Privacy Policy - Stranzy

1. Introduction & 18+ Age Restriction

Stranzy ("we", "our", or "the App") is committed to protecting user privacy while maintaining a safe, respectful environment. Stranzy is strictly restricted to adults aged 18 and older. We do not knowingly collect personal data from anyone under the age of 18. An age verification gate is presented on first launch, and users who indicate they are under 18 are denied access.

2. Data We Collect and How We Use It

Camera & Microphone (Audio/Video Streams): Used exclusively in real-time during live 1:1 video calls via Peer-to-Peer (WebRTC) encryption. Audio and video streams are NEVER recorded, stored, or processed on our servers.
Authentication Identifiers: If you sign in via Google or Phone OTP, we store your Firebase UID and associated authentication data (phone number or email) for account management. Guest users receive an ephemeral anonymous identifier.
User Profile Data: Nickname, selected avatar, gender preference, and interests are stored locally on your device and transmitted in-memory to our signaling server for active matchmaking sessions only.
Abuse Reports & Moderation Data: When a user files an in-app report regarding inappropriate conduct, the report details (reporter ID, reported user ID, reason, timestamp) are transmitted to our moderation server for review and enforcement.
In-App Purchase Data: Coin purchases are processed through Google Play Billing. We do not directly collect or store payment information — all payment processing is handled by Google.

3. Peer-to-Peer Encryption & Data Retention

All video and voice traffic travels directly between connected peers using industry-standard WebRTC DTLS/SRTP encryption. Our signaling server acts only as a connection router and does not have access to video or audio streams. Signaling data (SDP offers, ICE candidates) is ephemeral and not stored after the call session ends.

4. Third-Party Services

Firebase (Google): Authentication, crash reporting. Firebase Privacy Policy
Google Play Billing: In-app purchases processing. Google Privacy Policy
Google AdMob: Advertising. AdMob may use advertising identifiers for personalized ads. AdMob Data Disclosure
WebRTC STUN/TURN: Network traversal for peer-to-peer connections.

5. Account and Data Deletion (User Rights)

Users have the right to delete all their data at any time. You can instantly and permanently purge your account, profile, coins, and reports by navigating to My Account > Delete Account & Purge Data in the application. Upon deletion, your Firebase authentication record, local preferences, and any server-side data associated with your account will be permanently removed.

If you have uninstalled the app or prefer web-based deletion, you can delete your account and all associated data directly through our self-service Automated Account & Data Deletion Portal, or by contacting our team at support@stranzy.com.

6. Data Security

We implement appropriate technical measures to protect your data, including encrypted WebSocket signaling connections, WebRTC end-to-end media encryption, and screenshot prevention (FLAG_SECURE) during video calls.