Privacy Policy
Last updated 15 October 2026
Promptly is a messaging app where messages can be sent as AI-generated images. This policy explains what we collect, why, who helps us process it, and how you can delete it. Questions: support@promptly.aalveli.com.
What we collect
| What | Why |
|---|---|
| Account: email address, password (stored only as a secure hash), username, display name | To sign you in, let friends find you, and reset your password |
| Profile: bio, your "vibe" description, profile picture | Shown to other signed-in Promptly users |
| Messages and media: text, AI images and the text they were made from, photos you send, voice notes, captions, replies, reactions | To deliver them to the people in the chat |
| Connections: friends and friend requests, the trust level you choose for each friend (Friendly or Close), groups you're in and your role, invite links, people you block, chats you mute | To run chats and the trust and safety rules |
| Chat activity: when you last read each chat (for "Seen" and unread counts) | Read receipts and unread badges. "Typing…" signals are passed on live and never stored. |
| Image generation records: the text and style of each image request, its result, and a daily count | To apply the daily limit and the Friendly-chat rules, and to check where an image came from when it's used |
| Reports: who reported whom, the reason, and a copy of the reported message, photo or voice note | To review reports and keep evidence if the message is later unsent |
| Device: a push notification token and whether the phone is Android or iOS | To send notifications |
What we don't collect
- No location. Before a photo is uploaded, the app re-saves it as a new image, which is designed to leave behind the location and camera details stored inside the original.
- No access to your contacts.
- No advertising identifiers, analytics or tracking tools.
The app asks for the camera, your photos or the microphone only when you choose to send a photo or voice note, and asks to add to your photos only when you tap Save on an image.
Who can see what
- Your profile (username, display name, bio, vibe and profile picture) is visible to other signed-in Promptly users.
- Messages, images, photos and voice notes are visible only to the people in that chat. In Friendly chats and in groups, images and photos stay hidden until each recipient chooses to show them.
- A group's members see each other's profiles. Anyone with a group's invite link can join it, so if you share a link, people you don't know may see the group's members and messages sent after they join.
- Nobody can see whom you've blocked, muted or reported.
Who processes your data for us
We use these services to run Promptly. They process data only to provide their service to us.
| Service | What it handles |
|---|---|
| Supabase (database, storage, sign-in) | Everything listed above. Stored in Supabase's Sydney, Australia region. |
| fal.ai or Runware (AI images) | The text of an image request (your message, profile vibe, theme or group photo description) and the chosen style. Never your photos, voice notes or account details. |
| Brevo (email) | Your email address and the one-time code, when you reset your password. |
| Expo, Google Firebase Cloud Messaging, Apple Push Notification service | Your device's push token and the notification itself, which can include the sender's name and a preview of the message. Hidden images are never described. |
We don't sell, rent or trade your data, and we don't share it with anyone else unless the law requires it.
How long we keep it, and deleting it
- Your data stays until you delete it.
- Unsend removes a message's text, image, photo or voice note for everyone. The file itself is deleted unless someone has reported the message, in which case it's kept with the report.
- Delete account (Me > Delete account) permanently removes your profile, your messages, images, photos and voice notes, your friendships, trust levels, blocks, mutes, devices, and reports made by or about you. Other people keep the messages they sent. See how to delete your account, including without the app.
- Deleted data can remain in encrypted backups for a short time before they're overwritten.
Security
Data travels over encrypted connections. Every table is protected by rules in the database itself that only let people reach their own data and the chats they're in. Images, photos and voice notes are stored privately and handed out only through short-lived links, to people allowed to see them.
Age
Promptly is for people aged 18 and over. We don't knowingly collect data from anyone younger. If you believe someone under 18 has an account, contact us and we'll remove it.
Your choices and rights
- See and change your profile in the app at any time.
- Delete messages (unsend) or your whole account in the app.
- Ask us for a copy of your data, or for anything else about your privacy, by emailing support@promptly.aalveli.com. We'll reply within 30 days.
Depending on where you live, you may have further rights under local law, such as the right to complain to a data protection authority.
Changes
If we change this policy, we'll update the date at the top, and tell you in the app if the change is significant.