Privacy Policy

What we collect

• Account information: email address, authentication identifier, email verification status, and sign-in provider.
• Private profile information: full name, date of birth, country, language, time zone, optional support needs, communication preferences, comfort notes, guardian contact information for teen accounts, and accessibility settings.
• Community information: display name, age band, country, approved profile photos, introduction, interests, and selected communication preferences.
• Service activity: friend requests, text messages, safety reports, blocks, guardian approvals, video session duration, subscription status, and security or abuse-prevention events.

Why we use it

We use information only to authenticate accounts, provide friendship features, separate teen and adult community spaces, moderate profile photos, process subscriptions, enforce safety controls, prevent abuse, respond to reports, and let members export or delete their data.

Who processes it

Firebase processes authentication, database, file storage, hosting, and server functions. Google Cloud Vision reviews uploaded profile photos for adult, racy, and violent content. ZEGOCLOUD provides accepted-friend video rooms. Stripe processes paid video-minute subscriptions. These providers receive only the information needed to perform their service under their own privacy and security terms.

What we do not do

• We do not display ads.
• We do not sell personal information.
• We do not allow public direct messages or public video rooms.
• We do not publish full birth dates, full names, guardian details, email addresses, phone numbers, or exact locations.

Retention

• Text messages and inactive message threads are scheduled for deletion after 30 days.
• Pending video approvals, video usage sessions, payment webhook records, and temporary security logs are scheduled for deletion after 30 days unless needed for an active dispute or legal obligation.
• Profile-photo safety results and safety reports may be retained for up to 365 days to investigate abuse and protect members.
• Account and active profile information remains until the member deletes the account or it must be retained for security, billing, legal, or dispute purposes.

Your controls

Members can edit profile visibility, block other members, report concerns, download an account data export, cancel billing through the Stripe customer portal, and permanently delete their account from Settings. Account deletion also removes profile photos and cancels an active subscription; safety reports are anonymized so investigations remain intact.

Teen accounts

Autism and Friends is available to people age 13 and older. Teen and adult discovery spaces are separated. A teen account requires guardian consent before community access, and each teen video call requires a time-limited guardian approval. Guardian email addresses and approval codes are private.

Security and questions

We use verified authentication, least-privilege database and storage rules, server-authoritative friend and billing checks, rate limits, private media access, and safety audit records. No online service can promise absolute security. Use the in-app Safety Center to report a privacy or safety concern.