This policy explains what information Safpic ("Safpic", "we", "us") collects, why, and the choices you have. We've tried to write it plainly. If anything is unclear, email support@safpic.com.
Account information. To create an account you provide a phone number or an email address (including via Google sign-in), and you choose a username. You may optionally add a profile photo and a short bio.
Your content. Messages and protected photos you send are end-to-end encrypted — they are stored only in encrypted form that we cannot open. We hold this encrypted content, and basic delivery information (such as which conversation a message belongs to and when it was sent), so the service can work across your devices.
Device & usage data. To keep the app working and secure, we process technical data such as app version, a device notification token (to deliver notifications), and diagnostic/crash reports.
Approximate location. For your security, the "active sessions" screen shows the approximate city a sign-in came from. This is estimated from the network (IP) address — we do not collect precise GPS location.
Finding contacts (optional). If you choose to find friends from your contacts, matching is done using encrypted one-way hashes — your actual phone numbers are not uploaded or stored.
By design, we cannot read your end-to-end encrypted chats or your protected photos. If you turn on Backup & Recovery, your backup is protected by a passphrase that only you know — if you forget it, not even we can restore that content. This is a deliberate trade-off in favour of your privacy.
We use Google Firebase (Google Cloud) as our infrastructure provider to run authentication, storage, databases, notifications and crash reporting on our behalf. They process data under their own security and privacy commitments. We do not sell your personal data, and we do not share your private content with advertisers.
If someone reports a message or photo, we retain the report and any evidence they choose to attach for a limited period (currently up to 90 days) so we can review it, after which it is automatically deleted.
You can delete your account at any time from Settings. Deleting your account removes your profile, messages, stored media and related data from our systems. Some limited records may be retained where required for legal or security reasons.
Safpic is intended for adults and is not directed to anyone under 18. We do not knowingly collect information from children.
We use end-to-end encryption for chats and protected photos, encryption of data at rest on your device, and access controls on our servers. No system is perfectly secure, but protecting your content is the core of how Safpic is built.
We may update this policy as the app evolves. We'll revise the date at the top and, where changes are significant, let you know in the app.
Questions about privacy? Email support@safpic.com.