Chathub

Privacy Policy

Chathub App · chathubapp.com · Effective 2026-01-31 · Last updated 2026-11-12

Changed 2026-11-12: section 4.1 now explains the protected copy of an expired disappearing message that we may keep for 30 days for safety, and how long a reported message is kept.

Changed 2026-11-07: the 9 November clean-up section no longer offers a refund of unused subscription time; purchases are non-refundable, except where the law or the app store's own policy requires it.

Chathub App ("we," "us," or "our") operates a social networking and communication platform that connects users worldwide through the Chathub Android app and chathubapp.com. We are committed to protecting your privacy and being transparent about how we collect, use, share, retain, and safeguard your information. By using Chathub App you agree to this Privacy Policy.

1. Information We Collect

1.1 Account information (provided by you)

1.2 Device & technical information (automatically collected)

1.3 Usage & activity data

1.4 Content you create

1.5 Safety & moderation data

1.6 Subscription & billing information

1.7 Location information

2. How We Use Your Information

2.1 Provide core services

2.2 Personalization & improvement

2.3 Safety & security

2.4 Account management

2.5 Analytics & business operations

2.6 Legal bases (EU/EEA, UK and Switzerland)

Data protection law in these regions (GDPR Article 6) requires a legal basis for each use of personal data. These are ours:

Purposes and their legal basis
Purpose Legal basis
Your account, profile, discovery, messages, calls, games and push notifications (sections 2.1 and 2.4) Performance of our contract with you (Art. 6(1)(b))
Subscriptions and payments Performance of our contract with you (Art. 6(1)(b)); keeping payment and tax records is a legal obligation (Art. 6(1)(c))
Safety and security: moderation, photo checks by Hive AI, automatic Hive AI checks of messages someone reports, reports (including transcribing a reported voice message with Google Cloud Speech-to-Text so our safety team can review the report), integrity and anti-abuse checks, appeals (section 2.3), keeping a protected copy of expired disappearing messages for 30 days (section 4.1) Our legitimate interest, and our users' interest, in a safe service free of abuse and fraud (Art. 6(1)(f))
Photo checks by Google Cloud Vision (section 3.2) Your consent, given in the photo-check notice and withdrawn with the “Photo safety checks” switch (Art. 6(1)(a)). Hive AI checks continue on the legitimate interest above.
Reporting child sexual abuse material, keeping material the law requires us to keep, and answering lawful requests Legal obligation (Art. 6(1)(c))
Interest tags (section 10.2) Your consent, given and withdrawn with the in-app toggle (Art. 6(1)(a))
Website analytics on chathubapp.com (section 10.6) Your consent (Art. 6(1)(a))
App crash reports, app usage analytics and A/B tests (sections 2.2 and 2.5) Our legitimate interest in keeping the app working and improving it (Art. 6(1)(f))
Marketing emails Your consent (Art. 6(1)(a)); we send none unless you opt in

Where we rely on legitimate interests, you can object (section 10.8).

3. How We Share Your Information

3.1 With other users (publicly visible)

The following information is visible to users you interact with:

You can also choose to be notified when a specific contact you've chatted with comes online. This optional notification is powered by that contact's online/offline status transitions — the same status described above. If the contact turns on Appear Offline, Hide Online Status, or Hide From Online List, you will not receive this notification, regardless of your subscription. You can remove your notification subscription for any contact at any time. If you have blocked a contact, or a contact has blocked you, neither of you can subscribe to receive this notification about the other.

3.2 With third-party service providers

These companies receive personal data from our Android app or our website. The table lists each one, what it receives and why.

Photos you send or upload, including profile photos, are checked automatically for safety before others see them. Hive AI checks every photo. If you agreed to photo checks by Google Cloud, Google Cloud Vision may also check your photos. A voice message that someone reports is transcribed by Google Cloud Speech-to-Text for our safety team. Before your first photo or voice message, the app shows a short notice that names these providers. You can choose OK (Hive AI and Google Cloud) or “Use Hive AI only”; your photo is sent either way. Messages someone reports are checked automatically by Hive AI for safety. There is no separate notice for this; it happens only after someone reports a message. We keep a record of your choice (the date, the notice version and which app showed it) with your account, so the notice is shown once. If your profile details are removed because the account was not used for 90 days, we keep this record in a small private record linked to your account ID.

