Privacy Policy

1. Information we collect

We collect information you provide directly and information generated automatically when you use the Service.

a) Information you provide

• Account information: your name, email address, and password when you create an account.
• Profile information: display name, avatar image, and status message.
• Messages and content: text messages, images, videos, audio recordings, files, and notes you create or share through the Service.
• Contact information: when you invite others to join the Service.
• Payment information: billing details processed through our payment provider (Stripe). We do not store full card numbers on our servers.
• Support requests: information you provide when contacting our support team.

b) Information collected automatically

• Device information: device type, operating system, browser type, unique device identifiers, and app version.
• Usage data: features used, actions taken, timestamps, and interaction patterns.
• Log data: IP address, access times, pages viewed, and referring URLs.
• Connection data: online/offline status, last active timestamps for presence features.
• Call metadata: call duration, call type (audio/video), and connection quality metrics. We do not record the content of calls.
• Push notification tokens: device tokens used to deliver push notifications.

c) Optional AI Memory feature

If you are a paid subscriber and explicitly opt in to the Memory feature, we may extract and store structured information (facts, intents, projects, entities) from your conversations to provide personalised suggestions. This feature is entirely opt-in, requires your explicit consent, and can be disabled or deleted at any time from your settings. Memory data is never used for advertising or shared with third parties.

2. How we use your information

We use the information we collect to:

• Provide, maintain, and improve the Service, including messaging, voice and video calling, and file sharing.
• Create and manage your account and authenticate your identity.
• Process transactions and send billing-related communications.
• Send push notifications for new messages, calls, and other Service activity (you can disable these in your device settings).
• Monitor and analyse usage trends to improve user experience.
• Detect, investigate, and prevent fraudulent, unauthorised, or illegal activity.
• Provide customer support and respond to your requests.
• Comply with legal obligations.

3. How we share your information

We do not sell your personal information. We may share information in the following limited circumstances:

• With other users: your profile information, messages, and shared content are visible to the recipients you communicate with.
• Service providers: we use third-party services to help operate the Service, including cloud hosting, payment processing (Stripe), file storage (Google Cloud Storage), video/audio call infrastructure (Twilio), and AI processing (OpenAI, for the opt-in Memory feature only). These providers access your data only to perform tasks on our behalf and are obligated to protect it.
• Legal requirements: we may disclose your information if required by law, regulation, legal process, or governmental request.
• Business transfers: if Modgee is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With your consent: we may share information for other purposes when you give us explicit permission.

4. Data storage and security

Your data is stored on secure servers. We implement industry-standard security measures including:

• Encryption of data in transit using TLS/SSL.
• Encrypted signalling for voice and video calls (AES-256-GCM).
• Secure password hashing (scrypt).
• Session management with secure, HTTP-only cookies.
• CSRF protection and security headers (CSP, HSTS).
• Rate limiting to prevent abuse.
• Audit logging of access to sensitive data.

While we take reasonable steps to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes (such as resolving disputes or enforcing our agreements).

Message content and files may be retained in encrypted backups for up to 90 days after deletion before being permanently removed.

Reports, moderation decisions, harmful-content evidence, payment dispute records, and safety incident metadata may be retained for as long as necessary to investigate abuse, enforce our policies, comply with legal obligations, respond to provider reviews, or protect users and the Service.

6. Your rights and choices

Depending on your location, you may have the following rights:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate or incomplete data.
• Deletion: request that we delete your personal data.
• Data portability: request your data in a structured, machine-readable format. You can also export your conversations directly from the app.
• Objection: object to our processing of your personal data in certain circumstances.
• Withdraw consent: where processing is based on consent (such as the Memory feature), you may withdraw consent at any time.
• Push notifications: you can disable push notifications through your device settings at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Children's privacy

The Service is not intended for children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at [email protected].

8. International data transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your data remains protected in accordance with this policy.

9. Cookies and similar technologies

We use essential cookies and local storage to operate the Service, including session management and authentication. We do not use advertising cookies or third-party tracking cookies. The Service may use IndexedDB for offline message storage on your device.

10. Third-party links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

11. Australian Privacy Act

Modgee is operated by James Harrison, based in New South Wales, Australia. We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). If you are unsatisfied with our response to a privacy concern, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within the Service and updating the effective date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Contact us

If you have any questions about this Privacy Policy, your data, or your rights, please contact us:

• Privacy inquiries: [email protected]
• General support: [email protected]
• Legal: [email protected]