Privacy Policy

1.1 From your sign-in account

• Email address, name, profile photo, and unique user ID from the Google account you sign in with
• Your Google name is never shown: the app gives you a system-generated display name (for example "Hujan Sore"). The original name is stored privately for security and moderation
• Your email is stored privately and is not visible to other users. New accounts do not use the Google profile photo

1.2 Information you provide

• Date of birth: to confirm you are 18 or older. Stored privately; only your age is shown on your profile, and you can hide it
• Gender: used for the "who can message me" setting. Not shown on your profile
• Profile: @username, bio, and profile photo
• Settings: private account, who can message you, who can call you, online status visibility, and age visibility

1.3 Content you create

• Posts (utas), comments, reposts, quotes, likes, saved posts, hashtags, mentions (@username) and the accounts mentioned, and attached photos/videos
• Chat messages: text, photos, videos, voice messages, and stickers, including anonymous chats
• Voice calls: only a call log (who called whom, time, duration, and whether it was answered) and the minutes you used today. The audio itself is sent in real time and is never recorded or stored
• Follows, follow requests, blocks, reports, and feedback you send

1.4 Technical information

• Push notification token to deliver notifications to your device
• Online status and last active time (you can hide your online status)
• Crash reports (Firebase Crashlytics): device model, OS and app version, and technical details of the error
• App integrity checks (Firebase App Check / Google Play Integrity) to block fake apps and automated abuse
• IP address processed for security and rate limiting; for feedback sent without signing in we only keep a hashed value
• Usage statistics: post view counts and daily/monthly active-user counts
• Approximate area (optional): only if you allow location access, your phone turns its approximate location into the name of your city/regency and province. Only that name is sent to us, never coordinates, and only to show posts from your area first in the "For You" feed. It is attached to posts you publish while it is on, is never shown to anyone, and is deleted together with the post (after 30 days or when you delete it). You can turn location off in your phone's settings at any time.

1.5 Subscription

• Premium status and expiry date from Google Play, through RevenueCat. We never receive your card or payment details

1.6 What we do NOT collect

• Phone number, precise location or GPS coordinates, your phone's contact list, or payment card details

• Sign you in and keep your account secure
• Show your profile, posts, and chats, and build your feeds (For You, Following, Popular, hashtags) and search results
• Deliver messages and notifications
• Apply your privacy settings: private account, message settings, blocks, and hidden online status or age
• Verify that users are 18 or older
• Provide Premium features
• Review reports, moderate content, and prevent spam, fraud, and abuse
• Fix crashes and improve performance
• Comply with legal obligations

• Profile: display name, @username, profile photo, bio, age (unless hidden), verified badge, and follower counts
• Profile-mode posts: visible to everyone, or only to your approved followers if your account is private
• Anonymous posts: shown under an alias that is never linked to your account on screen
• Online status: visible unless you turn it off
• Chats: visible only to the people in the conversation
• Your email, full date of birth, and gender are never shown to other users

We do NOT sell your personal data. We share data only with service providers that help us run Utas, under confidentiality obligations:

• Google Firebase: sign-in, database, server functions, push notifications, Crashlytics, and App Check
• Google Play: purchases and the Play Integrity check
• RevenueCat: Premium subscription status
• Vercel: hosting for our API servers
• Upstash: cache and counters (feeds, likes, rate limits)
• Cloudflare: photo/video/voice storage (R2) and hosting for this website
• Agora: carries the audio of voice calls in real time. Agora receives your account ID and the call audio while the call is running, and does not record it for us
• Telegram: internal notifications for our moderation team, containing reported content and the display names/usernames of the people involved

We may also disclose information when required by law, or to protect the safety of our users and the public. Your data may be processed on servers outside your country.

• All data is sent over encrypted connections (HTTPS/TLS) and encrypted at rest by our cloud providers
• Database rules ensure you can only read chats you are part of
• App integrity checks and rate limits against abuse
• Admin access is restricted to authorized personnel

Important: chats are not end-to-end encrypted. When a chat or post is reported, our moderation team may review the reported content and recent messages in that conversation.

• Posts, comments, and their likes: deleted automatically 30 days after they are created. Ghost posts disappear after 24 hours
• Chats: kept while your account is active. Messages you already sent stay in the other person's chat history
• Read notifications: deleted 3 days after you read them
• Account and profile: until you delete your account (with a 7-day grace period you can cancel)
• Active-user statistics: kept up to about 13 months
• Reports and ban records: kept as long as needed for safety and moderation

• Edit your profile and settings at any time in the app
• Make your account private, hide your online status or age, choose who can message you, and block people
• Delete your account from Profile > Settings > Delete account (permanent after 7 days)
• Access, correct, or delete your data, and withdraw consent, under applicable law (including Indonesia's PDP Law and the GDPR)
• Cancel Premium at any time through Google Play

To exercise these rights, contact us at olankun1204@gmail.com

Utas is an 18+ app and is not intended for anyone under the age of 18. Users must confirm their date of birth in the app. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately and we will remove it.

We may update this Privacy Policy from time to time. We will post the new policy on this page and update the "Last updated" date.

• Email: olankun1204@gmail.com
• Website: utas.asia