Turning photo checks by Google Cloud off or on. You can change your choice at any time with the “Photo safety checks” switch: in the Android app under Settings, Privacy, and on this website under Settings, Privacy (update the Android app if you do not see it). On this website the switch appears once you have answered the photo-check notice, and only while Google Cloud photo checks are in use; while they are paused, no photo is sent to Google Cloud. When it is off, only Hive AI checks your photos, and you can still send photos. Turning it back on shows the same notice again. Turning it off does not stop the transcription of voice messages that someone reports, because that protects the people who report abuse.

Companies that receive personal data, what they receive and why
Company What it receives Why
Google (Firebase, Google Cloud, Google Analytics) — privacy policy Your account and profile data, messages, device identifiers, IP address, app and website usage, crash reports, Play Integrity results, and voice messages that someone reports, and, for people who agreed to photo checks by Google Cloud, photos sent for automatic safety checks Our database and sign-in, push notifications, analytics, crash reports, integrity checks, and transcribing reported voice messages (Speech-to-Text) for human safety review, and automatic safety checks on the photos of people who agreed to it (Google Cloud Vision: SafeSearch and label detection)
Amazon Web Services (AWS) — privacy policy Photos, videos and voice messages you send or upload; your email address and the emails we send you Storing media (S3) and sending email (SES)
Agora — privacy policy The audio and video of your voice and video calls while the call is live, a call ID linked to your account, and your IP address Carrying calls in real time through Agora's servers. Calls are not peer-to-peer, and we do not record or store them.
Hive (Castle Global, Inc., also trading as Deploy) — privacy policy Photos you send or upload: chat photos, profile photos and photo-verification selfies; the text of messages someone reports Automatic checks for nudity, violence and child-safety risk. Hive AI checks every photo. Messages someone reports are checked automatically by Hive AI for safety. Google Cloud Vision (Google's image analysis service) may also check the photos of people who agreed to it; anyone can turn that off (see turning photo checks by Google Cloud off or on), and then only Hive AI checks their photos.
Klipy — privacy policy The words you type in GIF search, your IP address and device or browser information. No account ID. GIF search
GIPHY — privacy policy The words you type in GIF search, your IP address and device or browser information. No account ID. GIF search
Gamezop (Advergame Technologies Pvt. Ltd.) When you open a game in the Android app: your IP address, device and browser information, cookies and device identifiers its pages set, an approximate location it works out from your IP address, and your play in the game. Older app versions also send your account ID (section 3.2.1). Providing the games, and its own ads in the game pages (section 3.2.1)
Google Play — privacy policy Your purchases in the Android app, through your Google account Payments and subscriptions in the Android app
Razorpay (chathubapp.com only) — privacy policy Your name and email address (filled in if we have them), the phone number and payment details you enter at checkout, and an order reference Payments and subscriptions on chathubapp.com
ipify (api.ipify.org) Your IP address Finding your public IP address
ipwho.is Your IP address Finding the country and city of that IP address (not your precise location)
Have I Been Pwned (api.pwnedpasswords.com, Troy Hunt's Pwned Passwords service) — privacy policy Only when you set or change a password on chathubapp.com: your IP address, browser information, and the first 5 characters of the SHA-1 hash of the new password. It never receives your password or its full hash. Refusing a password that has appeared in a known data breach. The service sends back every breached hash that starts with those 5 characters, and your browser checks the list itself, so the service cannot tell which password you chose (k-anonymity).

Who calls ipify and ipwho.is: the versions of the Android app available today, from your device. Our website no longer calls them: it asks our own server, and our server reads your IP address and an approximate place (country, region and city) from Google Cloud, which runs our server, so no other company receives your IP address for this. We have changed the Android app the same way, and a coming version no longer calls them. Older versions of the Android app keep calling ipify and ipwho.is until they are updated. Interest tags are worked out on your device (TensorFlow Lite); no message text is sent to any company for this.

