Privacy Policy

1. Data you give us

• Account details: your email address, phone number and password. If you sign in with Google or Apple, we receive your name and email address from them. Apple may give us a private relay address instead of your email.
• Profile: your first and last name, username, birth date and gender. Your birth date is not shown to other people. We use gender to set up your avatar.
• Avatar: the look you choose (body, skin tone, hair, face and outfit) and images of your avatar that the app creates.
• Messages and content: text messages, voice messages, animations, reactions, game invites, group names and group photos you choose from your gallery.
• Contacts (optional): if you allow access and agree in the app, the phone numbers in your address book are sent to our server over an encrypted connection. Names and other contact details are not uploaded. Our server hashes each number on arrival and uses it only to find which of your contacts already use Eyyo. We don't store the numbers themselves: we keep only a record of which Eyyo accounts you matched with, and delete it when you delete your account. Nobody gets a request or an invite unless you pick them. You can withdraw your consent at any time by turning off Contact matching in Settings → Privacy: we then stop uploading numbers and delete your matches. You can also turn off contact access in your phone settings.
• Reports: the reason and details you give when you report a person or a message.
• Support requests: what you send us by email.

2. Data we collect when you use Eyyo

• Social activity: your friends, friend requests, blocked users and recent searches.
• Activity and presence: when you are online or were last seen, typing indicators and read receipts.
• Games: your scores, points, rankings, head-to-head stats, trophies and badges.
• Device information: a random ID the app creates for your installation, your device model, operating system and version, app version and language.
• Notification token: if you allow notifications, a token from Apple or Google that lets us send them to your device, and the notification settings you choose.
• Crash and diagnostic data: if the app crashes or something goes wrong, it sends an error report to Sentry. A report contains what went wrong and where in the app, the screens you opened and the buttons you tapped just before, the addresses of the app's requests to our servers (with search text removed), your device model, operating system and app version, and how fast parts of the app load. Reports include your Eyyo user ID so we can look into problems you run into. They are meant for technical details, not your content: we don't add your messages to them.
• App updates: when the app checks for updates, it sends the random installation ID, your device platform and the app version to Expo, which delivers the update.
• Website analytics: this website uses Vercel Web Analytics and Speed Insights. They measure visits and page performance without cookies.

We do not collect your location or advertising ID, and the app does not use your camera. Your microphone is used only while you record a voice message.

3. How we use your data

• To create and secure your account, including verification codes and sign-in
• To deliver your messages and run chats, games, rankings and avatars
• To help you find and add friends
• To send notifications you have turned on
• To keep Eyyo safe: review reports, stop spam and abuse, and enforce our Terms
• To find and fix crashes and errors, answer support requests and improve the app
• To meet our legal obligations

We do not sell your personal data, and we do not show ads. Depending on where you live, we rely on these legal grounds: performing our contract with you, our legitimate interests (keeping Eyyo safe and working), your consent (for example contacts and notifications) and legal obligations.

4. Who can see your data

• Other users can see your name, username, avatar and game results. Your friends can also see when you are online. People in a chat can see the messages sent there.
• Service providers process data on our behalf: cloud hosting and storage (including Cloudflare), Google Firebase Cloud Messaging and Apple Push Notification service for notifications, Google and Apple for sign-in, Twilio for SMS verification codes, Resend for email verification codes, Sentry for crash and error reports (stored in the EU), Expo for app updates, and Vercel for website analytics. They may only use the data to provide their service to us. All third-party service providers we share data with are required to provide the same or equal protection of user data as stated in this Privacy Policy.
• Authorities may receive data when the law requires it, or when it is needed to protect someone's safety.
• A new owner may receive data if Eyyo is merged or sold. This policy would continue to apply to it.

5. Security and storage

Data is encrypted in transit (HTTPS/TLS) and stored on our servers so your chats work on any device. Messages are not end-to-end encrypted. Our servers may be located outside your country. When we transfer data across borders, we use the safeguards the law requires.

6. How long we keep data

We keep your data while your account is open. If you delete a chat, it is removed from your list. If you delete your account, we delete your data as described on our account deletion page. Some records, such as moderation reports and records the law requires, are kept for a limited time. Crash and error reports are deleted automatically after 90 days at the latest.

7. Your choices and rights

• Change your profile and avatar, and turn notifications on or off, in the app
• Block or report anyone at any time
• Turn off Contact matching in Settings → Privacy, which deletes your contact matches
• Turn off contacts or microphone access in your phone settings
• Delete your account in Settings, or by emailing us

Depending on where you live (for example under the GDPR in the EU/UK, the Swiss Federal Act on Data Protection (FADP) in Switzerland or the KVKK in Türkiye), you may have the right to access, correct, delete or export your data, and to object to or restrict how we use it. You can withdraw your consent at any time. To use these rights, email info@eyyo.app. You can also complain to your local data protection authority.

8. Children

You must be at least 13 years old to use Eyyo. If the law where you live sets a higher minimum age, or requires parental consent at your age, you need permission from a parent or guardian. If you think a child under 13 has given us data, contact us and we will delete it.

9. Changes

If we change this policy, we will update the date at the top. If the changes are important, we will tell you in the app.

10. Contact

Gamestar Productions AG, Rietlistrasse 5, 9403 Goldach, Switzerland — info@eyyo.app