Privacy policy
Last updated: October 2, 2026
This policy explains what data the Rachealo app processes, what for and for how long. The most important part first:
Your proofs and everything you send to the chat (messages, photos, videos, voice messages and stickers) are end-to-end encrypted. They're encrypted on your phone with keys only the group members have. Our server stores and forwards them encrypted, but can't see or hear them.
Before sending a photo, the app removes its metadata (location, phone model, exact time), so group members only see the image.
We don't sell your data or share it with advertisers.
1. What data we process
| Data | What for |
|---|---|
| Email and name of your Google or Apple account (if you use "Hide My Email", Apple gives us a relay address) | Signing in and identifying your account. |
| Display name, username and personal code | So your friends can find and invite you. You choose your display name (at first we suggest the one from your Google or Apple account) and you can change it. |
| Profile photo, profile video and bio (optional), and how you customised your profile (frame, color, style) | Showing them on your profile and next to your name. They're not end-to-end encrypted: anyone or only your friends can see them, as you choose. The photo and video are shrunk on your phone and stripped of metadata before upload. |
| Your devices' public keys | So other members can share the group's keys with you. Private keys never leave your devices. |
| Groups, members, days, forfeit, streaks, votes and counters | Making the app work (calculating streaks, closing the day, announcing the forfeit). |
| Proofs and chat content, encrypted (messages, photos, videos, voice messages, stickers, chat background photo) | Storing them and delivering them to the group members. We can't see their content. |
| Content metadata: who sent what kind of file, to which group, when and how big it is; how far each member has received and read the chat | Operation (storage limits, delivered and read ticks) and security. |
| Capture notices: whether you take a screenshot or record the screen while viewing a proof | Letting the group know. We don't receive the screenshot. |
| Friendships, requests, blocks and alerts between users | Social features. |
| Notification token, time zone and language | Sending you reminders and notices at the right time and in your language. |
| Status of your subscriptions (plan, store, renewal date) | Activating Premium, Pro or group premium. We don't receive your card details: the store processes the payment. |
| Usage data: which days you used the app, from which platform (iPhone, Android or web), how many requests your app made, how much you uploaded and downloaded, how many notifications we sent you and how much space your files take. Once a day we also store a summary of your account (plan, number of groups, longest streak, number of friends) | Knowing how many people use the app and how that changes, working out what the service costs us, improving it and deciding who to offer Rachealo plans or deals to. These are only counts and dates: never the content of what you send or what you did in each group. |
| Reports | If you report something, the report includes the content you saw (decrypted) so it can be reviewed. |
The app asks for permission to use the camera (proofs, photos and videos), the microphone (videos and voice messages), your photos (if you pick one from your library) and notifications. It doesn't access your contacts or your location.
2. Who it's shared with
- The members of your groups see your proofs (only once), what you send to the chat, your streaks in the group, how many votes each proof got (not who voted what) and whether you've read the chat.
- Other users see your name, your username, your profile photo or video and your bio (unless you limit them to your friends) and the streaks you choose to show on your profile (none by default).
- Providers, which only receive what they need to provide their service:
- Google and Apple: sign-in.
- Apple (App Store and iPhone notifications) and Google (Google Play and Android notifications, through Firebase): purchases and notification delivery. The text of a notification never includes the content of a message.
- RevenueCat: subscription management (it receives an identifier for your account and your purchases, not your name or email).
- Our hosting provider, where the database and the encrypted files live.
- We don't sell your data, we don't share it with advertisers and the app shows no third-party ads. Only we see the usage data.
- We may hand over data if a competent authority requires it by law. Even then, we can't hand over end-to-end encrypted content in readable form, because we don't have the keys.
3. How long it's kept
- Proofs: deleted from the server when the group's day closes, and from your phone as soon as you view them.
- Chat messages: the last 3000 of each group are kept (encrypted).
- Chat photos, videos and voice messages: each group keeps up to 100 files or 300 MB; beyond that, the oldest are deleted. "View once" files are deleted when everyone has opened them or after 7 days.
- Stickers: until you delete them. Personal ones are encrypted with a key that stays on your phone: if you change phones, they're lost.
- Groups: deleted automatically after 15 days without activity.
- Reports: deleted when resolved or after 90 days at most.
- Profile (photo, video, bio): until you change them or delete your account. If your paid plan ends, the profile video is deleted.
- Usage data: while you have the account. If you delete it, it remains only as statistics without your name, username or email, which can no longer identify you.
- Your account: until you delete it. When you do, we delete your personal data; your messages in groups remain as "Deleted user" so the rest of the conversation isn't broken.
- Backups: made twice a day, encrypted, with older ones removed over time; deleted data may remain in a backup for up to 3 months.
4. Your rights
You can access your data, correct it, request a copy or delete it. Most of it you can do from the app (Profile → Edit profile, and Profile → Settings → Delete account); for the rest, write to us (see Support). You can turn notifications off from the app's or your phone's settings. If you're in Argentina, you can also file a complaint with the Agencia de Acceso a la Información Pública.
5. Security
We use end-to-end encryption for proofs and the chat, encrypted connections (HTTPS) for everything else and your phone's secure storage (Keychain / Keystore) for your keys. If you lose all your devices, the keys are lost with them: other members give you back access to the group, but we can't recover anything for you.
6. Minors
The app is not directed at children under 13.
7. Changes
If we make important changes to this policy, we'll let you know in the app.