Privacy Policy

Last updated: June 2026

🔒 Telebey is built with privacy as a core principle. We collect only what's necessary to run the service and never sell your data to third parties.

1. Information We Collect

When you use Telebey, we may collect the following:

Account information: Email address, phone number, username, display name, and profile picture — provided by you at registration.
Messages: Text, images, audio, and files you send through the platform. These are stored in our secure Supabase database.
Device information: Browser type, operating system, and IP address for security purposes.
Usage data: When you log in, send messages, or interact with features — for app functionality and debugging.

2. Phone Number OTP Verification

When you register with a phone number:

We send a One-Time Password (OTP) via SMS to verify that the number belongs to you.
You must verify the OTP before your phone number is linked to your account.
We do not allow using a phone number that you cannot verify via OTP — this prevents impersonation.
Your phone number is stored securely and is not visible to other users by default unless you choose to share it.

3. Google Sign-In

If you sign in via Google:

We receive your name and email from Google after you grant permission.
We do not receive your Google password.
You can revoke access anytime from your Google Account settings.

4. How We Use Your Information

To provide and operate the Telebey messaging service.
To verify your identity and prevent unauthorized access.
To send you service-related messages (e.g., OTP codes, password resets).
To improve app performance and debug issues.
To comply with legal obligations.

5. Data Sharing

We do not sell, rent, or trade your personal information. We may share data only with:

Supabase: Our database and authentication provider (data stored in secure cloud infrastructure).
Twilio (if applicable): For SMS OTP delivery only — they receive your phone number but not your messages.
Law enforcement: Only when legally required by a valid court order or legal process.

6. Who Can Search For You

By default, only users who know your exact username or phone number can find you. You can control this in Settings → Privacy:

Set who can message you (Everyone / Nobody).
Show or hide your phone number.
Control who sees your last seen and online status.

7. Data Retention

Your messages are stored as long as you maintain an account.
Deleted messages are removed from our servers immediately.
If you delete your account, all your data is permanently erased within 30 days.

8. Cookies

We use essential cookies and localStorage for:

Keeping you logged in (session token).
Remembering your theme, font size, and accent color preferences.
Offline message queue (so messages aren't lost when you're briefly disconnected).

We do not use advertising cookies or third-party tracking cookies.

9. Children's Privacy

Telebey is not intended for users under 13 years of age. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it promptly.

10. Security

All data is transmitted over HTTPS (TLS encryption).
Passwords are hashed and never stored in plain text.
Row-Level Security (RLS) ensures users can only access their own data.
OTP verification is required for phone-based authentication.
Rate limiting is enforced on authentication endpoints.

11. Your Rights

You have the right to:

Access your personal data stored by Telebey.
Correct inaccurate data via Settings.
Delete your account and all associated data.
Export your data (contact us).
Opt out of non-essential communications.

12. Contact Us

For any privacy concerns or data requests, contact us at:

privacy@telebey.app

We will respond within 7 business days.

13. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via in-app notification or email. Continued use of Telebey after changes constitutes acceptance of the updated policy.