Privacy policy

Last updated: 2026-07-27

Read this first. This app does not use end to end encryption. The messages, photos and files you send are stored unencrypted on the server and can be viewed by platform administrators. Do not use this app for anything you need to keep private.

Data controller: Buinsoft Technology s.r.o., Prague, Czechia
Contact: info@prahapp.cz

1. Data we collect

Account details. Username, display name and a hash of your password. We do not store your password in plain text. We do not ask for an email address or a phone number.

Message content. The text, photos and files you send, plus who talked to whom and when.

Usage records. Technical records such as when your account was created and when you last read a conversation.

Notification token. If you allow notifications, a push identifier for your device. It is used only to send you notifications.

Reports. If you report someone, we store the report, its reason and a copy of the reported message as it was at that moment. That copy is kept so the report can still be reviewed if the message is later deleted.

We do not collect location, your contacts, your search history or advertising identifiers. No data is processed for tracking.

2. Why we process it

To deliver your messages and keep your history
To authenticate your account
To send notifications
To fight abuse, harassment and spam
To answer a lawful request if we receive one

3. Who can access it

You and the people you talk to. The app is built so that you can only see conversations you are a member of. That restriction is enforced at the database level.

Platform administrators. Administrators can view all conversations and messages. They can suspend accounts, remove messages and delete accounts. Every administrator action is written to an audit log.

Our infrastructure providers. Data is held on servers operated by Supabase Inc. Notifications are delivered through Expo (650 Industries, Inc.). These companies process the data only to provide the service.

We do not sell or share your data for advertising.

4. Where data is held

Our servers are located in the European Union (Frankfurt).

5. How long we keep it

Your messages are kept until you delete them or close your account.

When you delete your account, the account, the messages you sent and the files you shared are permanently deleted. Messages sent by the other person are not deleted, because they are another user's data.

If a report has been filed about you, the text copy of the reported message and the report record are kept for at most 12 more months after the review is complete.

6. How to delete your account

In the app, go to Settings › Account › Delete my account. It happens immediately after two confirmations. You do not need to contact us.

If you cannot access the app, you can request deletion by writing to info@prahapp.cz.

7. Your rights

Depending on where you live you may have the right to access, correct, delete or object to the processing of your data. To exercise those rights write to info@prahapp.cz. We respond within 30 days at the latest.

If you are in the European Union you can exercise your rights under the GDPR. If you are in Türkiye, under the KVKK.

8. Children

This app is not designed for anyone under 16. If we find that a user below that age has created an account, we delete it.

9. Security

Connections are encrypted with HTTPS. Passwords are stored hashed. Database access is constrained by row level security policies. Even so, no system is completely secure, and as stated above administrators can access content.

10. Changes

If we update this policy we change the date above and announce significant changes inside the app.