Privacy Policy - Dude App

Effective Date: July 2, 2026 Last Updated: July 2, 2026

Overview

Dude (“App,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application across Android, iOS, and other supported platforms.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, do not download or use this App.

1. Information We Collect

1.1 Information You Provide Directly

Account Information: - Phone number (used for authentication via Firebase Authentication) - Email address (optional, for account recovery) - Profile information (name, bio, profile picture, location) - Username and account credentials

Profile Data: - Social, Business, and Private profile information - Personal details and preferences for each profile - Profile photos and media

Communication Data: - Text messages and chat content - Voice messages and recordings - Call logs and call records - Message reactions and interactions - Message edit history

Location Information: - GPS coordinates when you enable location sharing - Current location for “NearMe” feature (nearby users discovery) - Location history for location-based services - Address information you provide

Media Files: - Photos and videos you share in messages - Images from your photo library - Screen captures and recorded content - File attachments

Contact Information: - Contacts from your device’s contact list (when you grant permission) - Contact sync data for friend discovery

1.2 Information Collected Automatically

Device Information: - Device type, model, and OS version - Device identifiers and advertising IDs - Device settings and configuration

Usage Information: - App features used and frequency - Interaction patterns and preferences - Session logs and timestamps - Crash reports and error logs

Network Information: - IP address and network status - Connection type (WiFi/cellular/offline) - Socket.IO connection metadata

Authentication Information: - Firebase Authentication tokens - Session identifiers - Device registration tokens

1.3 Information from Third Parties

Contacts Integration: - Phone numbers and names from your device contacts - Contact information used for friend recommendations

Google Services: - Google Maps data (location coordinates, map interactions) - Google Cloud Messaging device tokens - Play Services identifiers

Firebase Services: - Firebase Cloud Messaging (FCM) tokens - Analytics data from Firebase Analytics - Crash reporting through Firebase Crashlytics

2. How We Use Your Information

2.1 Core App Functionality

We use collected information to: - Authenticate your account and verify your identity - Create and maintain your user profile - Deliver real-time messaging services via Socket.IO - Enable voice and video calling through WebRTC and LiveKit - Facilitate group chat creation and management - Provide location-based features (NearMe, location sharing) - Store your chat history and media in local database (Drift/SQLite) - Provide end-to-end encryption of messages via Signal Protocol

2.2 Service Improvement

• Monitor app performance and stability
• Analyze feature usage and user behavior
• Identify and fix technical issues
• Conduct research for service optimization
• Test new features through A/B testing

2.3 Communications

• Send push notifications about messages and calls
• Send system notifications about app updates
• Provide customer support and respond to inquiries
• Send optional promotional messages (with consent)

2.4 Safety and Security

• Prevent fraud and detect suspicious activity
• Enforce our Terms of Service
• Protect against security threats and abuse
• Comply with legal obligations
• Investigate and resolve disputes

2.5 Legal and Regulatory

• Comply with applicable laws and regulations
• Respond to lawful government requests
• Protect legal rights and prevent harm

2.6 Profile-Specific Features

Data is processed separately for your Social, Business, and Private profiles to maintain profile confidentiality and appropriate content separation.

3. Information Sharing and Disclosure

3.1 With Other Users

Shared by Default: - Profile name and photo - Online status and typing indicators - Messages you send to specific users or groups - Media you share in conversations - Your presence in group chats

Shared for Location Features: - Your GPS coordinates (when location sharing is enabled) - Your approximate location in NearMe feature - Location history within shared groups

Your Control: - You can disable location sharing at any time - You can create private profiles to control visibility - You can block users from seeing your information - You can delete messages after sending

3.2 With Service Providers

We share information with third parties who provide services on our behalf: - Firebase/Google Cloud — Data storage, authentication, messaging - Socket.IO Provider — Real-time communication infrastructure - LiveKit — Selective forwarding unit for group calls - WebRTC Provider — Voice and video call infrastructure - Google Maps — Location services - Firebase Cloud Messaging — Push notifications - Firebase Crashlytics — Error tracking and analytics

These third parties are contractually obligated to use your information only as necessary to provide services to us.

3.3 Legal Requirements

We may disclose your information if required by law or in response to: - Court orders or legal process - Government or law enforcement requests - Requests to prevent fraud or protect security - Situations involving potential harm to persons or property

3.4 Business Transfers

If Dude is involved in a merger, acquisition, bankruptcy, dissolution, restructuring, or other transaction or proceeding, your information may be transferred as part of that transaction or proceeding.

