1. Our Commitment to Anonymity

Pafly is designed so that no user can ever identify another user. Messages are anonymous by design. No personal information is visible between users. The sender and recipient of any message are never revealed to each other unless they choose to reveal themselves deliberately.

2. Information We Collect

Account Data

When you use Pafly, we create an anonymous account. No personal information is required — no email, no password, no real identity.

Messages and Content

We store the messages you write, reactions you send, and replies you compose. Messages are stored to enable delivery to other users. We do not analyze your messages for advertising or profiling purposes.

Device Information

We collect a unique device identifier and push notification token to deliver notifications and ensure proper app functionality. We store basic device information (platform, OS version) for technical support and compatibility.

Usage Data

We track writing activity dates (which days you sent a message) to display your writing calendar and streak statistics. We store aggregate counts of messages sent and received.

Notification Preferences

We store your notification preference settings (daily reminders, new messages, reactions, replies) so we can respect your choices about which notifications to receive.

Usage Statistics (optional)

If — and only if — you agree, we record anonymous statistics about how the app is used: which screens you open, how far you get through the introduction and the guided tour, when you change your settings, and whether sending a letter succeeded or failed. This never includes the content of your messages, your replies or your reports. Nothing is collected before you confirm. The option is offered to you already enabled; you can switch it off at that moment, or at any time afterwards from your profile.

3. How We Use Your Data

• Deliver your messages to other users anonymously
• Moderate content to maintain a safe environment
• Send push notifications based on your preferences
• Display your writing statistics and streak calendar
• Ensure fairness in message distribution
• Prevent abuse and enforce our Terms of Service

4. Content Moderation

Messages and replies are processed through AI-powered content moderation before delivery. This is done solely to filter harmful content (hate speech, violence, harassment, illegal content). Moderation is automated and no human reads what you write during this process.

We do not use your messages to train AI models, build user profiles, or for any purpose beyond moderation and delivery.

5. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We share data only with the following service providers, strictly for app functionality:

• Firebase (Google) — authentication, push notifications, device attestation (App Check) to confirm requests come from a genuine copy of the app, and, only with your agreement, anonymous usage statistics
• OpenAI — content moderation (message text only, no user identifiers)
• Our server hosting provider — infrastructure, API and database hosting

We may disclose data if required by law or to protect the rights, safety, or property of Pafly, our users, or the public.

6. Data Storage and Security

Your data is stored on secure servers. We use industry-standard security measures including encryption in transit (TLS) and at rest. Authentication tokens are stored securely on your device using platform-provided secure storage.

While we take reasonable precautions to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

Your messages are permanently deleted 10 days after you write them, along with the reactions and replies they received.

Your writing days and statistics are kept for as long as your account exists, even after the matching messages are deleted. An account left unused for 30 days is deleted automatically.

If you delete your account, your profile and statistics are erased immediately and permanently. Messages already delivered stay with their recipients until they expire, with no link left to you. This action is irreversible.

8. Your Rights and Choices

• Delete your account and its data at any time from the app settings
• Choose which notifications you receive, or turn them off entirely
• Turn usage statistics on or off at any time from your profile — they are off unless you agree
• Request a copy of the data linked to your account, its correction or its deletion
• Object to the use of your data, or ask us to restrict it

Deleting your account from the app directly exercises your right to erasure — no request needed. For anything else, write to us at the address at the end of this document.

9. Children's Privacy

Pafly is not intended for children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete that information.

10. Local Storage

The app keeps a little data on your device so it can work: a device identifier, a copy of your profile, your notification preferences, your choice about usage statistics, and whether you have already seen the introduction.

When you delete your account, this data is cleared from the device, except for the device identifier. That one is kept in the phone's secure storage so that a suspension cannot be bypassed by reinstalling the app. It holds no information about you and is visible to no other user.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app. Continued use of Pafly after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, please contact us at support@pafly-app.com.