Privacy Policy

1. Who is responsible for your data

The controller of the personal data collected through the Firy Chat mobile application and the firychat.com website is Firy Chat (hereinafter "Firy Chat", "we", "us").

For anything privacy related you can write to privacy@firychat.com. We answer every request within a maximum of 30 calendar days.

2. What data we process

We only process the information needed to provide the service, keep the community safe and comply with our legal obligations. We group data into the following categories:

• Sign-up and identification data: email address or phone number, and an internal account identifier.
• Profile data: display name, username, profile photo, bio, date of birth, gender and the approximate location (country or city) you provide.
• Content you create: text messages, images and voice notes you send to other people inside the app.
• Communication metadata: date, time, duration and participants of your conversations and video calls. We do not record or store the audio or video content of calls.
• Activity data: sign-ins, daily streak, feature usage and FiryCoins balance.
• Transaction data: the identifier of the purchase made through Google Play, the package bought, the amount and the currency. We never receive or store your card or payment method details.
• Technical and device data: device model and identifier, operating system version, app version, language, time zone, IP address and technical error logs.
• Notifications: the device token needed to alert you about messages and calls.
• Safety and moderation: reports you send or that are filed about your account, blocks, and the outcome of the reviews carried out.
• Support: the content of the messages you send when contacting our team.

3. What we use your data for, and on what legal basis

Each processing activity has a specific purpose and a legal basis under the General Data Protection Regulation (GDPR) and the equivalent regulations in your country:

• Creating and managing your account and providing the chat and video call service — legal basis: performance of a contract.
• Processing FiryCoins purchases and managing your membership — legal basis: performance of a contract and compliance with invoicing obligations.
• Keeping the community safe: fraud prevention, abuse detection, report review and enforcement of our guidelines — legal basis: legitimate interest and legal obligation.
• Sending you operational notifications about messages, calls and relevant service changes — legal basis: performance of a contract.
• Sending you promotional communications about Firy Chat — legal basis: your consent, withdrawable at any time.
• Measuring aggregated product usage to improve it and fix errors — legal basis: legitimate interest.
• Handling your support requests and rights requests — legal basis: legal obligation.
• Responding to requests from competent authorities — legal basis: legal obligation.

4. Who we share your information with

We do not sell or rent your personal data. We share information only with the providers needed to operate the service, who act as processors under contract and may only use the data on our instructions:

• Google (Firebase Authentication, Realtime Database, Cloud Storage and Cloud Messaging): authentication, real-time messaging, file storage and push notifications.
• Google Play Billing: processing of purchases made from the app.
• Infrastructure and hosting providers in the European Union: application and database servers.
• Relay server providers (STUN/TURN) needed to establish video calls.
• Other users: your public profile and the content you choose to send them.
• Public authorities, courts and law enforcement, where there is a legal obligation or it is necessary to protect rights or people safety.
• Third parties in the context of a corporate transaction (merger, acquisition or asset sale), with prior notice to you.

5. International transfers

Some of our providers may process data outside the European Economic Area. In those cases we apply appropriate safeguards under Chapter V of the GDPR: European Commission adequacy decisions where they exist, or Standard Contractual Clauses together with supplementary technical and organisational measures.

You can request a copy of those safeguards by writing to privacy@firychat.com.

6. How long we keep your data

We keep your data while your account is active and, afterwards, for the periods needed to meet legal obligations or defend potential claims:

• Account and profile: while the account is active. After a deletion request, erased within a maximum of 30 days.
• Messages and content: deleted along with the account. Backups are overwritten within a maximum of 90 days.
• Transaction and invoicing records: up to 6 years, for accounting and tax obligations.
• Reports and moderation decisions: up to 24 months, to detect repeat offences and protect the community.
• Technical and security logs: up to 12 months.

7. Your rights

You can exercise the following rights at any time by writing to privacy@firychat.com from the address linked to your account:

• Access: obtain confirmation of whether we process your data and a copy of it.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data when it is no longer needed.
• Objection: object to processing based on our legitimate interest.
• Restriction: ask us to temporarily suspend processing.
• Portability: receive your data in a structured, commonly used format.
• Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.
• Complaint: lodge a complaint with the competent supervisory authority, such as the Spanish Data Protection Agency (www.aepd.es).

8. Additional rights depending on your region

We recognise the rights granted by the law of your place of residence, in addition to those above:

• European Economic Area and United Kingdom: the GDPR and the UK GDPR apply in full.
• California (USA): under CCPA/CPRA you have the right to know which categories of personal information we collect, to request its deletion or correction, and not to be discriminated against for exercising those rights. We do not sell or share personal information for cross-context behavioural advertising.
• Brazil: the rights set out in the LGPD apply, including confirmation, access, anonymisation and portability.
• Mexico, Colombia, Argentina, Chile and Peru: you can exercise your access, rectification, cancellation and objection rights under applicable local law.

9. Minors

Firy Chat is intended exclusively for people aged 18 and over. We do not knowingly collect data from anyone under that age.

If we detect or are told that an account belongs to someone under 18, we suspend it and delete their information. If you are a parent or legal guardian and believe a minor in your care has created an account, write to privacy@firychat.com and we will act immediately.

10. How we protect your information

We apply technical and organisational measures proportionate to the risk, including:

• Encryption in transit over TLS for all communications with our servers.
• Standard WebRTC transport encryption (DTLS-SRTP) for video call media.
• Role-based access control and least privilege across internal systems.
• Audit logging of administrative actions on accounts.
• Regular backups and recovery plans.
• Continuous dependency review and security updates.

11. Cookies and similar technologies

The firychat.com website does not use advertising cookies or third-party tracking. The mobile app uses technical identifiers required for authentication and notifications.

You will find the full detail in our Cookie Policy.

12. Changes to this policy

We may update this policy to reflect legal or product changes. If a change is substantial we will let you know inside the app or by email at least 15 days in advance.

The date of the last update appears at the top of this document.

13. Contact

Privacy and data protection: privacy@firychat.com

General support: support@firychat.com

Legal matters: legal@firychat.com