FrndTalk
FrndTalk
This Privacy Policy explains how FrndTalk (“FrndTalk,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the FrndTalk mobile application (the “App”), the website at frndtalk.com (the “Website”), and related services (together, the “Service”).
By creating an account or otherwise using the Service, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Service.
FrndTalk is a short-video and video-chat social platform where you can create and watch short videos, follow other users, message and video call one another — including sending or receiving virtual gifts during a call — and purchase virtual coins to unlock certain features. This Policy covers the personal data we process across the App, the Website, and our backend services in order to provide those features.
We only describe data practices that correspond to features that actually exist in the Service. We do not collect precise device location (GPS), we do not use SMS/email one-time-passcode (OTP) verification — account sign-in is handled through Google Sign-In, Sign in with Apple, or email and password — and the Service does not currently offer live streaming or voice messages.
a) Account & sign-up data. To create a FrndTalk account you may sign up with (i) Google Sign-In, (ii) Sign in with Apple, or (iii) an email address and password. If you use Google or Apple, we receive your name, email address, and account identifier from that provider (subject to what you choose to share). If you sign up with email and password, your password is created, hashed, and stored by Firebase Authentication — FrndTalk's servers never receive or store your raw password. A “forgot password” flow lets you reset it via Firebase.
b) Profile information. You can add or edit: username, display name, bio, profile picture, gender, country, preferred language, and interests. Anything you add to your public profile is visible to other users of the Service.
c) Social graph. Information about who you follow, who follows you, and your interactions with other users (likes, comments, shares) is stored to power the follow/followers, search, and feed features.
d) Content you create. Short videos, captions, hashtags, mentions, comments, sounds you attach to videos, chat messages, and virtual gifts you send or receive.
e) Customer support. Anything you submit when contacting support — messages, screenshots, and account details relevant to your inquiry.
f) Reports. If you report a user or a piece of content, we process the report details, the reported account/content, and any evidence you attach.
We do not collect precise GPS location. The “country” field on your profile is information you choose to enter yourself, not location data derived from your device.
We request camera access so you can: record or upload short videos, take or update your profile picture, make and receive one-to-one video calls, and complete selfie-based identity/age verification (see Section 15). We only access the camera when you actively use one of these features; we do not access your camera in the background.
We request microphone access so you can record audio for short videos and speak during one-to-one video calls. Audio is captured only while you are actively using one of these features.
We request access to your photo/video library so you can upload existing photos and videos — including as a profile picture, in short-video posts, or as images shared in chat.
FrndTalk offers an optional “Find Friends” feature that helps you find people you already know who are on FrndTalk. If you choose to use it, you can grant read-only access to your device's contacts for a one-time sync: your contact list (names and phone numbers/emails) is sent to our servers, matched against existing FrndTalk accounts, and the match results are returned to you. We do not continuously monitor or resync your contacts in the background, and this feature is entirely optional — the Service works fully without granting contacts access. Contact data used for matching is retained only as long as necessary to provide the matching results and is not shared with other users or third parties.
We request permission to send push notifications (via Firebase Cloud Messaging) for: new followers, likes and comments on your videos, new chat messages, incoming or missed calls, and other account-related alerts. You can disable push notifications at any time in your device settings.
One-to-one video calls are powered by Agora RTC. When you make or receive a call, Agora's infrastructure relays the encrypted real-time audio/video stream between participants — FrndTalk does not record or store the audio/video content of your calls. We do store call metadata: caller and recipient, call start/end time, duration, call status (missed, answered, declined), video quality preset used, and the coin charge associated with the call (including any refund issued for a failed or dropped call). To help protect your privacy during sensitive activity, the App also blocks screenshots and screen recording while a call, chat, or wallet screen is open.
You can send and receive virtual gifts to and from another user during a one-to-one video call, using coins from your wallet. We store gift transactions — sender, recipient, gift type, coin cost, and timestamp — together with a gift history tied to your account, which we use to operate the virtual economy and resolve support disputes.
One-to-one chat messages (text and images), read receipts, online/presence status, and conversation settings (such as muting a conversation) are stored on our servers to deliver the messaging feature. Message content may be visible to the sender and recipient(s) of a conversation and, where required, to our moderation team investigating a report of abuse.
Videos, photos, profile pictures, and chat media you upload are stored in our cloud storage (Amazon S3) and delivered via a content delivery network (Amazon CloudFront). Deleting a video, photo, or message from within the App removes it from public view; residual copies may persist briefly in backups or caches before being purged.
We maintain a coin wallet associated with your account, including your coin balance, purchase history, spending history (e.g., call charges, gifts sent), coin-plan/coin-rate details, and any withdrawal/redemption requests you submit to cash out coins you have earned. This data is used to operate the virtual economy, prevent fraud, and resolve support disputes. Wallet-related screens are also protected against screenshots and screen recording.