How these companies must protect your data. Google (for Firebase and Google Cloud), AWS and Agora process data for us under data processing terms that are part of our contracts with them. Those terms bind them to use the data only to provide their service to us and to protect it to the same or an equal standard as this policy. Google processes photos sent to Google Cloud Vision under its Cloud data processing terms and does not use them to train its models. Google Play and Razorpay handle payments under their own privacy policies and the payment laws that apply to them. Klipy, GIPHY, Gamezop, ipify, ipwho.is and Have I Been Pwned receive data straight from your device or browser when you use the feature, and their own privacy policies apply. We have asked Hive in writing for the same contract commitments (no use of our users' photos or messages to train its models, no manual review by its workers, and short retention). Until Hive confirms them, Hive's own terms apply to the photos and reported messages it checks.

3.2.1 Games provider (Gamezop)

The Games section of our Android app is provided by Gamezop (Advergame Technologies Pvt. Ltd.), an independent third party. When you open a game, the game loads from Gamezop in an in-app web view in our mobile apps. Our website does not offer Gamezop games and does not send Gamezop any data; its Games tab lists only our own in-chat games.

Older app versions. Versions of our apps released before the privacy update of 29 September 2026 send Gamezop your account ID whenever you open a game. In the Android app, games marked as multiplayer also send your display name and a placeholder image value (not your photo). In the iOS app, every game launch also sends your display name and a placeholder image value (not your photo).

Current versions. App versions with the privacy update of 29 September 2026 send Gamezop no identifier for your account: not your name, photo, email, phone number or account ID, and no code derived from them. Your game progress is therefore not linked to your account with us. Gamezop also receives the technical data any web page receives when you play (such as your IP address, device and browser information, and your play inside its game page).

Gamezop's game pages may show advertisements, which can be targeted and interest-based, and may use cookies or similar technologies, under Gamezop's own privacy policy: Gamezop Privacy Policy. We do not control those ads or that data collection. You can avoid all of it by not opening games.

3.3 Legal requirements

We may disclose your information if required by law or to:

3.4 Business transfers

If Chathub App is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4. Data Retention

One-time clean-up on 9 November 2026. On 9 November 2026 (India time) we will delete, from our servers: all chat messages, including messages in rooms and groups and the message records of older app versions, and the media links inside them, except messages kept for an open report or a legal hold; all chat lists; all in-app notifications; and the coin records of older app versions that have no coins left (no current app uses coins). We will also delete, for guest accounts (used without an email, phone, Google or Apple sign-in) that have not been used for 90 days: the profile details (name, bio and other profile fields), call history, profile-view history, chat mutes and photo-verification status; your photos stay stored until you delete your account. You will still be able to sign in to such an account, and the app will ask you to set up your profile again. Profiles saved by older app versions under an old account number (accounts made between 2019 and 2024) can no longer be opened by any current app. For those linked to a sign-in (email, phone, Google or Apple), we will keep only your name, gender, age, country, language, sign-up date, the link to your profile photo and the link to your sign-in, until you delete your account, so that we can offer to bring your profile back when you sign in again; everything else in that old profile will be deleted. Old profiles that are not linked to any sign-in will be deleted. We will not delete: accounts that sign in with email, phone, Google or Apple; guest accounts used in the last 90 days; guest accounts with a subscription or an account-deletion request in progress; subscriptions and payment records, including coin balances above zero bought in older app versions (if you bought coins in an old version of the app, contact support; your coin balance is kept); blocks, reports and moderation records; child-safety records; ban records; the profiles of accounts that made, or are named in, a report, a child-safety record, a legal hold, a suspension or a ban; account-deletion requests; and, for accounts whose profile details are removed, the record of what you agreed to (our Terms, this Privacy Policy, age confirmation and the photo-check choice). If you asked us for a copy of your data before 9 November 2026, we answer that request first. Chats saved on your phone by older app versions may still show until you clear the app's data; they will no longer be on our servers. On the day, the app shows a maintenance screen from about 3:45 to 10:00 am India time; close and reopen it after 10:00 am. Account deletion requests are paused during the maintenance window (Monday 9 November, about 4:10 to 8:30 am India time). Requests made before it are processed as normal, and you can request deletion again after it. A copy of the old data stays in our weekly database backup until 10 November 2026, when it is deleted automatically. If you have a subscription and do not want to continue after this change, you can stop it from renewing at any time; purchases are non-refundable, except where the law or the app store's own policy requires it. Refunds for purchases made through Google Play or the App Store are handled by that store.

