Privacy Policy

Last updated: 4 July 2026

Blind Text ("we", "us", "the app") is an anonymous one-on-one chat application. This Privacy Policy explains what information we collect, how we use it, and the choices you have. The app is currently available on Android only, worldwide.

1. What we collect

• Email address — used only to verify that you're a real person via a one-time code (OTP) sent to your inbox. Your email is never shown to other users and is not searchable.
• Profile data — username, date of birth, gender, country. This is what you choose to share. Other users only see your username, age, gender, and country.
• Chat messages — the text of your chats is stored on your device, not on our servers. If you message someone who is offline, we briefly hold that one message on our servers only until it's delivered, then delete it.
• Shared media (photos, voice notes, videos) — media you choose to send is saved only on your device and your chat partner's device. Photos and voice notes pass between you and are never stored on our servers; videos are briefly relayed through our servers and deleted as soon as they're delivered. The first time someone shares a photo, voice note, or video with you, you're asked to accept or decline it.
• Reports & moderation data — when you report another user we record the reason and the chat ID so our team can review the conversation.
• Technical data — IP address (used for rate limiting and abuse prevention), device model, and Android version. This is standard server-log data.
• Push notification token — an anonymous device token (via Google Firebase Cloud Messaging) so we can send you notifications, e.g. when someone messages you. You can turn notifications off in your phone settings at any time.
• App-usage analytics — aggregate, anonymous usage stats (app installs, opens, retention, device model, OS version, approximate region) via Google Analytics for Firebase, used to fix issues and improve the app. See section 3.

2. What we do not collect

• We do not collect your real name unless you put it in your username (which we recommend you don't).
• We do not access your contacts or precise GPS location.
• Your camera, microphone, and photo/video library are used only when you choose to share a photo, voice note, or video in a chat — never in the background and never without your action.
• We do not show ads, and we do not run third-party advertising trackers, ad networks (no AdMob), or the Facebook SDK.

3. Third-party services we use

The Application uses the following third-party services. Each one may process limited data on our behalf as described below.

• MongoDB Atlas (operated by MongoDB, Inc.) — managed database service that stores your account, profile, and chat data on our behalf. Data is encrypted at rest and in transit.
• Render (operated by Render Services, Inc.) — cloud hosting that runs the Blind Text backend. All API and chat traffic passes through Render's infrastructure over encrypted (HTTPS/WSS) connections.
• Google Fonts (operated by Google LLC) — typography assets are loaded from fonts.googleapis.com on first launch. Google may receive your IP address and user-agent during this fetch. No personal data is sent.
• Email / OTP delivery provider — to deliver the one-time-password we send during sign-up and sign-in, your email address is shared with our transactional email provider. We currently use Resend (operated by Resend, Inc.) for email delivery. We may change providers in the future; the data shared is limited to your email address and the OTP code being sent.
• Google Analytics (operated by Google LLC) — used only on the Blind Text website (this site you are reading) to understand aggregate traffic patterns: pages visited, country, device type, referral source. Google may receive your IP address, user-agent, and a Google-managed cookie identifier as part of this. This website Google Analytics is separate from the in-app Firebase services described below.
• Firebase Cloud Messaging (operated by Google LLC) — the Android app uses Google's Firebase Cloud Messaging to deliver push notifications (for example, when someone sends you a message). Your device generates an anonymous push token which we store on our backend solely to route notifications to your device; you can disable notifications at any time in your phone settings. The notification text is delivered through Google's infrastructure.
• Google Analytics for Firebase (operated by Google LLC) — the Android app uses Firebase Analytics to understand aggregate, anonymous app usage: installs, app opens, retention, screen views, approximate region (derived from IP), device model, and OS version. This helps us fix problems and improve the app. It is used to measure usage in aggregate, not to identify you personally, and is separate from the website analytics above.

Aside from Google's Firebase Cloud Messaging and Firebase Analytics described above, the Android app does not use Firebase Crashlytics, the Facebook SDK, AdMob, or any third-party advertising or behavioural-tracking service. There are no ads in the app. We do not sell, rent, or trade your data with anyone.

4. How we use your data

• To create and authenticate your account.
• To match you with other users based on the filters you set.
• To deliver chat messages between you and your match in real time.
• To detect and prevent abuse — for example, banning accounts that repeatedly send prohibited content or accumulate reports.

5. How long we keep your data

• Account data is kept until you delete your account.
• Chat message text and shared media live on your device, not our servers. A message waiting for an offline recipient is deleted as soon as it's delivered (or after 7 days if it never is). A video relayed through our servers is deleted right after it's delivered, and within a few hours at most.
• Reports are retained for the lifetime of the reported account so moderation history is available.

6. Your choices

• Delete your account — To delete your account, open the app and tap the three-dot menu in the top-right corner. A drawer will open from the bottom of the screen. Select Delete Account, then verify the deletion by entering your username. This permanently removes your profile, chats, email address, username, and any associated data within 24 hours.
• Request your data — email blindtextapp@gmail.com from the address tied to your account and we'll send you a copy.
• Block another user — every chat has a Report & Block option. Once you use it, you and that user will never be matched again.

7. Children

Blind Text is for adults. You must be at least 18 years old to use the app. If we learn that an account belongs to someone under 18, we'll terminate it.

8. Contact

Questions, concerns, or data requests: blindtextapp@gmail.com.