3.5 With Your Consent

We may share your information for other purposes with your explicit consent.

3.6 Aggregated Data

We may share aggregated, de-identified information that cannot reasonably be used to identify you.

4. Data Storage and Security

4.1 Local Storage

• Your chat history is stored locally on your device using SQLite (Drift ORM)
• Local data remains on your device and is not automatically uploaded
• Clearing app data will delete locally stored messages

4.2 Cloud Storage

• Account information and profile data are stored in Firebase Firestore
• Firestore data is encrypted both in transit and at rest
• Cloud-stored data is accessible from any device where you sign in

4.3 Security Measures

• Encryption in Transit: TLS/SSL encryption for all data transmitted
• Encryption at Rest: Firebase uses encryption for stored data
• End-to-End Encryption: 1:1 messages are encrypted with Signal Protocol (X3DH + Double Ratchet)
• Authentication: Firebase Authentication with token-based verification
• Access Controls: Role-based access permissions
• Regular Security: Security monitoring and threat detection

4.4 Data Retention

• Chat Messages: Retained until you delete them or delete your account
• Call Logs: Retained per your retention settings
• Location Data: Retained only while actively sharing location
• Media Files: Retained until deleted by you
• Account Data: Retained until account deletion

We retain data for as long as your account is active or as long as needed to provide services.

4.5 Account Deletion

You can delete your account at any time through app settings. Upon account deletion: - Your profile data will be removed from our servers - Your messages in group chats may remain (owned by other users) - Your account cannot be recovered

5. Your Privacy Rights and Choices

5.1 Access and Portability

You have the right to: - Access your personal information - Request a copy of your data - Receive data in a portable format

5.2 Correction and Deletion

You have the right to: - Update or correct your information through app settings - Request deletion of your account and associated data - Opt-out of non-essential data collection

5.3 Communication Preferences

Push Notifications: - Manage notification settings in the app - Disable notifications through device settings - Opt-out of promotional messages

Location Sharing: - Disable location access through app settings - Control location permissions in device settings - Stop sharing location in chat conversations

Contact Sync: - Enable or disable contact sync in privacy settings - Revoke contact permissions anytime through device settings

Data Collection: - Opt-out of analytics in privacy settings - Disable crash reporting through app settings

5.4 Profile Management

• Create separate Social, Business, and Private profiles
• Control visibility for each profile independently
• Block or mute specific users
• Archive conversations

6. Permission Details

The Dude App requests the following device permissions:

All permissions can be revoked at any time through device settings.

7. Children’s Privacy

The Dude App is not intended for children under 13 years old (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13.

If we become aware that we have collected information from a child under 13, we will take steps to delete such information and terminate the child’s account.

If you are a parent or guardian and believe we have collected information from your child, please contact us immediately at [support email].

8. Third-Party Services

8.1 Firebase (Google)

• Privacy Policy: https://policies.google.com/privacy
• Services Used: Authentication, Firestore, Cloud Messaging, Analytics, Crashlytics
• Data Shared: Account information, usage data, crash reports

8.2 Google Maps

• Privacy Policy: https://policies.google.com/privacy
• Purpose: Location display and mapping
• Data Shared: GPS coordinates, location queries

8.3 Socket.IO

• Purpose: Real-time message delivery
• Data Shared: Message data, connection metadata

8.4 WebRTC

• Purpose: Voice and video calling
• Data Shared: Call metadata, network information

8.5 LiveKit

• Purpose: Selective forwarding unit for group audio/video calls
• Data Shared: Media streams, call metadata

8.6 Google Play Services

• Privacy Policy: https://policies.google.com/privacy
• Purpose: Device authentication and services
• Data Shared: Device identifiers, advertising preferences

9. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence, which may have different privacy laws. By using the App, you consent to such transfer.

If you are located in the EEA (European Economic Area), UK, or other jurisdictions with strict data protection laws, we comply with applicable regulations including GDPR.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by: - Updating the “Last Updated” date at the top of this policy - Posting the updated policy in the app - Sending you an in-app notification or email (for major changes)

Your continued use of the App following the posting of revised Privacy Policy means that you accept and agree to the changes.