What we keep after you delete your account, and for how long

See our Data Deletion page.

4.1 Disappearing messages (where available)

When the disappearing messages feature is available and enabled on the Chathub Android app or chathubapp.com, each participant in a conversation can set a timer (for example, 5 minutes, 1 hour, 1 day, or 1 week). When a message's timer runs out, the message is hidden from the chat for both people and can no longer be opened in the app.

Protected copy for safety. After a disappearing message expires, we may keep a protected copy of it on our servers for 30 days. No one can open this copy in the app, including you and the other person. It is used only by our safety systems, and our safety staff look at it only if the message becomes part of a report (see below) or the law requires us to preserve or provide it (section 3.3). We keep it only for safety, fraud prevention and compliance with the law: so that if someone reports the chat after the message has disappeared, we can still check what was sent. The copy is then deleted automatically, normally within about one day after those 30 days end.

Reported disappearing messages. If a disappearing message is part of a report, it and the surrounding messages attached to the report may be kept as evidence for our safety review. Once the protected copy described above is in place, this evidence is kept until 365 days after the report is closed (closed means a final decision has been made, including on any appeal) and then deleted; until then, it is kept as described under "Reports about your account" in section 4. We keep it longer where the law requires it: for example, content reported to the US National Center for Missing & Exploited Children (NCMEC) is kept for at least 1 year after that report, and content is kept for as long as a court, the police or another authority lawfully asks us to preserve it. Content that may involve the sexual abuse or exploitation of a child is preserved and reported to the authorities the law requires (in India, the police), regardless of any timer.

This feature may not be available to all users yet.

4.2 Message privacy: expiring messages and view-once photos (where available)

Where message privacy is available in the Chathub Android app, the sender of a message can choose that it expires a set time after it is sent (1 day or 1 week), or a set time after the other person first opens it (from 5 seconds to 1 hour). A photo can also be sent as "view once": the other person can open it one time. A view-once photo that is never opened expires 30 days after it was sent.

What "expires" means. When the time ends, the message or photo is hidden in the app and can no longer be opened. For safety and abuse investigations we keep a server copy, which only our trust and safety systems and staff can access and never other users, for 14 days after it expires. We then delete it from our servers, normally within about one day after those 14 days. A message set to expire after it is opened stays stored until it is opened, and then follows the same timing.

Safety checks. Before a view-once photo is delivered, it is checked the same way as other photos. Hive AI checks it automatically for safety. If the sender agreed to photo checks by Google Cloud, Google Cloud Vision (Google's image analysis service) may also check it; Google processes it under its Cloud data processing terms and does not use it to train its models. A photo that breaks our rules is not delivered.

Reports and legal holds. If the person who received a protected message or photo reports it, we keep the server copy until our trust and safety staff finish reviewing the report, instead of deleting it after 14 days, and they can view it to decide the report. When that review is finished, we delete the copy on the normal schedule above (normally within about one day, or 14 days after the message expired if that is later). Content that may involve the sexual abuse or exploitation of a child is preserved under legal hold, reviewed by trained people, and reported to the authorities the law requires (in India, the police). We keep it for at least as long as the law requires (in the United States, one year after a report to NCMEC) and until that review and any legal process are finished.

This feature may not be available to all users yet.

5. Data Security

We implement industry-standard security measures to protect your information:

While we strive to protect your data, no method of transmission over the internet is 100% secure. Use Chathub App at your own risk.

