FOURTHO Privacy Policy
WHO WE ARE
Fourtho is operated by the Vibing Dev Team ("we"). Questions about this policy go to vibingdevteams@gmail.com.
WHAT WE COLLECT
- Account: the identifier Apple gives us when you sign in with your Apple ID. We never receive your Apple password. If you use Hide My Email, we only ever see the relay address.
- Nickname: the name you choose. It is shown to members of your rooms and to your friends.
- Phone number (optional): if you add one, we confirm it with an SMS code before it is saved. The verified number and a one-way hash of it are stored with your account and used only to let friends who already have your number find you. You can skip this step, and you can change or remove the number in Settings.
- Photos: the pictures you add to your rooms, and the four-cut rolls they are archived into.
- Push token: a device token so we can notify you when a friend invites you, a cut is added, or a session is about to close.
- Safety records: if you report someone, we keep the report (who reported whom, the room, and the reason). If you block someone, we keep your block list so it can be enforced.
HOW YOUR PHOTOS ARE PROTECTED
Photos live in Firebase Storage and are readable only by the members of the room they were posted in. They are fetched by the app through an authenticated request — we do not publish shareable links to them. Nobody outside your room can open your photos, and neither can a signed-in stranger who guesses a room's ID. Photos from anyone you block are hidden from you.
HOW CONTACT MATCHING WORKS
If you allow access to Contacts, your contacts stay on your device. We send only a one-way SHA-256 hash of each phone number to our server, which replies with the accounts that matched. Raw phone numbers from your address book are never uploaded, no user can retrieve another user's phone number from us, and matching is rate-limited to prevent bulk look-ups. You can revoke Contacts access at any time in iOS Settings.
WHERE YOUR DATA IS PROCESSED
Fourtho runs on Google Firebase (Authentication, Firestore, Storage, Cloud Functions and Cloud Messaging). Your data is stored on Google's servers in the United States and handled under Google's privacy terms. Sign in with Apple and push delivery are provided by Apple. We do not use any advertising or analytics SDKs.
WHAT WE DO NOT DO
We do not sell your data, share it with advertisers, or use your photos to train anything.
HOW LONG WE KEEP IT
Account data is kept until you delete your account. Reports are kept after a deletion so that abuse can still be reviewed.
DELETING YOUR ACCOUNT
Settings → Delete Account removes your profile, your phone number and hash, your push token, your friendships and block list, your membership in every room, and every photo you have uploaded. Your Sign in with Apple authorization is revoked at the same time. Rooms where you were the last remaining member are deleted along with their archived rolls. This is permanent and takes effect immediately.
Photos you posted in rooms with other members remain in those rooms' archived rolls, because they are part of a shared four-cut image that belongs to the group as well as to you. If you want those removed too, leave the room before deleting your account — leaving clears your photos from the current session.
YOUR RIGHTS
You can see and change your nickname and phone number in Settings, remove Contacts and Camera permissions in iOS Settings, and delete everything from Settings → Delete Account. For anything else — a copy of your data, a correction, or a question — email vibingdevteams@gmail.com.
CHILDREN
Fourtho is not directed at children under 14, and we do not knowingly collect data from them.
CHANGES
If this policy changes in a way that matters, we will show the new version in the app and update the date above.