Privacy

• There is no email address and no phone number anywhere in this app. It never asks for one, so it does not have one.
• No advertising, no advertising ID, no analytics service, and nothing that follows you into other apps. Nothing about you is sold.
• Your account is private unless you change it — posts, stories and your profile reach your friends and people in your communities.
• You can take a full copy of your data whenever you like, and delete the account yourself.

Everything below sits in one database file on the server this app runs on.

• Your accountA username, a display name, and a password — kept as a scrypt hash with a salt, never as the password itself. A recovery code is kept the same way.
• Anything you chose to addClass, bio, a link, a place you typed, a profile picture and a cover. All optional, all removable, and the “place” is text you wrote — this app never reads your device’s location.
• A birth year, if you gave oneUsed for exactly one thing: how strictly GIF search is filtered. Nothing checks it, nothing else reads it, and leaving it blank is treated as under 18.
• What you postPosts, comments, stories, reels, direct messages, community messages, voice notes, video reactions, marketplace listings, events, stickers, sounds, drop photographs, poll answers and story replies.
• What you doLikes, reactions, who you are friends with, who you have blocked, which communities you are in, event RSVPs, which stories you opened, how far you have read in a conversation, your campus points, your timetable blocks and your banked study minutes.
• Moderation recordsReports you filed and reports about you; warnings and suspensions; a SHA‑256 hash of every picture, so something taken down cannot simply be posted again. When an automatic check stops something, what is recorded is which rule matched — never the sentence you wrote.
• TechnicalSession tokens for the devices you are signed in on, and a push subscription if you turned notifications on. Your network address is counted in memory to limit sign-in guessing and sign-ups; it is not written to the database, and those counters are lost whenever the server restarts.
• Payments, only if you bought PlusAn order id, an amount, and whether it succeeded. Card and UPI details never reach this app — see below.

No email address, no phone number, no contacts or address book, no GPS or device location, no advertising identifier, no third-party analytics or crash-reporting service, no fingerprint or face data, and nothing about what you do in other apps. There are no adverts in this app at all.

Nobody reads your messages. A moderator can only see something after it has been reported, and then only the thing that was reported.

• A private account — which is what every account is until you change it — reaches your friends and people in communities you are both in. A public account reaches anybody signed in.
• Stories disappear after a day. Who watched and who liked goes to you and to nobody else.
• The Drop is the one thing here that reaches every account on the app, and the composer says so before you post.
• “Seen” in a conversation can be turned off, and turning it off hides it in both directions.
• Blocking works differently in a shared community channel than it does for contact. Who you have blocked explains exactly how.

A story or a message is gone from this app when it says it is. It is not gone from a screenshot, and no app can promise you otherwise.

Very little, and none of it is a list of who you are. Each of these happens only when you use the feature it belongs to.

• GIF search — GIPHYThe words you type in the GIF picker, and how strictly to filter them. Your name and your account are not sent, and the search goes out from this server rather than from your phone.
• Story music — Epidemic SoundThe words you type, and an anonymous id for your account, which their terms require so usage can be counted. It is the same random id this app uses internally and it carries no name.
• Paying for Plus — RazorpayOnly if you buy it. You pay on Razorpay’s own sheet and your card or UPI details never touch this app; what comes back is an order id and whether it worked. That is most of the reason a payment processor is used at all.
• Notifications — your browser’s push serviceGoogle, Apple or Mozilla, depending on your phone. The contents are encrypted before they leave, so the push service delivers something it cannot read.
• CallsAudio and video go directly between the two phones, encrypted between them. If this deployment has a relay configured, the relay forwards packets it cannot read — what it can see is that two accounts were connected, and when.
• Video storage, if configuredReels may be kept with a storage provider rather than on this server’s own disk. It holds the video file and nothing about you.

• Stories are deleted a day after you post them — kept for you alone if you leave the archive switch on, which you can turn off and clear.
• A note above your inbox lasts a day.
• Everything else is kept until you delete it, or delete your account.
• Picture hashes and moderation records outlive the content they came from, because that is what stops something taken down from coming straight back.

• Take a copy. Settings → Your account → Download your data gives you everything, as JSON.
• Change or remove anything on your profile, including the pictures and the birth year.
• Delete the account. How deleting works says exactly what goes and what stays.
• Turn things off — read receipts, the story archive, notifications — and make the account private again at any time.

This app is used by school students, and most of them are under 18.

It is worth being exact about what that means, because it is the part most easily overstated. This app does not verify anybody’s age and does not ask a parent for permission. The birth year is optional, nothing checks it, and the only thing it changes is how strictly GIF search is filtered — an account that says nothing is treated as under 18, because the safe answer has to be the one you get by doing nothing.

What the app does instead is hold everybody to the same narrow collection: no advertising, no profiling, no tracking, no location and no contact details, so there is very little held about a child here to begin with. That is a design decision rather than a substitute for consent.

Passwords and recovery codes are stored as salted scrypt hashes and compared in a way that does not leak how close a guess was. Signing in sets one cookie and nothing else. Changing your password signs every other device out, because the usual reason to change one is that somebody else has it.

This is one small app run by students. It is not a bank, and describing it as though a security team were behind it would be its own kind of dishonesty.

If this changes in a way that matters, the date at the top moves and the app says so rather than leaving you to notice.

Questions about any of this, or about data held about you, go to srivastavasamyak4@gmail.com.