6. Children's Privacy

Age restriction: Chathub App is intended for users aged 18 years and older. We do not knowingly collect information from anyone under 18. If you are under 18, do not use this app or provide any personal information.

What happens when someone under 18 is found. At sign-up we ask for a date of birth. A person who confirms a date under 18 cannot finish sign-up with that date, and the app or website records a lock on that device or browser (below). If we ask after you have already signed in, for example when you start sign-up with Google or email in the Android app, or for an older account that has no date of birth, the sign-in you used and its email address already exist, and an under-18 answer does not delete them: you can delete them on the Data Deletion page or ask us to (section 12).

In Android app versions before 2.449, the app sets the lock to end a set number of days after the day of the answer. The phone keeps only the end of the lock and a mark that our server has not yet been told about it, not the date of birth. Android's backup of the app to your Google account, and moving your data to a new phone, include these two items on purpose, so that the lock is restored along with that backup or move. The app may also tell our server that this device gave an under-18 answer. That message includes an identifier of the device, but no date of birth and no age.

The Android app also asks Google Play for its age signal (the Play Age Signals service), at most once a day. Google Play gives an answer only in some places. The app keeps the answer on the phone: the kind of answer (for example verified, declared by the user, or a supervised account), whether it says you are an adult, the age range it gives, and when the app last asked. It does not send this answer to our server or to analytics, and it is not included in Android's backup. Today the app uses it only to avoid asking for notification permission late at night unless Google Play says you are an adult. It does not use it to lock or unlock the age check today.

On the website, the lock lasts until the 18th birthday. The browser keeps the end of the lock in this site's local storage and in a cookie. Because the lock ends on the 18th birthday, that stored end shows the date of birth to the day. The cookie expires when the lock ends. The copy in local storage is no longer used after that, but the website does not delete it. The website sends the date of birth to our server to set the lock there as well. If that does not work, the browser keeps only the time of the first try, not the date, and tries again when the age screen opens, for up to 30 days.

When you start sign-up without Google or email, the Android app signs in without a name or email (an anonymous sign-in), and it does the same before it reports an under-18 answer if it is not signed in yet. The website does the same when you confirm your date of birth and you are not signed in yet, so that our server can check the age (for every date, not only an under-18 one), and when it sends a request for review of the lock. If you then create your account with Google or email, the website links it to that anonymous sign-in. An anonymous sign-in stays in our sign-in system (Firebase Authentication) with its account ID and the times it was created and last used. On the website, once your profile exists, and while website analytics is on or where it is not needed (section 10.6), our server records with your account your IP address and the city, region and country worked out from it, in a part of your account only you and our server can read; only the city is shown in your profile (section 1). Website accounts made before 5 November 2026 may still have an older copy of the IP address and that place in the profile, which other signed-in users' apps can read; we are moving it to the private part of the account. We do not delete anonymous sign-ins or these details automatically today. To have them deleted, contact us (section 12).

Our server works out from the date when the lock ends and does not store the date as you gave it. It stores the end of the lock, linked only to one-way hashes of the device and sign-in identifiers. When a report carries a date of birth, the lock ends on the 18th birthday, so this stored end shows the date of birth to the day. When a report carries no date, as from Android app versions before 2.449, the server lock lasts 30 days from the report. The server deletes the stored end within about a day after the lock ends, or earlier if a review lifts the lock. Our app analytics, and on the website our website analytics while it is on (section 10.6), record that an under-18 answer was given (the event age_declared), with the analytics identifier of the device or browser and, if you are signed in, your account ID, but not the date of birth or the age. This record is part of the analytics copy described in section 4, which has no automatic end date today. To ask what we hold about you, or to ask us to delete it, contact us (section 12).

A report that someone appears to be under 18 goes to a person on our safety team, who reviews it. If the review confirms the user is under 18, the account is closed. We keep only the records described in section 4 (for example safety reports, and any material the law requires us to keep). The rest is deleted on request through the Data Deletion page or by email. An adult whose account was closed by mistake can appeal (section 9).

