• Account information: Email address, username, date of birth, and gender.
• Profile content: Profile photos and information you choose to upload.
• Messages and media: Text messages, images, audio recordings, and videos shared within the app.
• Usage data: App interactions, feature usage, and session information.
• Safety and legal telemetry: IP address, user-agent, device and app metadata, authentication and session events, and related security records. This evidence data is not shown to other users.
• Crash reports: Diagnostic data used to improve stability.
• Device identifiers: Identifiers used to provide push notifications and protect accounts.

2. How We Use Your Information

• Providing app functionality: Enabling messaging, discovery, calls, games, stories, and social features.
• Content moderation: Screening text and images for policy violations and reviewing reports.
• Safety and security: Detecting abuse, preventing fraud, and enforcing our Terms of Service.
• Legal compliance: Preserving objective account, IP address, device, and app metadata when needed to protect MaskedTalk or respond to a valid legal request.
• Improving the service: Understanding feature performance and fixing technical issues.

3. Data Sharing

We do not sell your personal data. We share data only with service providers used to operate the app and only for the applicable service purpose:

• Google Cloud Vision: Image moderation for inappropriate content.
• Firebase (Google): Crash reporting and push notification delivery.
• LiveKit: Voice and video call infrastructure.
• Supabase: Database, authentication, realtime, and storage infrastructure.
• Google Play and Apple: Store billing and purchase lifecycle services where applicable.

4. Data Retention

• Stories: Stories expire after 24 hours and are removed after a short processing grace period.
• Messages, reactions, media, calls, and game activity: Removed from active systems after up to 30 days.
• Account data: Retained until you delete your account. Some deletion logs, security records, payment records, and legally required evidence may be retained where necessary to protect the service, prevent fraud, comply with law, or respond to lawful requests.
• Moderation and legal holds: Reported content or evidence may be preserved for the period needed to investigate abuse, enforce our rules, or comply with a lawful request.
• Crash reports: Retained for up to 90 days for debugging purposes.

5. Your Rights

• Access your data: A GDPR data export is available within the app under Settings > Account > Export Data.
• Delete your account: Available under Settings > Account > Delete Account. You can also follow the process on our Support page.
• Data portability: Exported data is provided in a commonly readable format.
• Questions and objections: Contact us to ask about correction, restriction, or other applicable data rights.

6. Anonymous Identity

MaskedTalk assigns users an anonymous identity for conversations. Your real identity is not shared with other users unless you explicitly choose to reveal it through the available identity reveal experience.

Social anonymity does not mean that MaskedTalk cannot retain objective safety evidence. We may keep IP address, device and app metadata, and account-event records for security, abuse prevention, and legal request handling. This telemetry is not shown to other users.

7. Children’s Privacy

MaskedTalk is an adult social product and is not intended for children. The Google Play listing carries a PEGI 18 content rating. The service eligibility requirements are described in our Terms of Service. We do not knowingly collect information from users who do not meet the applicable eligibility requirement; accounts identified as ineligible may be removed.

8. Security

We use security measures including encryption in transit (TLS), encryption at rest for protected message media, secure authentication, access controls, and monitoring intended to protect account and service data. No security system can guarantee absolute protection.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the app, the website, or email where appropriate. Continued use after an effective update is governed by the updated policy.

10. Contact Us