Privacy Policy

We collect data you provide and data generated by your activity on Spyrochat. This may include:

• Account details (name, username, profile info).
• Device/session data needed for security and fraud prevention.
• Wallet-related data (wallet balances, transaction records, verification status).
• Engagement signals used for rewards (e.g. status views, activity participation).

We use your data to:

• Provide core features (messaging, statuses, profiles, notifications).
• Operate and secure the wallet system (funding, earnings, withdrawals).
• Detect abuse, spam, fraud, and suspicious behavior.
• Calculate eligibility for tiers, monetization, and reward events.

Spyrochat is built to keep your conversations private and secure. Here is how we handle messages:

• No message surveillance: We do not scan, read, or analyze the content of your private messages. Your conversations remain private between you and your recipients.
• Encryption in transit: Messages are sent over encrypted connections (e.g. HTTPS/TLS) to help protect them while they travel between your device and our servers.
• End-to-end encryption (E2EE): All chats are end-to-end encrypted by default. There is no setting to turn it on or off, it is always active. Message content is encrypted on your device and can only be decrypted by you and the intended recipient, so Spyrochat cannot read your messages.
• Your encryption key: Your encryption key stays with you. If you lose it (for example, after clearing your device or signing in on a new device without restoring it), earlier messages that were encrypted with the old key will show as "unable to decrypt" and cannot be recovered by us. Your account then continues securely with a new encryption key for all messages going forward.
• Message storage: To deliver messages reliably across your devices, we store message content only in its already-encrypted form (the ciphertext produced on your device). We never hold your messages in readable form, and we cannot decrypt what is stored.
• User reporting only: We only review message content when explicitly reported by users. If you report a user or content, you may provide us with specific message content and context so we can investigate abuse and enforce our rules for that specific case.
• Metadata: Like most messaging services, we may process limited metadata (such as sender/recipient identifiers, timestamps, device/session signals, and delivery status) to operate the service, prevent fraud/spam, and improve reliability. This metadata does not include message content.

If you have questions about whether a specific chat is end-to-end encrypted, contact support at support@spyrochat.org.

Spyrochat offers three visibility levels for your posts: Public, Friends, and Private.

• Use as your personal journal: Many users treat private posts as a digital diary or life journal. Document your thoughts, memories, daily reflections, and personal moments knowing they're for your eyes only.
• Complete privacy: Private posts never leave your private space. They're excluded from all public and friends feeds, trending algorithms, and discovery features.
• Your data, your control: You can change visibility at any time. Make a private post public if you later want to share it, or make a public post private to keep it personal.
• Friends vs. Public: Posts set to "Friends" are visible only to mutual followers (people you follow who also follow you back). Posts set to "Public" are visible to all Spyrochat users.

Think of Spyrochat as both a social platform and a personal space, share what you want, keep what matters to you private.

Payments are processed securely via our trusted third-party payment providers. Spyrochat does not store raw card details. We may store secured tokens for future transactions and verification.

To securely link your card for automatic funding and withdrawals, a small verification fee will be charged. This amount is not a service fee; it will be instantly credited to your Spyrochat wallet balance and remains available to you in-app.

To prevent fraud and money laundering and to meet legal compliance obligations, some money features (including sending money and withdrawals) require successful Tier 2 KYC verification.

Verification badges are trust and compliance markers. They do not mean endorsement of user behavior outside platform rules.

We monitor activity to keep the platform safe. Accounts flagged for abuse or suspicious behavior may be restricted or suspended.

Sponsored content that violates community guidelines (e.g. scams, nudity, hate speech, spam, or offensive promotions) may be removed.

Your safety comes first when a squad or profile links out to another website. We put several protections around external links:

• Domain-only links: A website link can only be a plain domain (for example, example.com), never a full URL with a page path or redirect. This prevents links that disguise where they really lead.
• Secure by default: We always open external website links over an encrypted HTTPS connection, and in a way that prevents the destination site from accessing or tampering with the Spyrochat tab you came from.
• Live-domain check: Before a website is saved, we confirm the domain genuinely exists on the internet. We do not fetch or store the contents of that website, we only check that it resolves.
• Unverified-domain warning: If a linked domain has not completed our ownership verification, we show you a clear caution before opening it, so you can decide whether to continue.

Even with these safeguards, external websites are controlled by their owners, not by Spyrochat. Please use your own judgment before sharing personal information with any site you reach through a link.

Spyrochat may use Cloudflare Turnstile, including its invisible mode, to distinguish legitimate visitors from automated bots and protect our website, accounts, forms, and services from spam, fraud, abuse, and other malicious activity. Invisible Turnstile checks can run silently in the background without displaying a visual challenge or notice on the page.

When Turnstile is enabled on a page, Cloudflare may process technical and interaction information needed to provide the security check. This may include your IP address, browser and device characteristics, operating system, referring page, request and timing information, and signals about how your browser interacts with the page. Spyrochat receives the result of the verification so we can decide whether to accept or reject the relevant request.

Turnstile information is used for security and bot detection, not by Spyrochat for advertising. Cloudflare processes information associated with Turnstile as described in the Cloudflare Turnstile Privacy Addendum. Cloudflare's handling of personal information is also subject to its own applicable privacy terms and policies.

Spyrochat is intended for people aged 13 and over. We do not knowingly collect data from anyone under 13, and accounts found to belong to someone under 13 may be removed.

Identity verification (KYC) for tier upgrades applies the age limits set by the laws of your country, which may be higher than 13. Where your country requires a higher minimum age for verification, payments, or wallet features, that higher limit applies before those features are available to you.

For privacy questions or support, contact us at support@spyrochat.org.