See our Child Safety Standards page for our complete approach to preventing child sexual abuse material (CSAM), how we report to authorities, and how to report a child-safety concern.

7. International Data Transfers

Chathub App operates globally. Your information may be transferred to and stored on servers located in different countries, including the United States (Firebase, AWS). The information needed to run your account, your messages and our safety features is stored and processed on these servers because that is where the service runs; we process it there to provide the service you use. The Chathub Android app sends usage analytics (Firebase Analytics) and crash reports (Firebase Crashlytics) to Google, which processes them on its servers, including in the United States. On chathubapp.com, Google Analytics sends data to Google only while website analytics is on. Where website analytics needs your consent (see section 10.6), it is not started until you accept, and you can withdraw that consent at any time in Privacy choices.

Transfer safeguards. When we transfer personal data from the EU/EEA, the UK or Switzerland to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (with the UK addendum), which Google, AWS and Agora include in their data processing terms with us. Companies in section 3.2 that act under their own terms use their own transfer terms.

8. Third-Party Links

Chathub App may contain links to external websites or social media profiles (e.g., Instagram, Snapchat handles). We are not responsible for the privacy practices of these third-party sites. Please review their privacy policies before sharing information.

9. Automated Safety Decisions and Appeals

Chathub App uses automated safety systems to detect spam, abuse, harmful content, account-integrity risk, and suspected policy violations. These systems may use message content, uploaded images, reports, moderation counters, device identifiers, IP/network metadata, Play Integrity verdicts, app-version data, account status, subscription status, and related anti-abuse signals.

Automated safety decisions may show warnings, apply cooldowns or rate limits, temporarily suspend features, or restrict account access when multiple risk signals or confirmed violations meet our safety thresholds. We use these systems to protect users and the service, but they can be contested.

If you believe an automated moderation, integrity, or account-access decision is wrong, use the in-app appeal link or contact info@peppty.com. A human reviewer can evaluate the decision and the diagnostic details included with your appeal.

10. Your Rights & Choices

10.1 Access & correction

10.2 Interest tag suggestions: control and consent

10.3 Account deletion

10.4 Data portability & requests

You have the right to request a copy of your personal data. To make a data request:

We will respond to your request within 30 days. For account deletion, you can also use the "Delete Account" feature in the app settings.

10.5 Marketing communications

10.6 Cookie & storage policy

Android app: our mobile app does not use browser cookies. We use device identifiers and session tokens for authentication and analytics.

Web application: chathubapp.com uses localStorage and IndexedDB for essential functionality:

Website analytics (optional, not essential): in production, chathubapp.com uses Google Analytics (Firebase Analytics) to understand how the website is used, including page-load speed. If your browser's time zone or language region places you in the EU/EEA, the United Kingdom, Switzerland or India, it is not started until you accept in the consent prompt: the Google Analytics script is not loaded and no analytics data is sent. Elsewhere it is on by default and you can turn it off. We decide this from your browser settings only; we do not look up your location to decide it.

Identifiers: when website analytics starts, Google Analytics uses a Firebase installation ID stored in your browser. Turning website analytics off does not delete it; clearing this website's data in your browser does. The website also loads its settings with Firebase Remote Config, which uses a Firebase installation ID whether or not website analytics is on.

Privacy choices: you can change or withdraw your analytics choice at any time, as easily as you gave it, in Privacy choices: open Settings > Privacy & Safety > Privacy choices, or, without an account, chathubapp.com/app/privacy-choices (the "Do Not Sell or Share My Personal Information" link at the bottom of every page of our public website and in the website's side panel on a computer). Changes apply right away. Turning website analytics off stops Google Analytics collection on the open page. On later visits it is not started, however long ago you chose it. Where we ask before starting analytics, we ask again after 13 months; until you answer, an earlier "off" stays off. Your choices are saved in the browser you use and stay there after you sign out, so set them again on another browser or device. If you are signed in, your Do Not Sell or Share opt-out is also saved to your account.

