Privacy Policy

# Chirpflow Privacy Policy

Last updated: 19/10/2026

Chirpflow is a messaging app for direct messages between people who have agreed to connect. This policy explains what information we collect, how we use it, and the choices you have.

Contact: hayden@chirpflow.co.uk

## Information we collect

- Account information: your email address and password (or your Google account, if you sign in with Google).

- Profile information: a display name and an optional username. Usernames are public so other people can find you.

- Messages: the text of messages you send, the time they were sent, any edits, and reactions you add.

- Connections: friend requests you send or receive, friends you add, and people you block.

- Reports: if you report a message, we store the report, including the message and the reason you chose.

- Typing status: a short-lived indicator that shows when you are typing in a conversation.

We do not collect your location, contacts, photos, or device identifiers for advertising. The app does not include advertising or third-party analytics.

## How we use information

We use this information to:

- sign you in and keep your account secure;

- deliver messages and show your conversations;

- let you find friends, send requests, and block or report people;

- review reports and remove abusive content; and

- keep the app working and fix problems.

## Where information is stored and who processes it

Chirpflow uses Google Firebase to run the service:

- Firebase Authentication handles sign-in.

- Cloud Firestore stores profiles, conversations, and connections.

- Firebase App Check with Google reCAPTCHA Enterprise checks that requests come from the genuine app, which helps block automated abuse.

Google processes this information on our behalf. We do not sell your personal information, and we do not share it for advertising.

## How long we keep information

We keep your information while your account is active. When you delete your account, we delete your profile, username, friends, requests, blocks, and the messages you sent. Copies that Google Firebase keeps for backup or security may persist for a limited period before they are removed.

## Your choices

- Edit your profile: change your display name or username in Settings.

- Block or report: block people in Settings, or report a message from the conversation.

- Delete your account: go to Settings > Delete account. You will be asked to confirm with your password (or Google). This action cannot be undone.

- Request deletion without the app: email [your email address] from the address linked to your account, and we will delete it.

## Children

Chirpflow is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, contact us and we will delete it.

## Security

We use the security features provided by Firebase, including encrypted connections and access rules that limit each person's data to what they are allowed to see. No service is completely secure, so we cannot guarantee absolute security.

## Changes to this policy

We may update this policy. When we do, we will change the "Last updated" date above. If the changes are significant, we will say so in the app.

## Contact

Questions about this policy or your data: hayden@chirpflow.co.uk