Privacy Policy

Last updated: October 2026

Welcome to Srahah ("App", "Service"). We take your privacy seriously. This policy explains how we collect, use, and protect your data, whether you use the app or send a message from someone's link page.

1. Data We Collect

Account Data (app users)

• Email address (when signing up with email)
• Display name and username
• Apple or Google account identifier (when using social sign-in)
• The birth month and year you enter to confirm your age, and the platform you tell us you'll use Srahah on (such as Instagram)

Srahah Plus Subscription

• Payment is handled entirely by Apple; we never see your card details
• We keep your subscription status (plan and expiry date) linked to your account, received through RevenueCat

Message Data

• Content of the messages you receive, and the replies and games a message was sent through
• Reports you send (the reason and any details you write)

Data About People Who Send a Message From a Link Page

• The message text
• The sender's IP address and an anonymous session fingerprint, to prevent abuse and enforce bans. The IP address is never shown to the recipient
• General hints the recipient can reveal: device type, time sent, country, and approximate city (estimated from the IP address via ipapi.co). These hints never reveal the sender's name or identity

Automatic Data

• Push notification token (FCM Token)
• Preferred language settings
• In-app usage data (such as screens opened, games played, and shares) through Firebase Analytics, linked to your account ID
• Your device's advertising identifier, only if you allow tracking when your device asks

2. How We Use Your Data

• Operate the service and deliver anonymous messages
• Send push notifications for new messages
• Show hints and unlock Srahah Plus features
• Screen content to prevent abuse and harmful content
• Protect users through the ban system and by reviewing reports
• Make sure users are adults (18 or older)
• Show ads in the free version
• Improve the service and fix technical issues

3. Content Moderation & Safety

We use automated systems (keyword filters + AI from Google Gemini) to screen messages before delivery; only the message text is sent to the AI. Abusive messages are rejected automatically, and messages that can't be screened are held until they are. Our ban system blocks devices and IP addresses that repeatedly violate the rules, and the send page uses Google reCAPTCHA to stop automated messages.

4. Data Sharing

We never sell your data. We only share data with:

• Firebase (Google) — Hosting, data storage, notifications, and analytics
• Google Gemini AI — Content moderation (message text only, no personal data)
• Google AdMob and AdSense — Ads in the app and on our web pages
• Google reCAPTCHA — Protecting the send page from automated messages
• ipapi.co — Estimating the sender's country and city from their IP address
• RevenueCat and Apple — Managing the Srahah Plus subscription
• Legal authorities — Only if legally required, such as in harassment or threat cases

5. Your Rights

• Delete account: You can delete your account and all data from Settings at any time
• Block senders: You can block any anonymous sender
• Report: You can report abusive messages
• Tracking and ads: You can refuse or turn off tracking at any time in your device settings
• Subscription: You can manage or cancel Srahah Plus in your App Store account settings

6. Data Security and Retention

We use Firebase with encryption in transit and at rest. Data access is restricted by strict security rules. We keep your data while your account exists and delete it when you delete your account, except what we must keep to protect users or meet legal obligations (such as evidence in harassment reports).

7. Children

The service is not intended for anyone under 18. If we learn a minor has an account, we will delete it immediately.

8. Changes

We may update this policy from time to time. We will notify you of significant changes through the app.

9. Contact Us