Privacy Policy

Last updated: 19 October 2026

This policy explains what Blab collects, why, and what you can do about it. Blab is a chat and social app: you sign in with Google, create a profile, and talk to people through one-to-one chats, group chats, and table chats.

1. Who we are

Blab is operated by the Blab team. For any privacy request, contact y2nd1w@gmail.com.

2. What we collect

• Sign-in data. When you sign in with Google we receive your Google account identifier, name, email address, and profile picture. We use it to create and secure your account; we do not receive your Google password.
• Profile you create. Display name, age, gender, city and country, bio, interests, profile prompts and answers, photos (up to five), and whether your profile is selfie-verified.
• Selfie verification (optional). If you ask to be verified you send a selfie. A face check runs on your device (it only measures whether exactly one face is present and large enough); the app does not create or store a face template or biometric identifier. The selfie itself is stored in a private storage bucket, shown to a human reviewer through a temporary link (15 minutes), and deleted after the review decision.
• Approximate location. If you allow location access we read your device position, then immediately round it to about 10 km before it is stored or shown to anyone. Your precise coordinates are never stored. You can also pick a city manually.
• Messages and content. One-to-one chats, group chats, and table chats: text, photos, voice notes, GIFs, stickers, emoji reactions, and — for Blab Plus subscribers — read receipts. The "typing…" indicator is sent live and is not stored.
• Safety data. Blocks, reports (the reason and any details you write), and moderation decisions such as account suspensions.
• Coins and purchases. Coin balance and purchase/subscription status. Payments are processed by Google Play; subscriptions are managed through our payments provider, which receives a pseudonymous app user identifier — never your card details.
• Push notifications. A Firebase Cloud Messaging device token, so we can notify you about new messages. The token is removed when you sign out or delete your account.
• Presence. The time you last opened the app, used for the "online" dot.

3. Why we use it

• To create your account, show your profile, and let people find and chat with you (the core of the Service).
• To deliver messages and notifications, and to keep chats working across devices.
• To keep the community safe: blocks, reports, moderation, spam prevention, and enforcing our Terms of Service.
• To run Blab Plus, coins, and purchases.
• To fix problems and improve the app (for example, error diagnostics without the content of your chats).

4. What other users can see

Your profile (name, age, city/country, bio, interests, prompts, photos, verification badge), your approximate area on the map (rounded to about 10 km), whether you are online, and the messages you send to them. People you have not matched with cannot read your one-to-one chats.

5. Who we share it with

We do not sell your personal data. We use service providers that process data on our behalf:

• Supabase — database, file storage, and authentication (data is hosted in the ap-southeast-2 region, Sydney, Australia).
• Google — Sign-In, Google Play billing, and Firebase Cloud Messaging for push notifications.
• RevenueCat — subscription and purchase management.
• Map tile providers (OpenStreetMap / CARTO) — the map requests tiles from them; they receive standard request data such as your IP address.

We may also disclose data if the law requires it, or to protect the rights and safety of our users.

6. Storage and security

Data is transmitted over encrypted connections (TLS). Database access is restricted per user with row-level security, and selfie verification photos live in a private bucket that is only reachable through short-lived links.

Photos you upload (profile photos and photos sent in chats) are stored on our storage provider and can be opened by anyone who has the exact link to the file. Treat them as shareable: do not send anything you would not want copied.

7. How long we keep it

• Profile and messages: until you delete them (you can delete individual messages and full chat threads in the app) or delete your account.
• Disappearing messages: removed automatically when their timer ends.
• Selfie verification photos: deleted after the review decision.
• Reports and ban records: kept as long as needed to keep the community safe. A ban record contains the account identifier and the reason, not your chats.
• When you delete your account, we delete your profile, photos, chats, and notification tokens. We keep a deletion audit entry that contains no personal content.

8. Your choices and rights

• Access and correction: your profile is editable in the app.
• Deletion: Profile → Danger zone → Delete account (inside the app), or follow yan-chatmatch.web.app/delete-account.
• Location: you can refuse or turn off location permission; the app still works with a city you choose.
• Notifications: you can turn push notifications off in the app or in Android settings.
• Objection / other requests: email y2nd1w@gmail.com. Depending on where you live you may also have the right to complain to your data protection authority.

9. Children

Blab is for adults. You must be at least 18 years old to use it, and we do not knowingly collect data from children. If you believe a minor is using Blab, report the account in the app or email us and we will remove it.

10. Changes

If this policy changes in a meaningful way we will update this page and change the date above. Continuing to use Blab after an update means you accept the new policy.

11. Contact

Privacy questions or requests: y2nd1w@gmail.com.