Google consent mode: when Google Analytics starts, the website first passes your choice to it through Google consent mode. If you turn website analytics off after it has started, analytics storage is set to "denied" and analytics collection is turned off. For every visitor, ad storage, ad user data and ad personalization are always set to "denied", and Google signals and ad personalization signals are always off, so website analytics data is not used for advertising.

Our website does not show ads and does not use third-party advertising cookies. In the Android app, games are provided by Gamezop, whose pages may show ads and use cookies (see section 3.2.1). You can clear localStorage / IndexedDB through your browser settings at any time.

10.7 California privacy choices

California residents can:

Do Not Sell or Share My Personal Information: Chathub App does not sell, rent, or trade your personal information to third parties for monetary compensation. We do not participate in data broker activities. Our website does not sell or share personal information: the Google Analytics features that would let Google use analytics data for advertising (Google signals and ad personalization signals) are off for every visitor.

Android app: the Chathub Android app itself contains no advertising SDK, does not request or collect the Android advertising ID, and runs its Firebase Analytics with ad storage, ad user data and ad personalization set to "denied". The Games section is different. It opens Gamezop's game pages inside the app, and those pages show ads. When you open a game, Gamezop can collect cookies and device identifiers that its pages set, an approximate location it works out from your IP address, and your play in the game, and use them for targeted advertising under its own privacy policy (section 3.2.1). Older app versions also send Gamezop your account ID. California law can treat this as "sharing" for cross-context behavioral advertising, and our Google Play Data safety section declares it as data shared for advertising. The choices below apply to our website and cannot turn off ads inside Gamezop's pages; to avoid them, do not open games.

To opt out, open Privacy choices (Settings > Privacy & Safety > Privacy choices, or chathubapp.com/app/privacy-choices without an account) and turn on Do Not Sell or Share. On the website, Google signals and ad personalization are already off for everyone; the opt-out is recorded so that it also covers any future change, and website analytics can stay on. You do not need an account to opt out. If you are signed in, your opt-out is also saved to your account and applied in any browser where you sign in to the website. An opt-out stays in the browser where you made it, also after you sign out. It does not expire, and the website's own "reset local data" and account deletion keep it. Your browser itself can remove the choices it stores, for example when a private window closes or when you or the browser clear this website's data; to keep an opt-out in every visit, turn on Global Privacy Control in your browser (see below). Turning it off again asks you to confirm first.

Global Privacy Control: if your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of sale and sharing for that browser: Do Not Sell or Share is on and Privacy choices shows it as locked. The signal does not change your website analytics choice; you can still make that choice in Privacy choices. We process opt-out preference signals, such as Global Privacy Control, in a frictionless manner: we do not charge a fee, we do not change your experience of Chathub, and we do not show a pop-up or any other message in response to the signal. If you are signed in when we receive the signal, we also treat it as an opt-out for your account: it is saved to your account and applied in any browser where you sign in to the website.

How to send Global Privacy Control: use a browser that sends the signal, or add a browser extension that sends it, and turn it on in its settings if it is not on already. The list of browsers and extensions that support it is at globalprivacycontrol.org.

10.8 GDPR rights (European users)

If you are in the European Economic Area (EEA), you have the right to:

Website analytics on chathubapp.com is based on your consent if you are in the EU/EEA, the United Kingdom or Switzerland. It is not started until you accept it, and you can withdraw that consent at any time, as easily as you gave it, in Privacy choices (section 10.6).

10.9 India DPDP rights

If you are a resident of India, you have the rights granted under the Digital Personal Data Protection Act 2023, including the right to access, correct, complete, update, and erase your personal data, the right to withdraw your consent at any time, the right to grievance redressal, and the right to nominate. Website analytics on chathubapp.com is based on your consent: for visitors in India (as described in section 10.6) it is not started until you accept it, and you can withdraw that consent at any time, as easily as you gave it, in Privacy choices (section 10.6). See our India Privacy FAQ for a plain-language summary of these rights.

11. Changes to this Privacy Policy

We may update this Privacy Policy periodically. Material changes will be posted on this page with an updated "Last Updated" date and surfaced in-app as a re-acceptance prompt where applicable. Continued use of Chathub App after changes constitutes acceptance of the revised policy.

