Privacy Policy
This policy explains what information Thingwethink ("we", "us") collects, how it is used, and the choices you have. By using thingwethink-fdf0b.web.app you agree to this policy.
1. Information we collect
Account information
When you sign in with Google, Google Firebase Authentication gives us your name, email address, profile photo and a unique account identifier. We never receive your Google password. We do not ask for your phone number.
Profile information
Your display name, "about" text, profile photo, theme and notification preferences, and the random 8-character id generated for you are stored in our database (Google Cloud Firestore).
Messages and media
Text messages, images, voice messages, reactions, replies, read receipts and typing indicators are stored in Firestore so they can be delivered and shown on your devices. Images and voice messages are stored as compressed data inside Firestore documents. Messages are protected in transit and at rest by Google's infrastructure and by our access rules, but they are not end-to-end encrypted. Please do not share passwords, banking details or other highly sensitive information in chats.
Calls
Voice and video calls use WebRTC, which connects participants directly where possible. Call setup data (session descriptions and network candidates) passes through Firestore, and Google's public STUN servers are used to discover network routes. As a result, your IP address may be visible to the other participant and to those STUN servers during a call. Call audio and video are not recorded or stored by us.
Device and usage data
Our hosting provider (Firebase Hosting) and our advertising partner may automatically receive technical data such as IP address, browser type, device type, pages visited and timestamps. Your browser's local storage keeps your selected theme.
2. How we use information
- To create your account, let others find you by id, and deliver messages and calls.
- To operate, secure and improve the service and prevent abuse and spam.
- To respond to support requests and legal obligations.
- To show advertising on our public pages (see section 4).
We do not sell your personal information.
3. Disappearing messages and retention
If you turn on disappearing messages in a chat, new messages are hidden after the timer you choose and are removed from our database by an automated expiry policy, which can take up to about 24 hours after expiry. Other messages are kept until deleted. "Delete for everyone" replaces a message with a deleted notice for all members. Content already seen or copied by another person cannot be recalled.
4. Advertising, cookies and Google AdSense
We use Google AdSense to display ads. Google and its partners are third-party vendors that use cookies, web beacons and similar technologies to serve ads based on your prior visits to this and other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the internet.
- You can opt out of personalized advertising by visiting Google Ads Settings, or opt out of some third-party vendors' use of cookies for personalized advertising at aboutads.info.
- Learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.
- Users in the European Economic Area, the United Kingdom and Switzerland are shown a consent message so they can choose how their data is used for ads.
Ads are shown on our public information pages and not inside your private conversations.
5. Other service providers
We rely on Google Firebase (Authentication, Firestore, Hosting) to run the service and on Google Fonts to load typefaces. These providers process data under their own privacy policies: policies.google.com/privacy and firebase.google.com/support/privacy.
6. Sharing
Other users can see your display name, photo, about text and id. Messages are visible to the members of the chat they were sent in. We may disclose information if required by law or to protect the rights, safety and security of our users and the service.
7. Your choices and rights
You can edit your profile at any time inside the app. You may request access to, correction of, or deletion of your account and associated data by emailing pheonixadvertising1@gmail.com from the address linked to your account. Depending on where you live (for example under the GDPR or Indian data protection law) you may have additional rights, which we will honour as required.
8. Children
Thingwethink is not directed to children under 13 and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will remove it.
9. Security
We use industry-standard safeguards provided by Google Cloud and restrict database access with security rules. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Changes
We may update this policy from time to time. The "last updated" date above shows the latest revision.
11. Contact
Questions about this policy? Email pheonixadvertising1@gmail.com or visit our contact page.