Privacy Policy

Who we are

We operate the Drdshe mobile app, web app, and the API at api.drdshe.com. Accounts created without an email are pseudonymous: you get a generated login ID. This is not untraceable anonymity.

What we collect

Account

• Display name, gender, login ID (email or generated ID), and password hash (Argon2).
• Age is self-attested as 18+ at sign-up; we don’t require a date of birth by default.
• Account status, online presence, last seen time, and language preference. If you turn Online on, you stay visible until you go Offline or after about 7 days without activity.
• Invite code, an optional link to the account that invited you, and your Boost expiry time.

Communications

• Chat content (text, images, voice notes) and the metadata needed to deliver conversations and power safety tools.
• Reports you submit and any message evidence attached to them.

Device and diagnostics

• Firebase Cloud Messaging push tokens and app language.
• Crash diagnostics via Firebase Crashlytics.
• Security logs, which may include IP address, user agent, and session identifiers.

What we don’t collect by default

• Government ID or biometric verification.
• Precise location / GPS.

How we use data

• Provide meet-and-chat, online discovery, messaging, and media delivery.
• Operate Boost and invites.
• Send push notifications about new messages.
• Review reports, enforce blocks, and suspend accounts that break the rules.
• Diagnose crashes and prevent abuse.

We do not sell personal data.

Push notification previews

Notifications use generic text (for example, “New message”) and don’t show the sender’s name or message text on your lock screen. Open the app to read the content.

Sharing

• Other users: display name, gender, 18+ label, and online signals; message content only with your chat partner.
• Inviters: may see a total count of successful invites.
• Service providers: Firebase and private media storage with short-lived signed URLs.
• Law and safety: we may disclose information when legally required or to address serious harm.

Retention

• Messages: removed after a short window (default 30 days). Chats are not a permanent archive.
• Account deletion: sign-in is blocked immediately, and the account is purged after a grace period (default 7 days) unless you cancel.
• Security logs may be kept longer to prevent abuse.

Your choices

• Block and report users in the app.
• Export a JSON copy of your data from Settings.
• Delete your account from Settings — see instructions.

Security

Traffic uses HTTPS. Passwords are hashed (Argon2). Media is stored privately and served via short-lived signed URLs. Message content is not end-to-end encrypted.

Children

The service is for adults only (18+). Underage use is forbidden, and reports of underage users can lead to immediate suspension and a permanent ban.

Changes

We may update this policy. Material changes will be reflected in the “Last updated” date on this page.