Privacy Policy

1. Who We Are

This privacy policy explains how we collect, use, and protect your personal data when you utilize our voice chat platform. This service operates under United Kingdom jurisdiction.

2. Data We Collect

We collect the absolute minimum data required to securely maintain, troubleshoot, and operate a real-time communication platform:

• Secure authentication identifiers provided by your single sign-on (SSO) provider to log you in safely (we never see, access, or store your external accounts' passwords).
• Your chosen platform username and gender preference.
• Temporary call history records (capped at a rolling window of the last 20 sessions per user).
• User-submitted moderation reports and platform safety feedback.
• Short-lived session tokens used strictly to maintain your secure, authenticated status. These tokens automatically expire after brief periods of user inactivity and are permanently destroyed server-side the moment you log out.
• IP addresses utilized exclusively for firewall defense, rate limiting, and malicious abuse prevention.
• Your network (IP) address, to the person you are speaking with: calls connect your device directly to the other person's wherever your networks allow it, which keeps the audio between the two of you. Setting up that connection means each device receives the other's network (IP) address. It is never shown in the app, but somebody determined could find it with technical tools. Where a direct connection is not possible, the audio is relayed as described in section 7.
• Connection quality diagnostics recorded automatically for each call: connection type, round-trip time, packet loss and disconnection counts, used solely to find and fix call failures. This measures how well a call connected, never what was said. Call diagnostics are held for 7 days and disconnection counts for 24 hours, after which both are deleted automatically.
• Direct messaging and chat history text logs shared voluntarily during chat sessions.

3. How We Use Your Data

• To securely deliver and route the voice chat service.
• To enforce community safety guidelines and process system bans.
• To display your recent call history index for your personal reference.
• To protect our network infrastructure from automated spam, DDoS attacks, and systemic abuse.
• To manage, deliver, and optimize platform features and relevant media configurations.

We do not sell, rent, or trade your personal account data to external marketing agencies or data brokers.

4. Data Retention Policy

We retain your personal data only for as long as necessary to provide our services, maintain community safety, and comply with our legal obligations. Our programmatic retention schedules are defined as follows:

• Account Deletion: If you request account deletion, your profile and associated relationship records (friends, blocks) are permanently removed from our active databases following a 30-day grace period. Reports submitted about your account, and any messages attached to them as evidence, are retained separately as described below.
• Enforcement & Abuse Prevention: If an account is restricted for severe safety or security violations, essential internal account identifiers are securely retained for up to 1 year solely to enforce the restriction and prevent platform abuse. All non-essential personal details are removed after 30 days.
• Communication Logs: Text messages between friends are automatically erased on a rolling 7-day cycle, for every account without exception. Messages typed in the chat during a call are held only while the call lasts, so they can be shown again if you reconnect, and are deleted when it ends.
• Reported Conversations: When somebody submits a report about another user, a copy of the recent messages between those two people is attached to that report as evidence, including the chat from the call they are in when the report is made, and is kept for as long as the report itself. It is used only to assess the report, is never disclosed to the person reported, and is deleted with the report after 1 year.
• Voice Call History: Your local call logs display a rolling history of your last 20 sessions. When an account is removed, appearances in a matching partner's call log are stripped of personal identifiers and altered to display as "Deleted User."
• Administrative Records: General moderation reports and historic incident logs are automatically deprecated and deleted after 1 year.
• Encrypted Backups: Encrypted database backups are held for a maximum of 90 days. Where a backup is restored, deletion requests are automatically re-applied, so removed accounts are not reinstated.

5. Your Rights (GDPR)

If you are based in the UK or European Economic Area, you hold full statutory rights over your information:

• Right to Access & Portability: You can request a copy of your data, or download a structured JSON copy of all data tied to your account directly from Settings → Account → Download My Data at any time.
• Right to Deletion: You can request a full purge of your account footprint at any time via your account settings, subject to the ban evasion policy noted above.
• Right to Rectification: You have the right to request the correction of inaccurate factual data tied to your identity, which can be managed via your single sign-on provider or by reaching out to our support desk.
• Right to Object: You hold the right to object to how your data is processed.
• Right to Complain: If you believe we have handled your information improperly, you can raise it with us directly using the contact details below. You also have the right to lodge a complaint with the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint. You do not have to contact us first, though it is usually quicker if you do.

To exercise any administrative rights or request data corrections, contact our privacy desk at: [email protected]

6. Cookies & Device Storage

We utilize essential first-party cookies and local browser storage to securely maintain your session and remember your core interface preferences. For a detailed breakdown of exactly what data parameters are stored on your device, please review our comprehensive Cookie & Local Storage Policy.

7. Third-Party Technical Services

• Identity Provider (Google OAuth): Used for authentication and to help confirm you are old enough to use ChillConvo. Our system receives a secure handshake token, generates an internal cryptographic signature, and drops the raw handshake data. We also ask Google for your age bracket: whether you are over or under 18, and never your date of birth. We keep only a record of whether Google confirmed you as an adult or could not tell us, not the answer itself. We do not request, access, or store your email address or Google contact lists.
• Error Monitoring (Sentry): Used solely to detect and diagnose technical faults so that we can keep the service stable and secure. Where a fault occurs, a limited technical record of that fault is generated. We do not attach your name, your email address, your IP address, or the contents of your conversations to these records, and we do not use this service to track your activity or measure your use of the site. These records are processed on infrastructure located within the European Union and are kept only for as long as is necessary to investigate and resolve the fault.
• Connection Relay (Turnix): Some networks will not allow two people to connect to each other directly. Where that is the case, the encrypted audio is routed through a relay service so that the call can still take place. The relay forwards encrypted packets and nothing more: it cannot listen to a call, because the keys that encrypt the audio are exchanged directly between the two devices and are never shared with it. To perform that routing it necessarily receives the network (IP) addresses of both participants and the duration of the relayed session. No account details, usernames, or message content are shared with it.
• Network Security & Delivery (Cloudflare): All traffic to this site passes through a security and delivery network before it reaches our servers. It filters malicious traffic, absorbs denial-of-service attacks, and serves images and stylesheets from locations near you. To do this it necessarily processes your IP address and the requests your browser makes, and it tells us the country you are connecting from so it can be shown to the person you are speaking with. We do not receive or store your IP address from it beyond the firewall and rate-limiting purposes described above.
• Server Hosting (OVHcloud): Our servers, including the database that holds your account, are rented from a hosting provider and located in the United Kingdom. The provider runs the hardware and the network. It does not use your data for its own purposes.
• Off-site Backups (Backblaze): A copy of each encrypted backup is kept with a separate storage provider, on infrastructure in the European Union, so the service can recover if our servers are lost. Backups are encrypted before they leave our servers with a key that is never shared with the provider, so it cannot read them. These copies are deleted automatically after 30 days.

8. Age Requirement

This platform is strictly restricted to individuals aged 18 or older. We maintain a zero-tolerance policy for minor safety. If we determine or have reason to suspect an account holder is under the age of 18, the profile will be instantly and permanently terminated without warning.

9. Contact

For any privacy related queries or compliance verification, contact: [email protected]