Security

End-to-End Encryption for Messages

All private and group chat messages are encrypted using industry-standard AES encryption. Only you and the recipients can read your messages.

HTTPS/TLS Encryption

All data transmitted between your device and our servers is encrypted using TLS 1.3 protocol, preventing interception or tampering.

Encrypted Storage

Your passwords are hashed using bcrypt with salt. Sensitive data is encrypted at rest in our databases.

Secure Cloud Infrastructure

We use Firebase (Google Cloud Platform) and ImageKit for data storage, both compliant with SOC 2, ISO 27001, and GDPR standards.

Access Controls

Strict role-based access controls ensure only authorized personnel can access backend systems. All access is logged and monitored.

Regular Backups

Automated daily backups with point-in-time recovery ensure your data is never lost due to system failures.

Data Retention

Messages older than 24 hours are automatically removed from active storage. Deleted content is permanently erased within 30 days.

You Control Your Data

Choose what's public, private, or anonymous. Control who can see your profile, posts, and online status.

No Data Selling

We never sell your personal information to third parties. Your data is not our business model.

Anonymous Posting

Anonymous posts use randomly generated usernames (without @ prefix) and avatars. Real users have @ prefix in their usernames and clickable profiles. Anonymous usernames are not clickable. While anonymous posts hide your identity publicly, we maintain internal logs for moderation and safety purposes.

Right to Deletion

Delete your account anytime. All associated data is permanently removed from our systems within 30 days.

Authentication & Authorization

Firebase Authentication with secure token-based sessions. Multi-factor authentication support coming soon.

Input Validation & Sanitization

All user inputs are validated and sanitized to prevent XSS, SQL injection, and other common attacks.

Rate Limiting & DDoS Protection

Cloudflare protection and rate limiting prevent abuse, spam, and denial-of-service attacks.

Security Headers

CSP, HSTS, X-Frame-Options, and other security headers protect against common web vulnerabilities.

Regular Security Audits

Continuous monitoring, vulnerability scanning, and code reviews to identify and fix security issues.

AI-Powered Moderation

Automated detection of harmful content, spam, and policy violations using machine learning.

Human Review Team

Reported content is reviewed by our moderation team within 24 hours. Serious violations are prioritized.

User Reporting Tools

Easy-to-use report and block features. We take all reports seriously and act quickly.

Zero Tolerance Policy

Harassment, hate speech, illegal content, and exploitation result in immediate account suspension and legal action if necessary.

GDPR Compliance

We comply with EU General Data Protection Regulation, giving you control over your personal data.

COPPA Compliance

We comply with Children's Online Privacy Protection Act. Users under 13 are not permitted.

Indian IT Act Compliance

We comply with Information Technology Act, 2000 and IT Rules, 2021 for intermediary liability and data protection.

Transparency Reports

We publish transparency reports on data requests, content removals, and security incidents (coming soon).