1. Introduction
Welcome to PEBL. We are committed to protecting your personal information and your right to privacy. This Privacy Policy is tailored to meet the requirements of the Apple App Store and Google Play Store and explains how we collect, use, disclose, and safeguard your information when you visit our mobile application (the "App").
End-to-End Encryption (E2EE)
We prioritize your privacy. The App utilizes End-to-End Encryption (E2EE) for communications. This means your messages and media are encrypted on your device and can only be decrypted by the intended recipients. We do not have access to the contents of your E2EE communications.
2. Information We Collect
A. Personal Information You Provide to Us
When you register or use the App, we collect the following information:
- Account Information: Email address, password, and profile details (such as your name).
- Communications: Text messages, images, documents, audio, and video files that you upload and send via the chat interface (protected by E2EE).
B. Information Automatically Collected
- Device Information: We may collect device identifiers needed for push notifications (via Expo Notifications / Firebase Cloud Messaging).
- Local Storage Data: We securely store authentication tokens, session data, and encryption keys locally on your device using AsyncStorage and SecureStore.
C. Device Permissions
To provide core functionalities, the App may request your permission to access the following device features:
- Camera & Photo Library (Storage): To allow you to take photos/videos and upload media from your gallery to the chat.
- Microphone: To allow you to record and send audio messages.
- Notifications: To alert you of new messages and updates.
- System Alert Window & Vibration: For enhanced incoming call or message alert experiences.
You may revoke these permissions at any time in your device's settings. However, doing so may limit your ability to use certain features of the App.
3. How We Use Your Information
- To facilitate account creation and logon process.
- To provide, operate, and maintain our App.
- To send you push notifications regarding new messages, events, or updates.
- To encrypt and securely route your messages and media through our servers without accessing their contents.
4. Third-Party Sharing and SDKs
We do not sell your personal data. We use the following third-party service providers (SDKs) strictly for the operation of the App:
- Expo Framework: Used for core app functionalities, including Camera, Haptics, File System, Document Picker, Audio, and Video.
- Firebase / Google Services: Used specifically for reliable delivery of push notifications.
- Socket.io: Used for real-time signaling and chat delivery.
No targeted advertising SDKs or unauthorized analytics trackers are present in the App.
5. Data Retention
We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy.
- Account Data: Retained as long as your account is active.
- Chat Data: Encrypted messages routing through our servers may be temporarily stored until delivered or retained in encrypted format for chat history synchronization, depending on service configurations.
6. User Rights & Account Deletion
In compliance with Apple App Store guidelines, you have the right to:
- Access and Update: Review and change your personal information within the App.
- Delete Your Account:You can request to delete your account and associated personal data directly within the App's settings or by contacting us. Upon request, we will delete your account and associated encryption public keys from our active databases.
7. Security of Your Information
We use cryptographic protocols (NaCl/TweetNaCl) and secure local storage (SecureStore) to protect your private keys. While we do our best to protect your personal information, no security system is impenetrable. Transmission of personal information to and from our App is at your own risk.
8. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
9. Contact Us
If you have questions or comments about this policy, please contact the PEBL support team.