Privacy Policy

RandoChat provides account-based random chat, profile, messaging, image sharing, safety reporting, blocking, and push notification features.

Data We Collect

We collect account contact information, password hashes, profile details you provide, profile photos, device push tokens, preferences, block lists, reports, and temporary relay metadata needed to deliver messages.

Messages and Media

Messages and chat media are held on the server only until delivered or until they expire after 5 days. Delivered message payloads and relay media are cleared from the server. Your app keeps chat history and media in private app storage on your device.

AI-Assisted Profiles

RandoChat may include clearly labeled virtual profiles that use AI-assisted replies. Reports and blocking are available for those profiles too.

Sharing

We do not sell personal data. We use service providers only to operate core features, including hosting, Firebase Cloud Messaging for push notifications, and OpenAI for AI-assisted virtual profile replies when enabled.

Security

RandoChat uses HTTPS for app traffic, stores passwords as hashes, and keeps private server configuration outside the public web root.

Deletion

You can delete your account in the app or request deletion at Delete account. Account deletion removes the account and associated server-side profile, chat relationships, tokens, blocks, and reports where database constraints require removal. Some moderation or legal records may be retained when required for safety, fraud prevention, legal compliance, or dispute handling.

Contact

Privacy inquiries: [email protected]

Last updated: May 6, 2026