Privacy Policy

PapaChat ("we," "our," or "the app") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our messaging application.

By using PapaChat, you agree to the collection and use of information in accordance with this policy.

Information We Collect

1. Account Information

When you create an account using Sign in with Apple, we collect:

• User ID: A unique identifier provided by Apple
• Display Name: The name you choose to display to other users
• Community Username: A unique username you choose when joining each community
• Email Address: (Optional) If you choose to share it during Apple Sign In
• Full Name: (Optional) If you choose to share it during Apple Sign In

2. Messages and Conversations

We collect and store:

• Message Content: The text of messages you send
• Message Metadata: Timestamps, sender/recipient information, delivery status
• Conversation Participants: The users involved in each conversation

2a. Deleted Messages

When you or an admin deletes a message, the message text is permanently removed and replaced with a placeholder ("This message was deleted"). We retain the following metadata about deleted messages:

• Sender ID and timestamp of the original message
• Whether it was deleted by the sender or by an admin
• The deletion timestamp

This metadata is retained to preserve conversation context and for community safety accountability. The original message text cannot be recovered.

2b. Admin Moderation Data

If you are a community admin, or if admin actions are taken in a community you belong to, we collect and store:

• Audit log entries: Records of admin actions including member muting, message deletion, member removal, role changes, and group management
• Mute records: Which members are muted, the duration, and which admin performed the action
• Report records: User-submitted reports about objectionable content, including reporter identity, reason, and optional description

Audit log entries are retained permanently for accountability and community safety. Mute records are retained for the mute duration plus 90 days.

2c. Conversation Export

You may export conversations as PDF files. When you do:

• The exported PDF contains message text, sender names, and timestamps
• The PDF is generated on your device
• You control where the PDF is shared via the iOS share sheet
• We do not retain a copy of exported PDFs on our servers

3. Device Information

We automatically collect:

• Push Notification Token: To send you notifications when you receive messages
• Device Model: For debugging and support purposes
• Operating System Version: For compatibility and support

4. Usage Analytics

We collect anonymous usage data through Firebase Analytics:

• App opens and screen views
• Feature usage (search, messaging, profile updates)
• Performance metrics and crash reports

Note: Analytics data is anonymized and cannot be used to identify you personally.

How We Store Your Data

All user data is stored securely using Firebase Firestore, a cloud database service provided by Google:

• Location: Data is stored in Firebase's data centers (primary region: us-central)
• Encryption: All data is encrypted in transit (HTTPS) and at rest
• Retention: Data is retained as long as your account is active

Security Measures

• Authentication: Sign in with Apple provides secure, privacy-first authentication
• Access Control: Only you and your conversation partners can access your messages
• Firestore Security Rules: Server-side rules prevent unauthorized data access
• Encrypted Connections: All data transmission uses SSL/TLS encryption

Your Rights and Choices

1. Access Your Data

You can view all your data within the app: your profile, conversations, and account settings.

2. Update Your Data

You can update your display name and profile photo (when available) at any time.

3. Delete Your Messages

You can delete any message you sent by long-pressing it and selecting "Delete." The message text is permanently removed and replaced with a placeholder. Message metadata (sender, timestamp, deletion status) is retained for conversation context.

4. Leave a Community

You can leave any community from Settings within the app. When you leave a community:

• Your community membership and community username are removed and freed for reuse
• You are removed from all groups and group conversations in that community
• Your previous messages remain visible to other participants
• Direct message conversations are preserved

5. Delete Your Account

You can permanently delete your account from Settings > Account > Delete Account. When you delete your account:

• Your account, profile, and personal information are permanently deleted
• Your messages are anonymized (sender shown as "Deleted User") but message content remains visible to other conversation participants
• You are removed from all communities and groups
• Your community usernames are freed for reuse
• Any pending join requests are cancelled
• Your Sign in with Apple token is revoked
• Your push notification tokens are deleted
• Audit log entries referencing your actions may be anonymized rather than deleted, to preserve community safety records
• A server-side cleanup process ensures all data is removed even if the app is closed during deletion

6. Control Notifications

You can control push notifications in two ways:

• Disable all notifications: Go to iOS Settings → PapaChat → Notifications
• Mute individual conversations: Swipe left on a conversation and tap Mute. You will not receive notifications for that conversation but will still receive messages.

7. Opt Out of Analytics

Contact us to disable analytics for your account.

Third-Party Services

We use the following third-party services:

• Firebase (Google) - Data storage, authentication, analytics
  Firebase Privacy Policy
• Apple Sign In - User authentication
  Apple Privacy Policy

Data Retention

• Active Accounts: Data retained as long as account is active
• Deleted Messages: Message text is permanently removed; metadata (sender, timestamp, deletion status) is retained for conversation context
• Admin Audit Logs: Retained permanently for community safety accountability
• Mute Records: Retained for the mute duration plus 90 days
• User Reports: Retained permanently for safety review
• Inactive Accounts: Accounts inactive for 2 years may be deleted (30 days notice)
• Deleted Accounts: Data permanently deleted within 30 days; audit log entries may be anonymized rather than deleted

Children's Privacy

PapaChat is not intended for children under 13. We do not knowingly collect personal information from children. If you believe your child has provided us with information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted in the app with an updated "Last Updated" date. Significant changes will be notified via push notification.

Your continued use of the app after changes constitutes acceptance of the updated Privacy Policy.

California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Right to Know: What personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of sale of personal information (we do not sell data)
• Right to Non-Discrimination: No discrimination for exercising your rights

European Users (GDPR)

EEA residents have rights under the GDPR:

• Access, rectify, or erase your personal data
• Restrict or object to processing
• Data portability
• Lodge a complaint with a supervisory authority

Legal Basis for Processing:

• Consent: For push notifications and analytics
• Contract: To provide messaging services
• Legitimate Interest: To improve the app, ensure community safety, and prevent fraud