Our baseline is to collect little, use information only for the service you asked for, and explain it clearly.
1. What we collect
1.1 Account and device information
- Phone number or sign-in credentials for account creation, sign-in, re-verification, and security notices.
- Account profile details used to provide service features and protect account access.
- Device model, OS version, app version, approximate region inferred from the network, and last-active time for device lists and unusual-sign-in alerts.
1.2 What you write and post
Anonymous nickname, avatar, short bio, interest tags, bottles, replies, text, photos, voice, video, reports, appeals, tickets, screenshots, and any optional contact you provide.
1.3 Information from using the app
Casting and hauling records, in-bottle chat records, read state, notification preferences, coin balance, order numbers, spending, and refund records.
We do not collect precise location, request location permission, or offer a “people nearby” feature.
2. How we use it
- Run random hauling, bottle casting, and asynchronous in-bottle chat.
- Check text, images, audio, and video for safety, with borderline cases sent to human review.
- Spot unusual sign-ins and let you view or revoke device sessions.
- Meet account-safety and transaction-retention obligations.
- Notify you about hauled bottles, replies, review results, orders, and security alerts.
We do not sell your personal information or use it beyond these purposes.
3. Permissions
- Camera: only when you choose to take a photo or video for a bottle or reply.
- Photos: only when you pick or save media, preferring the system limited picker.
- Microphone: only while recording voice or video with sound; released when you stop.
- Notifications: for interaction, review, transaction, and account-security alerts.
Each permission is requested when you first trigger the matching action, with an explanation beforehand. Declining a permission does not stop core browsing.
4. Sharing and processors
Cloud storage and delivery providers store uploaded media; content-safety providers run safety checks; app stores handle payment and receipt validation for one-time coin packs. Private media is read through time-limited signed links, never public direct links. We never see your card details. Apart from what the law requires or an emergency to protect safety, we do not hand personal information to third parties.
5. Retention
- Profiles and content are kept while your account exists and removed from distribution when deleted.
- Bottles stop being distributed seven days after publishing.
- Reports, appeals, and transaction records are kept de-identified as long as compliance and audit require.
- Account deletion has a seven-day cooling-off period; legally required transaction and safety records remain de-identified.
6. Your rights
You can view and correct your profile, request a data export, turn off permissions or notifications, and delete your account entirely inside the app under Account & security → Delete my account.
7. Security
Traffic is encrypted with TLS. Private media is not publicly reachable and is read only through time-limited signed links. Tokens live in secure device storage, and signing out clears local tokens and sensitive cache.
8. Changes and contact
We announce updates in the app and publish a new version and effective date. Past versions remain available in the app.
Privacy contact: DolbyRolfson616@outlook.com