Privacy policy

Privacy policy

This policy covers the roda.social app and website. The operator's legal identity, country and verified contact must be supplied before this draft takes effect.

Data and purposes

We process email and sign-in sessions, date of birth for age eligibility, profile fields you provide, uploaded content, messages and attachments, call and live participation, follows, blocks, invitation chains, reactions, saves, views and privacy settings. Legacy accounts may retain a phone number. Feed activity supports recommendations. Device names, push tokens, app versions, network information and error reports support delivery, security and diagnostics. Location is processed when you use location features. Contact matching uses hashed phone numbers when that feature is used.

Visibility and service providers

Visibility depends on your profile and feature rules. Chat participants receive messages; live viewers receive broadcast audio and video. Recipients may keep copies. Firebase Cloud Messaging (Google) delivers push notifications; GlitchTip with the Sentry client SDK handles diagnostics; LiveKit supports calls and streams. Hosting, storage and email infrastructure process data needed for these services. Staff access follows permissions; disclosures may be required by law. Secure transport is not a claim of end-to-end encrypted messaging.

Permissions and choices

Camera, microphone, selected files, location and notification permissions serve their respective features and can be revoked in device settings. You can edit your profile, change privacy settings and delete content or your account. The current minimum age is 14, subject to applicable local requirements.

Retention

Recommendation signals are purged after 90 days. Deleted posts and media are eligible for background cleanup after 30 days; actual completion depends on the job running. Messages held by recipients, a technical account record with profile fields cleared preserving the invitation chain, and moderation records can remain after account deletion. Final retention periods for logs, backups and moderation evidence still require operator approval. See account deletion.

Website and contact

The static website uses no analytics, advertising scripts, cookies or local storage. The web server receives normal request metadata, including IP addresses. Privacy requests require the operator's verified contact, which is pending. This policy must be updated when processing practices change.