| Type | Information | Purpose |
|---|---|---|
| Required | Login identifier (Google, Facebook or email, whichever you use) · email (if you log in with email) | Identifying members · account management |
| Required | Date of birth · gender · nickname · country of sign-up (state in the US) · device language | Age check · matching (gender and country preferences) · showing your flag |
| Required (Korea and Vietnam) | Phone number (stored as a hash) | Verification · one account per person · preventing abuse |
| Optional | Profile photo · bio · interests | Your profile (visible to friends and chat partners) |
| Age check (where required) | Method · result · how Google Play verified your age (we don't store age ranges) · age verification provider session ID | Legally required age checks and proof of them |
| Created as you use the app | Chat history (who, when, how long, connection type) · messages sent during chats · friends · messages · blocks · reports (reason, text, and one still image of the other person's video for reports made during a chat) · restrictions · appeals | History screen · friends and messages · handling reports and safety · resolving disputes · message retention under Korean rules for random chat services |
| Collected automatically | App usage statistics (in the EEA, UK and Switzerland only with your consent) · crash information (device model, OS, app version) · push notification token · install ID (hash) | Improving the app · fixing errors · notifications · preventing banned users from signing up again |
What we don't collect: video or audio recordings · location (GPS) · contacts · advertising ID · raw IP addresses (used only to determine your country, never stored). When we save your profile photo, we remove location and other camera data (EXIF).
How video calls work: when two devices connect directly, the IP address needed for the connection may be shared with the other person's device. If a direct connection isn't possible, our relay server (TURN) only passes along encrypted data and doesn't store it.
Where the law requires an age check (for example the UK, Australia, Brazil and some US states), or when a report that you may be under age could be right, we check your age in one of these ways:
| Information | Retention |
|---|---|
| Account · profile · friends · messages · chat history · blocks · age check result · notification token | Deleted immediately when you delete your account (messages are deleted as soon as you delete them) |
| Messages sent during chats | Deleted 180 days after they're sent |
| Reports and evidence (one still image) | Deleted 90 days after the report is resolved (kept until then) |
| Hashes of the phone number, login method and install ID of restricted users, and the restriction record | Kept to prevent sign-up again (even after account deletion) |
| Server backups | Encrypted and deleted automatically after 7 days (deleted data disappears from backups within 7 days) |
We delete data so it can't be recovered, and photo files are removed from storage.
We don't sell your personal information or share it with third parties, except when law enforcement or other authorities request it through legal procedures, or when the law requires us to report child sexual abuse material or similar content.
We use the following service providers. Your information is processed outside your country, including outside South Korea and the EEA.
| Provider | Country | Information | Purpose |
|---|---|---|---|
| Oracle Corporation | Japan (Tokyo · servers) | All information in section 1 kept on our servers · encrypted call data passing through the relay (TURN, not stored) | Running our servers · retention as in section 3 |
| Google LLC | United States | Login identifier · email · phone number (for text verification) · push notification token · app usage statistics · crash information · nickname and member ID in operator notification emails | Google and email login and text verification (Firebase) · notifications · statistics · crash analysis · operator email (Gmail) |
| Meta Platforms, Inc. | United States | Facebook login identifier · email | Facebook Login (only if you use it) |
| Didit Identity, Inc. | United States | Selfie · ID document images · age estimate result | Age checks (only when required) |
| Cloudflare, Inc. | United States | IP address · request information | Delivery and security (network in front of our servers) |
Didit may process age verification data in several countries (Didit Privacy Policy).
Information is sent over encrypted connections (HTTPS/TLS) whenever you use the Service. If you don't want your information transferred abroad, you can choose not to sign up or delete your account, in which case you won't be able to use the Service.
FaceHub is only for people 18 and older (19 and older in South Korea). We don't knowingly collect information from minors. If we find that a member is a minor, the account is permanently banned. See our Child Safety Standards.
EltaCrew · Email [email protected]
We announce changes to this policy in the app and on this page at least 7 days before they take effect (30 days for changes that are less favorable to you).