Welcome to NOXE VOICE — a social voice-chat app that brings users together in voice rooms, games and private conversations, in Arabic and English. This policy explains how we collect, use, and protect your data. By using the app, you agree to the following.

1. Data We Collect

(a) Account basics

• Phone number — for OTP verification via Firebase Authentication. Stored in a private document only the server can read.
• Email — only if you sign in with Google. Used solely for owner-identity and account-related communication.
• Display name + profile photo — your choice. Visible to other users in rooms and Discover.
• Gender + date of birth — required for the Discover age-match feature (18+). Stored privately, only the server can read.
• City, interests, bio — optional. Appears in your profile.

(b) Location

• We ask for location permission to surface nearby users in Discover. If you decline, we fall back to your typed city.
• Coordinates (lat/lng) live in your users_private document — only you and admin can read.
• Distance shown to other users is computed server-side and never reveals your exact spot.

(c) Usage and content

• Text messages in rooms and direct chats are stored in Firestore for the lifetime of your account. You can delete your own.
• Attached images live in Firebase Storage scoped to the chat — only the two participants can read.
• Gift log (sent/received) — to keep coin balances honest.
• Voice in rooms streams live via Agora — we do not record or persist any audio.
• Login history (timestamp, hashed IP, device type) — kept for 90 days to detect multi-account abuse.

(d) Security data

• IP addresses are SHA-256 hashed with a server-side secret salt before storage. Never reversible.
• Private-room passwords are SHA-256 hashed with a server-side salt. Never stored in plaintext.

2. How We Use Your Data

• Run the app: sign you in, render your profile, route you to rooms, push notifications.
• Discover matching: show nearby users with gender + age filters.
• Moderation: AI text classification catches abusive content in real time (we don't persist the analyzed text).
• Security: detect fake accounts and abuse via usage-pattern analysis.
• Improvement: anonymous aggregate stats — never tied to you individually.

3. Who We Share With

NOXE VOICE never sells your data. We share a minimum with vetted providers:

• Google Firebase (auth, database, storage, push) — Google-hosted. Privacy policy.
• Agora.io (voice transport) — streams WebRTC peer-to-peer with no recording. Privacy policy.
• Groq (AI moderation + assistant) — receives message text only, no PII. Privacy policy.
• YouTube (watch-together) — only public video metadata (title, thumbnail).

4. Your Rights

5. Children

The app is for users aged 18 and older. We do not allow registration below this age. Any underage account discovered is deleted immediately along with all its data.

6. Data Retention

• Active account: data kept while you use the app.
• Deleted account: everything wiped within 30 days, except security logs (90 days for fraud prevention).
• Account inactive 24 months: reminded, then auto-deleted.

7. Security

• All traffic over TLS 1.3.
• Firestore + Storage rules block unauthorized access (42 server-only write locks).
• Passwords and IPs are hashed before storage.
• Direct messages are two-party only — no third party can read.

8. Updates

We may revise this policy. The new version will replace this one and the "Last updated" date will change. Material changes will be announced in-app.

9. Contact