Effective Date: August 23, 2026 | Last Updated: August 23, 2026
Smilee ("we," "our," or "us") provides a mobile communication application (the "App") that enables users to send end-to-end encrypted messages, make voice and video calls, share screens, and enjoy co-viewing experiences (Watch Party). This Privacy Policy describes the categories of personal information we collect, how we use and protect it, with whom we share it, and the choices available to you.
It applies to all users of the Smilee mobile application available on the Google Play Store.
By downloading, installing, or using Smilee, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the App.
Data Category
Examples
Purpose
Account & Authentication
Email address, password (hashed; never stored in plaintext)
Account creation, sign-in, OTP verification, password reset
Profile Information
First name, last name, username, profile photo
Display your identity to friends and contacts
User-Generated Content
Text messages, images, videos, files
Facilitate communication between users
Friends List
Users you have added as contacts
Enable connecting and communicating
Data Category
Examples
Purpose
Device Information
Device model, OS version, unique identifiers
App compatibility & diagnostics
Network Information
IP address, connection type, network status
Real-time communication sessions
Push Tokens
Firebase Cloud Messaging (FCM) tokens
Incoming call alerts & message notifications
Presence Status
Online/offline indicator
Show availability to contacts
Call Metadata
Call type, caller/callee ID, timestamp, status
Call history & call-back functionality
Ad Identifiers
Android Advertising ID (AAID)
Serve ads via Google AdMob
Message Content: All messages are end-to-end encrypted (X25519 + AES-256-GCM). We cannot read, access, or decrypt your messages.
Call Recordings: We do not record audio or video calls. Streams use WebRTC DTLS-SRTP encryption.
Screen Share Content: Streamed in real time, never recorded or stored.
Precise Location: We do not collect GPS or geolocation data.
Phone Contacts: We do not access your device's contact list.
Provide Core Services: Account management, messaging, voice/video calls, screen sharing, Watch Party.
Authentication & Security: Identity verification, OTP, password reset, fraud prevention.
Push Notifications: Real-time call alerts, message notifications, Watch Party invitations.
Call History: Store call metadata for your in-app call log.
Presence & Status: Show online/offline status to your friends.
Display Advertising: Serve ads via Google AdMob.
Performance & Stability: Crash diagnostics and app improvement.
⚠️ We do NOT use your information for:
Selling personal data to third parties
Profiling users for unrelated purposes
Training machine-learning models on your private communications
Each permission is required for specific functionality and used only for its stated purpose:
📷 Camera
Profile photos & video calling
🎤 Microphone
Voice & video calling
🖼️ Photos & Media
Send/receive image & video attachments
🔔 Notifications
Incoming calls, chat alerts, Watch Party
📱 Full-Screen Intent
Incoming call UI over lock screen
🌐 Internet & Network
All real-time communication
📞 Foreground (Call)
Keep calls active in background
🖥️ Foreground (Screen)
Screen sharing in background
🔄 Foreground (Sync)
Screen-share session stability
📶 Bluetooth
Route audio to BT headsets
📳 Vibrate
Haptic feedback for calls
☀️ Wake Lock
Prevent sleep during calls
🔁 Boot Completed
Re-register notification listeners
🔓 Keyguard
Call screen over lock screen
You may revoke any permission at any time through Settings > Apps > Smilee > Permissions.
🟢 Supabase — Backend & Authentication
Data: Account credentials (hashed), profiles, friend lists, call metadata, presence, encryption public keys
Purpose: Authentication, real-time database, file storage, presence tracking
Policy: https://supabase.com/privacy
🟡 Firebase Cloud Messaging — Google LLC
Data: FCM tokens, device identifiers
Purpose: Push notifications for calls, messages, Watch Party
🔴 Google AdMob — Google LLC
Data: AAID, IP address, device info, ad interaction data
Purpose: Display in-app advertisements
Ad Choices: https://adssettings.google.com
🔵 WebRTC — Open Standard
Data: IP addresses (ICE/STUN/TURN), encrypted audio/video streams
Purpose: Peer-to-peer voice, video, and screen-sharing
Note: Streams encrypted with DTLS-SRTP — not accessible to us
Cloud (Supabase): Account data, profiles, friend lists, call metadata, encrypted message metadata, profile photos.
On-Device (SQLite & Secure Storage): Profile cache, message cache, call history, notification history, auth tokens, E2EE private keys. This data never leaves your device.
End-to-End Encryption (E2EE): X25519 key exchange + AES-256-GCM. Private keys stored exclusively on your device's secure enclave. We never access your keys or plaintext messages.
Transport Encryption: TLS 1.2+ (HTTPS) for all network traffic. DTLS-SRTP for WebRTC media.
Authentication Security: Passwords hashed before storage. Session tokens in encrypted secure storage.
Access Controls: Server-side Row Level Security (RLS) — users can only access their own data.
Account & Profile DataActive account → deleted on request
Chat Messages (encrypted)Active account → deleted on request
Call History MetadataActive account → deleted on request
Profile PhotosActive account → deleted on request
Push Notification TokensAuto-refreshed by Firebase
Local Cache (SQLite)On-device only → cleared on uninstall
Advertising Data (AdMob)Managed by Google
We do NOT sell, rent, trade, or commercially transfer your personal information to third parties.
We may share information only under these limited circumstances:
With Other Users: Profile info (name, username, photo, online status) visible to your friends.
With Service Providers: Supabase, Firebase, AdMob — solely for purposes in Section 5.
Legal Compliance: If required by law, regulation, or enforceable governmental request.
Rights & Safety: To protect rights, safety, or investigate fraud.
View and update your profile (name, username, photo) directly in the App at any time.
Request complete account deletion by emailing smilee082002@gmail.com. Upon verified request, we will:
Delete your account and authentication data
Delete your profile information and photo
Delete chat and call history from our servers
Remove your data from other users' friend lists
Complete deletion within 30 days
Disable push notifications through your device's notification settings at any time.
Reset Android Advertising ID in Settings > Google > Ads
Enable "Opt out of Ads Personalization" on your device
Revoke permissions via Settings > Apps > Smilee > Permissions.
Smilee is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover a child under 13 has provided information without parental consent, we will delete it promptly. Contact us at smilee082002@gmail.com if you believe this has occurred.
Your information may be transferred to and processed in countries other than your country of residence, as our providers (Supabase, Google/Firebase) operate globally. Appropriate safeguards are in place per this Privacy Policy and applicable data protection laws.
We may update this policy periodically. When material changes occur:
We will update the "Last Updated" date at the top.
We may notify you through the App.
Continued use after changes constitutes acceptance of the updated policy.
✅ Google Play Developer Policies✅ Google Play User Data Policy✅ Google Play Families Policy✅ GDPR Principles✅ CCPA Principles
Questions, concerns, or data requests? Reach us at:
📧 smilee082002@gmail.com
© 2026 Smilee. All rights reserved.