Privacy Policy

Effective May 6, 2026

1. Information We Collect

We collect:

• Account data — username, hashed password, display name, optional bio, optional avatar / cover image, date of birth (for age verification).
• Login telemetry — IP address, approximate location (country / city, derived from IP), and User-Agent for each login attempt. Used for account-security audit and abuse detection.
• Content you create — messages (room and direct), photos, videos, reactions, gifts. Required to deliver the Service.
• Purchase records — in-app purchase receipts and credit-ledger entries for billing integrity.
• Device metadata — app version and platform, used for force-update checks and crash reporting.

We do not collect your email address. Authentication is username-based.

2. How We Use Your Information

• To operate and deliver the Service.
• To translate your messages into other users' preferred languages.
• To moderate user-generated images for unsafe content.
• To detect abuse, ban malicious accounts, and enforce our Terms.
• To process purchases and credit balances.
• To respond to your support requests.

3. Third-Party Processors

We share specific data with the following processors strictly to deliver the Service:

• Google Translate v2 / Google Cloud Vertex AI (Gemini Flash-Lite) — receives your message text to produce translations in other supported languages. We choose between engines based on operational cost and quality. The translation request returns text only; we cache translations to minimize repeated calls.
• Google Cloud Vision SafeSearch — receives the image you upload to flag adult, violent, spoof, medical, or racy content. Each upload is scanned at most once.
• Cloudflare R2 (EU jurisdiction) — stores your photos, videos, and avatar / cover images inside the European Union region.
• Apple App Store / Google Play — processes in-app purchases. We receive transaction receipts only; payment instruments are handled by the stores.
• geoip-lite — an offline IP-to-country lookup library; no network call.

We do not sell your personal data and we do not use your data for advertising or behavioral profiling.

4. Data Retention

We use a soft-delete model for almost every record so that an appropriate audit trail is preserved for moderation and dispute resolution. When you delete a follow, mute, block, or membership, the row is marked ended — the underlying timestamp is kept. Deleted messages keep their text but are hidden from all reading surfaces; only the original sender and the recipient may have previously seen them. When you delete your account, your profile becomes “[deleted]” to other users; financial and moderation records are retained as legally required.

5. Your Rights

You may:

• Export your data — available from Settings → Export your data in the app. We generate a ZIP archive of your account, profile, messages, and ledger; the link is valid for 24 hours.
• Delete your account — via Settings → Delete account in the app, or visit chambr.online/delete-account.
• Block or mute any other user.
• Report content that violates our policies.
• Contact us at support@chambr.online to exercise any data-protection right available under your jurisdiction (GDPR, KVKK, CCPA, etc.).

6. Security

All traffic between your device and our servers is encrypted in transit (TLS). Passwords are stored as bcrypt hashes. Stored media objects are served via a custom domain with no public listing. Access to administrative tooling is restricted to a small set of authenticated team members.

7. Children

Chambr is not directed to anyone under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will close the account.

8. Changes

We may update this Privacy Policy. Material changes will be highlighted on this page and inside the app.

Contact

Privacy questions or requests: support@chambr.online.