2026-11-11: sections 2.4 and 10.5 now say that the apps send occasional reminder notifications when you have not opened the app for a while, and how to turn them off.

2026-11-05: section 3.2 now says that our website no longer calls ipify and ipwho.is: our own server works out the approximate place from your IP address through Google Cloud. Only the versions of the Android app available today still call them. Section 1 and section 4 say that the website saves only your age, not your date of birth, and that the versions of the Android app available today still save the date with your account (a coming version saves only the age). Section 6 says that the website signs in anonymously when you confirm any date of birth before signing in, so that our server can check the age, and that your IP address and the place worked out from it are kept where only you and our server can read them, and that an older copy may remain in the profile of website accounts made before 5 November 2026 until we move it.

2026-11-04: section 3.2 now says that messages someone reports are checked automatically by Hive AI for safety, and lists reported messages among what Hive receives. It also gives the photo-check switch its current name and place (“Photo safety checks”, Settings, Privacy) and says that on this website the switch is shown only while Google Cloud photo checks are in use.

2026-11-03: section 3.2 now says which apps call ipify and ipwho.is (our website, and the versions of the Android app available today), and that a coming Android version stops calling them: our own server works out the approximate place from your IP address through Google Cloud instead.

2026-11-02: sections 4 and 6 now say that we keep a daily copy of app and website analytics in our own Google BigQuery storage with no automatic end date, that analytics records an under-18 answer (without the date of birth or the age), what the anonymous sign-in keeps, and what the Android app keeps from Google Play's age signal. Sign-up answers given on chathubapp.com before you create an account are now removed 24 hours after your last answer.

2026-11-01: chathubapp.com no longer uses Firebase Performance Monitoring; page-load speed is measured within website analytics (Google Analytics). Section 10.6 now also lists the install flag kept in your browser.

2026-11-01: section 3.2 now also lists Have I Been Pwned, which checks a new chathubapp.com password against known data breaches using only the first 5 characters of its hash. Weekly database backups are kept for 8 days (sections 4 and 10.3).

2026-11-01: section 3.2 now lists every company that receives personal data, with what it receives and why, and how each must protect it. Calls are described as carried through Agora's servers. New: legal bases (2.6), transfer safeguards (7), the India Grievance Officer and EU/UK representatives (12). Sections 1.2, 1.5, 6, 10.3 and 10.7 were corrected to match how the app works.

12. Contact

Peppty Technologies · Chathub App
Customer support: support@chathubapp.com
Corporate / legal: info@peppty.com
Website: www.chathubapp.com
Response time: we aim to respond to general inquiries within 48–72 hours.

For our legal terms, see the Terms of Service. For refunds and cancellation see the Refund & Cancellation Policy. To request deletion of your account see the Data Deletion page.

12.1 Grievance Officer (India)

Under India's Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, our Grievance Officer is:

Akhilesh Nandagiri, Founder, Peppty Technologies Private Limited
Email: support@chathubapp.com (subject line "Grievance")
Postal address: to be published

The IT Rules require our Grievance Officer to acknowledge a complaint within 24 hours and resolve it within 7 days (Rule 3(2)(a)(i)). A request to remove content of a kind listed in Rule 3(1)(b), for example content that is obscene, is an invasion of privacy, is harmful to a child or impersonates someone, must be acted on as fast as possible and resolved within 36 hours; this does not cover a claim that content belongs to someone else, infringes a patent, trademark or copyright, or breaks another law. For a complaint that content shows you nude or in a sexual act, or impersonates you (including morphed images), the IT Rules require us to take all reasonable and practicable steps to remove or disable access to that content within 2 hours of receipt. These are the time limits the IT Rules set. You can also use this address for questions about how we process your personal data.

12.2 EU and UK representatives

We are appointing representatives in the EU and the UK under Article 27 of the GDPR and the UK GDPR. Their details will appear here.

© 2026 Peppty Technologies · Chathub App