Privacy Policy

Last Updated: November 15, 2025

            Ghost App is designed with your privacy in mind. We are committed to protecting your personal information and providing a secure, anonymous messaging experience.
        

1. Information We Collect

1.1 Information You Provide

Mobile Number: Used solely for authentication and account creation. This is the only personal identifier we collect.
Messages: Text messages you send within groups are temporarily stored and automatically deleted after 24 hours.
Anonymous Aliases: Randomly generated nicknames used within groups. These are not linked to your real identity.

1.2 Automatically Collected Information

Device Information: FCM (Firebase Cloud Messaging) tokens for push notifications.
Usage Data: Group participation, message timestamps, and unread message counts.
Connection Data: IP addresses and connection logs for security purposes.

1.3 Information We DO NOT Collect

Real names or personal identities
Email addresses
Location data
Contact lists
Photos or media files (currently not supported)
Browsing history

2. How We Use Your Information

We use the collected information for the following purposes:

Authentication: Verify your identity using your mobile number.
Service Delivery: Enable real-time messaging and group participation.
Notifications: Send push notifications for new messages.
Security: Prevent abuse, spam, and unauthorized access.
Service Improvement: Analyze usage patterns to improve app performance.

3. Data Storage and Retention

3.1 Temporary Storage

Messages: Automatically deleted 24 hours after group creation.
Groups: Expire and are permanently deleted 24 hours after creation.

3.2 Persistent Storage

Account Information: Mobile number and account status remain active until you delete your account.
FCM Tokens: Stored until you log out or uninstall the app.

3.3 Data Location

All data is stored securely on MongoDB Atlas cloud servers with encryption at rest and in transit.

4. Data Sharing and Disclosure

4.1 We DO NOT Sell Your Data

Ghost App does not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Third-Party Services

We use the following trusted third-party services:

Firebase Cloud Messaging (Google): For push notifications. See Google Privacy Policy.
MongoDB Atlas: For secure data storage. See MongoDB Privacy Policy.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights and safety.

5. Your Privacy Rights

You have the following rights regarding your data:

Access: Request a copy of your personal data.
Deletion: Request deletion of your account and all associated data.
Correction: Update your mobile number by contacting support.
Opt-Out: Disable push notifications in your device settings.

6. Security Measures

We implement industry-standard security measures:

Encrypted data transmission (HTTPS/TLS)
Secure authentication tokens (JWT)
Encrypted data storage
Regular security audits
Limited data retention (24-hour message deletion)

7. Children's Privacy

Ghost App is not intended for users under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If we discover that a child has provided us with personal information, we will delete it immediately.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy in the app and updating the "Last Updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Data Protection Rights (GDPR & CCPA)

If you are a resident of the European Economic Area (EEA) or California, you have additional rights:

Right to Access: Request access to your personal data.
Right to Rectification: Request correction of inaccurate data.
Right to Erasure: Request deletion of your data.
Right to Restrict Processing: Request limitation of data processing.
Right to Data Portability: Receive your data in a structured format.
Right to Object: Object to processing of your data.
Right to Withdraw Consent: Withdraw consent at any time.

11. Cookies and Tracking

Ghost App does not use cookies or tracking technologies for advertising purposes. We only use essential technical cookies for authentication and session management.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us:

Email: support@ghostapp.ai
Response Time: We aim to respond within 7 business days.

13. Acknowledgment

By using Ghost App, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.