Last Updated: June 5, 2026

At Sphurja, we believe privacy is a fundamental human right. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our mobile application (the "App").

1. Data We Collect

We collect the minimum amount of information necessary to provide our service:

• Account Information: Your phone number is required to create an account and authenticate your device. You may optionally provide a display name and profile picture.
• Messages & Media: All messages, statuses, and albums are end-to-end encrypted. We route them through our servers, but we do not have the keys to decrypt them.
• Contacts: With your explicit permission, we securely hash phone numbers from your address book to determine which of your contacts are also using Sphurja. We do not store your plain-text address book.
• Device Information: We collect basic device information (such as OS version) strictly to optimize app performance and deliver push notifications securely.

2. How We Use Your Data

We use your data strictly to:

• Provide, operate, and maintain the App.
• Deliver end-to-end encrypted messages securely.
• Provide technical support and respond to inquiries.
• Prevent fraud, spam, and abuse.

3. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share limited, non-message data with trusted service providers (e.g., Cloudflare for hosting, Twilio for SMS verification) solely to operate our service. These providers are bound by strict confidentiality agreements.

4. Data Storage & Security

All communication content (messages, media, statuses) is end-to-end encrypted. It resides on your device and the recipient's device. Our servers only hold encrypted blobs temporarily until they are delivered. We implement industry-standard security measures to protect the limited metadata we do store.

5. Account Deletion & User Rights

You have the right to access, modify, or delete your personal data at any time.

How to delete your account:

1. Open the Sphurja App.
2. Navigate to Settings > Account.
3. Tap "Delete Account".
4. Confirm your phone number to permanently erase your profile, device associations, and pending encrypted messages from our servers.

6. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently received personal information from a user under the age of 13, we will delete such information from our records.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

8. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer at:

Email: support@feastybox.com