Legal

Privacy Policy

Last updated: July 6, 2026

Information we collect

  • Account information: your mobile number, name, and profile photo when you sign up.
  • Contacts: with your permission, we match your phone contacts against registered Convo users so you can find people to chat with. Contacts are not uploaded or stored on our servers beyond this matching step.
  • Messages and media: text messages, photos, and reply references you send are stored securely in our database and storage buckets so they sync across your devices.
  • Presence and activity: online/offline status and typing indicators are used to power real-time features and are not retained as history.
  • Device and push tokens: we store a Firebase Cloud Messaging token to deliver push notifications for new messages.

How we use your information

  • To create and secure your account, and authenticate you on sign-in.
  • To deliver messages and media in real time between you and the people you chat with.
  • To show presence, typing, and delivery status within your conversations.
  • To send push notifications for new messages when the app is in the background.
  • To let you enable biometric app lock (Face ID / fingerprint) for an extra layer of privacy on your device.

Data storage and security

  • Your data is stored using Supabase's managed database and storage infrastructure, with access controlled through authenticated sessions.
  • Biometric authentication is handled entirely on-device — we never receive or store your fingerprint or face data.
  • You can enable or disable the biometric app lock at any time from Settings.

Permissions we request

  • Contacts — to help you find friends already using Convo.
  • Camera and photo library — to send images in chats and update your profile photo.
  • Notifications — to alert you about new messages.
  • Biometric hardware (fingerprint/Face ID) — to lock the app, if you choose to enable it.

Data sharing

  • We do not sell your personal data to third parties.
  • Message content is only accessible to the participants of a conversation.
  • We use trusted infrastructure providers (Supabase, Firebase) solely to operate core app functionality such as storage, authentication, and push delivery.

Your choices

  • You can update your profile information at any time from Edit Profile.
  • You can revoke contacts, camera, or notification permissions from your device settings.
  • You can request deletion of your account at any time — see our Delete Account page for steps.

Contact us