Privacy Policy

Overview

ionFriendicus is a private messaging app for small groups of friends. We designed it from day one to keep your content inside your crew. This policy explains what we collect, why, and how we protect it. It applies to the iOS app and the backend service.

The short version: we do not sell your data, we do not track you across apps or websites, we do not share your content with anyone outside your group. Everything we store serves one of three purposes: signing you in, delivering your messages to your group, or keeping the service running.

Data We Collect

Account information

• Apple Sign-In identifier and email — received when you sign in with Apple. Used to create your account and send notifications. We never receive your Apple password.
• Display name — the nickname you choose. Visible to other members of your groups.

Content you create

• Group posts and comments — text, voice messages, photos, and videos you share with a group.
• Shared albums — photos you contribute to a group's shared album.
• Reactions and mentions — emoji reactions and @-mentions you send.

All content is scoped to the group you post it in. Only members of that group can see it. Row-level security in our database enforces this at every query.

Device and technical data

• APNs push token — so we can deliver notifications. Tied to your account only; we do not share it with third parties.
• Crash logs and diagnostics — minimal, only if you opt in via iOS Settings → Privacy → Analytics.

How We Use Your Data

• To authenticate you via Apple Sign-In.
• To deliver your posts, comments, reactions, and mentions to other members of the same group.
• To send push notifications for new activity you have opted into.
• To keep the service reliable, including temporary logs for debugging.

We do not use your data for advertising, profiling, or any marketing purpose. We do not train machine-learning models on your content.

Tracking

ionFriendicus does not track you across other apps or websites. We do not integrate analytics SDKs that identify you. We do not participate in iOS's App Tracking Transparency framework because we have no tracking to authorize.

Third Parties We Use

• Apple — Sign in with Apple for authentication; APNs for push delivery. Apple's privacy policy applies when you use Sign in with Apple.
• Self-hosted Supabase — we operate our own Supabase backend (PostgreSQL, file storage, realtime) on infrastructure we control. Data is not shared with Supabase as a company.

We do not use Google Analytics, Meta SDKs, advertising networks, or any other third-party data pipeline.

Where Your Data Lives

All content is stored on a self-hosted server in Germany. Data is transmitted only over TLS (HTTPS). At rest, the database is accessible only from within the server's private network; external access requires SSH with key-based authentication.

Your Rights

• Access your data — request a copy of everything we store about you.
• Delete your account — deletes your user profile, all posts, comments, reactions, and uploaded media. Groups you created will be deleted along with their content.
• Revoke Apple Sign-In — remove ionFriendicus in Settings → Apple ID → Sign in with Apple; we receive a webhook and deactivate your account.
• Object to processing, correct or restrict — if you are in the EU under GDPR, or in California under CCPA/CPRA, you have these additional rights.

To exercise any of these rights, email us at privacy@be-gr.com. We respond within 30 days.

Children

ionFriendicus is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with information, contact us and we will delete it.

Data Retention

Your content remains in our database until you delete it or delete your account. Backups are retained for up to 30 days after deletion, after which data is permanently removed. Push tokens are purged when invalid (e.g. you uninstall the app).

Changes to This Policy

If we change this policy in any material way, we will notify active users inside the app and by push notification at least 30 days before the change takes effect. The effective date below is updated with every revision.

Contact

Data controller: Benedict G, operating ionFriendicus.

Privacy inquiries: privacy@be-gr.com

General support: support@be-gr.com