Privacy Policy

1. Information We Collect

Identity — anonymous by design

No sign-up, no phone number, no email required. We do not use Sign in with Apple/Google or any social login.

• Username & avatar: chosen by you (or auto-assigned), stored on your device and in our database, and shown to other users. Changeable anytime from your profile.
• Device fingerprint: a one-way cryptographic hash derived from your device, used only to keep your identity consistent across sessions and to enforce moderation. It cannot be reversed to identify your device.

Content you create

• Voice stories ("embers"): if you record and submit one, the audio is uploaded to our audio host (Cloudinary) with a caption, username, and like count stored in our database. Submissions are reviewed before appearing to others.
• Live voice chat audio: real-time voice in group rooms and 1:1 sessions is transmitted through our voice provider (Agora) and is not recorded or stored by us.
• Text you send: in-room chat, anonymous questions, messages to a mutual connection (Water tab), room-suggestion submissions, and listener applications (including an optional LinkedIn URL) are stored so the relevant feature can function.
• Connections: if you and another user mutually agree to stay in touch, a record (usernames/avatars, which room you met in) is stored so it can appear in your Water tab.
• Reports & moderation records: reports and moderator actions (warning, mute, kick, ban) are tied to the reported device's fingerprint — not your name or contact details.

Automatically collected

• Device information: device model and OS version, via Firebase.
• Push notification token: tied to your device fingerprint, so we can notify you when someone joins a room you're in. Disable anytime in device settings.
• Advertising SDK: Google AdMob is bundled for future ad support — no ads are shown at this time. If that changes, this policy is updated first and any required consent (e.g. App Tracking Transparency) will be requested.

2. How We Use Your Information

• Provide the core features — matching you into rooms, enabling voice and text communication, remembering your identity between sessions.
• Keep the platform safe — content filtering, human review of reported content, and enforcement tied to device fingerprints.
• Operate optional features you choose to use — the Water tab's mutual connections/messaging, and the Air tab's listener booking/scheduling.
• Respond to support requests and account/data deletion requests you send us directly.

We do not use your data for behavioral advertising, and we do not sell your personal information.

3. Self-Harm & Crisis Content

The Vent Room is peer support, not a crisis, therapy, or emergency service. Messages containing self-harm or suicide-related language are blocked from being sent to other users; instead the app shows crisis-resource information, including a tap-to-call link to local emergency services.

4. Third-Party Services

We share the minimum data necessary with the following providers to operate the app:

We do not use any other analytics or tracking SDKs.

5. Data Storage & Retention

• Live voice audio: never stored — transmitted in real time only.
• Voice stories, chat, connection messages, and other submitted content: retained until you delete it (where the app offers that) or until you request deletion.
• Moderation & report records: retained to maintain platform safety and support appeals; not kept longer than necessary.
• Device fingerprint: retained for as long as you use the app, to keep your identity/moderation history consistent.

6. Your Rights

To exercise any of these, email us (see Contact) with your request type. Because the app is anonymous, we may ask you to confirm details only you would know (e.g. a username you've used, approximate dates) to locate the right records, since we can't verify identity via login credentials. We aim to respond within 30 days.

7. Children's Privacy

The Vent Room is intended for users 18 years of age and older, in line with our Terms of Use. We do not knowingly allow use by, or collect information from, anyone under 18. If you believe a minor is using the app, please contact us so we can investigate and take appropriate action.

8. Data Security

We use industry-standard measures to protect your information, including encryption of data in transit (HTTPS/TLS) and access controls on our backend (Firestore security rules restrict who can read/write which data). No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. International Users & Governing Law

This Privacy Policy, and our handling of your data, is governed by the laws of India, consistent with our Terms of Use. Our infrastructure providers (Firebase, Agora, Cloudinary) may process and store data outside India as part of their global service delivery.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and where appropriate, an in-app notice.

10. Contact & Other Disclosures

For privacy questions, data access/deletion requests, or to report a safety concern:

Disclosure to law enforcement

We may disclose information to law enforcement if required by law or in response to a valid legal request (e.g. subpoena or court order).

No sale of data

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.