11. Data Protection Under Different Jurisdictions

11.1 European Union (GDPR)

If you are in the EU, you have the right to: - Access your personal data (Article 15) - Correct inaccurate data (Article 16) - Request erasure (“right to be forgotten”) (Article 17) - Restrict processing (Article 18) - Data portability (Article 20) - Object to processing (Article 21) - Withdraw consent at any time

Legal Basis for Processing: - Consent (for non-essential features) - Legitimate interests (for core services) - Contract performance (app functionality) - Legal obligations (compliance requirements)

11.2 California (CCPA)

If you are a California resident, you have the right to: - Know what personal information we collect - Know whether your personal information is sold or disclosed - Say no to the sale or sharing of your personal information - Delete personal information we collect - Correct inaccurate personal information - Opt-out of profiling and automated decision-making

11.3 Other Jurisdictions

We comply with applicable data protection laws in all jurisdictions where we operate.

12. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: [your-support-email@dude.app] Mail: [Your Company Address] App Support: Use the “Help & Support” section in the app settings

We will respond to your inquiry within 30 days.

13. State-Specific Privacy Disclosures

13.1 Categories of Personal Information Collected

1. Identifiers (name, phone number, email, device ID)
2. Personal records (profile information, account data)
3. Commercial information (transaction history if applicable)
4. Biometric information (none specifically collected)
5. Internet/Network activity (usage logs, connection data)
6. Location information (GPS, address data)
7. Sensory information (audio/video in calls)
8. Professional information (business profile data if applicable)
9. Educational information (none collected)
10. Inferences drawn (user preferences, behavior)

13.2 Categories of Information Disclosed

Personal information is disclosed to: - Service providers and data processors - Third-party platforms (Firebase, Google, Socket.IO, LiveKit) - Law enforcement (when legally required) - Other users (as per sharing controls)

14. Sensitive Data Handling

14.1 Location Data

• Collected only when you enable the NearMe feature or location sharing
• Never shared with advertisers
• Deleted when you disable location services
• Can be managed through device permissions

14.2 Contact Information

• Only accessed with your explicit permission
• Used only to facilitate friend discovery
• Not sold or shared with third parties
• Can be revoked anytime through settings

14.3 Audio and Video

• Call data is transmitted through encrypted channels
• Not stored unless you record calls (if supported)
• Local recordings remain on your device
• Not analyzed for targeted advertising

14.4 Message Content

• 1:1 messages are protected by Signal Protocol end-to-end encryption
• Stored on Firebase servers with encryption
• Accessible only to sender and intended recipients
• Remains on your device in local SQLite database

15. Accountability and Compliance

We maintain compliance with this privacy policy through: - Regular privacy impact assessments - Data protection by design and default - Vendor management and contracts - Staff privacy training - Incident response procedures - Regular security audits

Appendix A: Permission Descriptions

Android Permissions

• android.permission.ACCESS_FINE_LOCATION — Precise location for NearMe feature
• android.permission.ACCESS_COARSE_LOCATION — Approximate location services
• android.permission.ACCESS_BACKGROUND_LOCATION — Background location tracking
• android.permission.INTERNET — Network communication
• android.permission.CAMERA — Video calling and photo capture
• android.permission.RECORD_AUDIO — Voice calls and audio messages
• android.permission.READ_CONTACTS — Contact sync and friend discovery
• android.permission.READ_EXTERNAL_STORAGE — Access to photos and media
• android.permission.POST_NOTIFICATIONS — Push notification delivery

iOS Permissions

• NSLocationWhenInUseUsageDescription — Location access while using app
• NSLocationAlwaysAndWhenInUseUsageDescription — Location access anytime
• NSContactsUsageDescription — Contact list access
• NSCameraUsageDescription — Camera for video calls and photos
• NSMicrophoneUsageDescription — Microphone for calls
• NSPhotoLibraryUsageDescription — Photo library access
• NSPhotoLibraryAddUsageDescription — Permission to save photos

Appendix B: Glossary

• Drift/SQLite — Local database technology for storing chat history on your device
• Firebase — Google’s cloud platform for backend services
• Firestore — Cloud database service
• Socket.IO — Real-time bidirectional communication protocol
• WebRTC — Technology for peer-to-peer voice and video calling
• LiveKit — Open-source selective forwarding unit (SFU) for group calls
• FCM — Firebase Cloud Messaging for push notifications
• Signal Protocol — End-to-end encryption protocol (X3DH + Double Ratchet)
• TLS/SSL — Encryption protocols for secure data transmission
• GDPR — General Data Protection Regulation (EU)
• CCPA — California Consumer Privacy Act

Thank you for choosing Dude. We take your privacy seriously.

This Privacy Policy is subject to the Dude Terms of Service and other agreements. For the latest version of this policy, visit: [your-app-website.com/privacy]