Privacy Policy

Last Updated: September 11, 2026

Flux Chat ("we", "us", or "our") is dedicated to protecting your privacy and personal data. This Privacy Policy describes how we handle user data across the Flux mobile and web applications.

1. Information We Collect

We believe in minimal data collection. We only process data necessary for the app to function:

Account Information: Your chosen username and email address to authenticate your session. We do not require or collect your phone number.
Messages & Media: Messages and media sent between users. End-to-end encrypted conversations are decrypted only on the recipients' devices.
Device & Network Tokens: Firebase Cloud Messaging (FCM) tokens to deliver incoming message and call alerts when your app is in the background.

2. Device Permissions

Flux requests the following permissions only when user-initiated:

Microphone (RECORD_AUDIO): Used exclusively when recording voice notes or initiating/receiving audio and video calls.
Camera (CAMERA): Used exclusively when capturing profile photos, sending photo attachments, or during video calls.
Notifications (POST_NOTIFICATIONS): Used to notify you of incoming messages and voice/video calls.

3. Data Retention & Media Pruning

To conserve storage and respect user privacy, media files uploaded to the server (photos, voice notes, attachments) are automatically purged after 45 days. Ephemeral status stories are purged after 24 hours.

4. Third-Party Services

We do not sell, rent, or monetize your data. We use the following infrastructure providers strictly for technical delivery:

Google Firebase: For real-time push notifications.
Google STUN: For WebRTC peer-to-peer network discovery.

5. Your Rights & Data Deletion

You have the right to request deletion of your account and associated chat history at any time directly through the app settings or by contacting the system administrator.

6. Contact Us

If you have any questions regarding this Privacy Policy, you can reach us at support@flux-chat.duckdns.org.