Privacy Policy for Chat Film
Last updated: 16 August 2026 Effective date: 16 August 2026
Chat Film (“Chat Film”, “we”, “us”) is operated by Chat Film (ABN 47 271 351 041), Sheidow Park SA 5158, Australia. This policy explains what we collect, why, and what control you have.
If you disagree with this policy, please do not use Chat Film.
1. Information we collect
1.1 Information you give us
| Data | Why we have it |
|---|---|
| Email address | Sign-in, password reset, account-security notices |
| Password | Never stored by us in readable form — see §4 |
| Display name | Shown to your friends |
| Chat ID (username) | How other people find and add you |
| Profile picture (optional) | Shown on your profile and posts |
| Posts — photos, videos, captions | The content you choose to share |
| Messages | Delivering your conversations |
| Reports you submit | Reviewing content you flag as abusive |
1.2 Information created as you use Chat Film
- Friend requests and friendships
- Chat membership, and when you last read a conversation
- Likes on posts
- Users you have blocked
- Notification preferences
- A push notification token for each device you sign in on
- Parental-control settings: an access PIN (stored hashed), a daily time limit, and a downtime window
- Timestamps of account, post, and message creation
1.3 Information stored only on your device
These never reach our servers:
- Daily screen-time usage, for the parental-control limit
- Whether you have seen the intro screens
- A cached copy of your notification preferences
- Your login session token, held in the iOS Keychain or Android Keystore
- Your private message key — see §4
Push notifications. So that you receive alerts while the app is closed, we store a push token for each device you sign in on. Tokens are delivered to Apple’s and Google’s push services through Expo, and are deleted when you sign out or delete your account.
Push notifications never contain your message content. Because messages are end-to-end encrypted, our servers hold no key to read them — a push we send literally cannot include the text. Every message alert reads “You have a new message.” Message previews shown while the app is open are decrypted on your own device, not sent by us.
1.4 What we do not collect
We do not collect location data, contacts, advertising identifiers, or device sensor data. We have no analytics, advertising, or third-party tracking SDKs. We do not build advertising profiles, and we do not track you across other apps or websites.
2. How we use your information
Only to:
- Operate the app — accounts, friends, posts, messaging
- Deliver notifications you have enabled
- Enforce parental controls you have configured
- Review reports and enforce our Terms of Service
- Keep the service secure and debug faults
- Meet legal obligations
We do not sell your personal information. We do not share it for advertising.
3. Who your information is shared with
3.1 Other users
- Your display name, Chat ID and profile picture are visible to people who can find your profile
- Your posts are visible to your friends
- Your messages are visible to the people in that conversation
3.2 Service providers
| Provider | Role | Where |
|---|---|---|
| Supabase | Database, authentication, file storage | Tokyo, Japan (ap-northeast-1) |
| Expo | Delivering push notifications to Apple and Google | United States |
| Apple / Google | Push notification delivery to your device | Global |
These providers process data on our instructions as our processors. Expo and the platform push services receive only your device’s push token and the generic alert text — never your message content, which we cannot read. Their privacy policies: https://supabase.com/privacy and https://expo.dev/privacy
3.3 Legal
We may disclose information where legally required, or to protect the rights or safety of our users or the public.
4. How we protect your information
- Passwords are hashed by Supabase Auth. Nobody at Chat Film can read them.
- Messages are end-to-end encrypted. The body is sealed on the sender’s device (XSalsa20-Poly1305, keyed per message) and opened on the recipient’s. The private key never leaves the device, so our servers store ciphertext we cannot read.
- Row Level Security is enforced on every database table, so the database itself rejects reads of data you are not entitled to.
- Session tokens are held in the iOS Keychain / Android Keystore.
- Parental PINs are stored hashed, with lockout after repeated wrong entries.
- Data is in transit over TLS.
What end-to-end encryption does not cover. We still see metadata: who messages whom, when, how often, and approximate message length. We just cannot see the content. No system is perfectly secure, and a compromised or jailbroken phone can expose messages on that device regardless of how they were sent.
Key changes and verification. We operate the directory that hands out public keys, so in principle we could substitute one and intercept a conversation. To rule that out, compare your safety number with the other person in person or over a channel you already trust: open the chat, tap the menu, choose Verify encryption. The app also warns you in the chat when someone’s key changes, which normally means they reinstalled or changed phones.
Losing your device means losing your history. Because the key lives only on your phone, we cannot restore old messages after a reinstall or a new device. Nobody can — not us, not law enforcement, not you. This is the direct cost of us not holding a copy of your key.
Messages sent before August 2026 were encrypted on our servers (AES-256 via pgcrypto) with keys held in our secrets vault, rather than on your device. They remain protected against unauthorised access, but unlike newer messages they could in principle be decrypted by us — for example if legally compelled. They cannot be converted: the device keys that would seal them did not exist when they were sent.
Reporting a message. If you report a message, your device includes a key that opens that one message so we can review it. It does not open anything else in the conversation. We can also confirm the reported message is genuine and was really sent by that account, so nobody can fabricate a report against you.
5. How long we keep your information
We keep your information while your account is open. Delete your account and we delete your profile, posts, uploaded media, and push notification tokens.
Messages you sent stay in the recipient’s conversation. A chat belongs to both people in it, and deleting your account does not delete the other person’s copy — otherwise anyone could send something abusive and then erase the evidence by closing their account. Your name and profile disappear; the messages remain on their side, attributed to a deleted user.
Reports may be kept after deletion, for enforcement and to prevent repeat abuse.
Backups may persist for up to 7 days after deletion, in line with our Supabase plan’s daily backup retention.
6. Your rights and choices
Within the app you can:
- Edit your name, profile picture, email and password (Account Settings)
- Delete your account — Settings → Account Settings → Delete Account
- Block any user
- Report posts, messages or users
- Control notifications by category
- Set parental controls with a PIN
Depending on where you live (including under the Australian Privacy Act 1988 and its Australian Privacy Principles, the GDPR, and the CCPA) you may also have rights to access, correct, delete, port, or restrict processing of your data, and to object to it. We do not sell personal information, so there is nothing to opt out of in that respect.
To exercise any of these, contact support@chat-film.com. We respond within 30 days. If you are in Australia and are unhappy with our response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au); elsewhere, to your local data protection authority.
7. Children’s privacy
You must be at least 13 years old to use Chat Film.
Chat Film includes parental controls (a PIN, a daily time limit and a downtime window), but it is not designed for or directed at children under 13.
We do not ask for your date of birth. Not collecting it is a deliberate privacy choice: age data would be one more sensitive field for us to hold and protect. The 13+ requirement is therefore a condition of using Chat Film that you accept when you create an account, rather than something we verify.
We do not knowingly collect information from children under 13. If we learn that we have, we delete it. Parents or guardians who believe their child has created an account should contact support@chat-film.com and we will remove it.
8. International transfers
We are based in Australia, and our database, authentication and file storage are hosted by Supabase in Tokyo, Japan. Your information is therefore processed outside your own country, where data protection laws may differ from your own.
Where required — including for transfers of personal data out of the EEA or the UK, and for disclosures of personal information outside Australia under Australian Privacy Principle 8 — we rely on appropriate safeguards, including Standard Contractual Clauses.
9. Changes to this policy
We will update the “Last updated” date, and give notice in the app for material changes. Continuing to use Chat Film after a change means you accept it.
10. Contact us
Email: support@chat-film.com Entity: Chat Film (ABN 47 271 351 041) Address: Sheidow Park SA 5158, Australia