Coins may be purchased through Google Play Billing (Android) or Apple In-App Purchase (iOS). Your payment card details are collected and processed entirely by Google or Apple — FrndTalk never receives or stores your full card number. We do receive and store limited purchase data from the App Store/Play Store necessary to credit your account and verify the purchase: the product purchased, price, purchase/transaction ID, and purchase timestamp.
FrndTalk is intended for users aged 18 and older. We may ask you to complete an in-app verification by capturing a live selfie through your device camera. This image is used solely to confirm your identity and eligibility to use the Service and is reviewed as part of our verification process; verification submissions may be reviewed by our moderation/admin team. We retain verification data only for as long as your account remains active and for the purposes described in this section.
We use Firebase Analytics to understand feature usage and app performance in aggregate, and Firebase Crashlytics to detect and diagnose app crashes. Both are provided by Google; see Google's Privacy Policy for how Google itself processes this data.
We show ads through Google Mobile Ads (AdMob), including banner, interstitial, and rewarded ads (e.g., watching a rewarded ad may grant in-app benefits). Google Mobile Ads may use device advertising identifiers (such as your Android Advertising ID or Apple's IDFA, where permitted) to serve and measure ads. You can reset or limit these identifiers, and opt out of personalized ads, in your device's advertising settings. See Google's advertising privacy policy for more detail.
On the FrndTalk Website, we may use cookies and similar technologies (such as those associated with Firebase and Google Mobile Ads) to keep you signed in, remember preferences, and measure site usage and ad performance. You can control cookies through your browser settings; disabling them may affect some Website functionality.
We use the information described above to:
We do not sell your personal data. We share information only as follows:
We retain your account, profile, content, chat, call, wallet, and transaction data for as long as your account is active and as needed to provide the Service. Certain records (e.g., transaction history, moderation history, and records required for legal/tax/accounting purposes) may be retained for a longer period even after account deletion, as required by law or to resolve disputes and enforce our agreements.
We apply technical and organizational safeguards to protect your data, including: JWT-based authenticated sessions, an API-key handshake between the App and backend, encrypted transport (HTTPS/TLS), rate limiting and request-security middleware on our API (including dedicated protections around wallet endpoints), device-level tracking to detect and block abusive or banned devices, and suspicious-activity logging. No system is perfectly secure, and we cannot guarantee absolute security of information transmitted to or stored by the Service.
Depending on your jurisdiction, you may have the right to: access a copy of your personal data; correct inaccurate data; request deletion of your data; object to or restrict certain processing; and receive your data in a portable format. To exercise any of these rights, contact us at the email in Section 31. We may need to verify your identity before completing certain requests.
You can request deletion of your account and associated personal data by contacting support or using the in-app account-deletion option (where available). Upon a verified deletion request, we will delete or anonymize your profile, content, chat history, and other associated data, except for information we are required to retain for legal, tax, security, or dispute-resolution purposes (e.g., completed transaction and payout records). Deleting your account does not retrieve coins, gifts, or purchases already made — see the Terms & Conditions for details.
FrndTalk is intended for users aged 18 and older. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected personal data from a person under 18, we will delete it. If you believe a minor has created an account or provided us data, contact us immediately at the email in Section 31.
FrndTalk is available to users in multiple countries. Your data may be processed and stored on servers located outside your country of residence, including in countries whose data protection laws differ from those of your home country. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers of personal data.
We use the following third-party services to operate FrndTalk. Each processes data on our behalf, subject to its own privacy terms:
| Service | Purpose |
|---|---|
| Firebase Authentication (Google) | Account sign-in via Google, Apple, and email/password |
| Firebase Cloud Messaging (Google) | Push notifications |
| Firebase Crashlytics (Google) | Crash reporting |
| Firebase Analytics (Google) | App usage analytics |
| Agora RTC | Real-time audio/video for one-to-one video calls |
| Google Play Billing | In-app coin purchases on Android |
| Apple In-App Purchase / App Store | In-app coin purchases on iOS |
| Google Mobile Ads (AdMob) | Banner, interstitial, and rewarded ads |
| Amazon Web Services (S3 & CloudFront) | Storage and delivery of videos, photos, and other media |
We do not use any third-party service beyond those listed above to process your personal data.
If you are located in the European Economic Area or the United Kingdom, we process your personal data on one or more of the following legal bases: performance of our contract with you (providing the Service), your consent (e.g., for optional permissions like Contacts, or push notifications), our legitimate interests (e.g., security, fraud prevention, service improvement), and compliance with legal obligations. You have the rights described in Section 23, and you may lodge a complaint with your local data protection supervisory authority.
If you are a California resident, you have the right to know what personal information we collect, to request deletion of your personal information, to correct inaccurate personal information, and to non-discrimination for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising in the manner regulated by the CCPA/CPRA beyond the advertising described in Section 17. To exercise your rights, contact us using the details in Section 31.
We may update this Privacy Policy from time to time to reflect changes to the Service, legal requirements, or our data practices. If we make material changes, we will notify you through the App, by posting an updated version on the Website, or by email. The “Effective date” at the top of this Policy reflects the most recent update.
If you have questions about this Privacy Policy or how we handle your data, contact us at: