Effective date: on first release of ConvoX on Google Play
This Privacy Policy explains what information the ConvoX mobile application (“ConvoX”, “the app”,
“we”, “us”) collects, how it is used and shared, and the choices and rights you have. ConvoX is a
social networking, messaging, and calling app. By creating an account or using ConvoX, you agree to
this Policy.
Controller. ConvoX is operated by Imdadul Haque, an individual
developer based in Bangladesh. Contact:imdadulhaque1440@gmail.com
Contents
1. Information we collect
Information you provide directly
Account creation: email address, display name, and password. We send a
one-time verification code to your email to confirm it.
Profile information (optional): username, phone number, date of birth,
gender, biography, profile photo, cover photo, headline, current city, hometown, relationship
status, website, languages spoken, education history (institution, degree, field of study,
years), work experience (job title, company, location, dates, description), and “featured”
links or items you choose to add.
Content you create: posts (text, photos, videos, polls), comments and
replies, reactions and likes, poll votes, and messages you send in one-to-one and group chats
(including text and any photos or media files you attach).
Groups and communities: groups and communities you create or join, and
their names, icons, cover images, descriptions, membership, and permission settings.
Social connections: the accounts you follow, follow requests you send or
receive, users you block, and reports you submit about other users or content.
Calls: when you place or accept a voice or video call, we process the
live audio and (for video calls) camera stream in order to connect you with the other
participant(s). We also store call history — the participants, start time, duration, call
type, and whether the call was answered or missed. ConvoX does not record or store the
audio or video content of calls.
Support communications: if you email us, we receive your email address and
the contents of your message.
Information from photos and media
When you attach a photo or video to a post or message, or set a profile or cover photo, the
selected file is uploaded to our servers. ConvoX uses the Android system photo picker and does
not request permission to read your entire photo library; it can only access the
specific items you choose.
2. Information collected automatically
Push notification token: a Firebase Cloud Messaging registration token is
generated for your device and stored on our servers, linked to your account, so we can deliver
notifications for messages, calls, and social activity.
Presence data: your online status and last-seen time, so other users can
see when you are available. You can hide this in Settings → Privacy.
Connection and log data: when the app communicates with our servers, our
backend and hosting provider process standard technical data such as your IP address, request
timestamps, and error logs, for security, abuse prevention, and diagnostics.
No advertising or analytics SDKs: ConvoX does not contain
third-party advertising software, and does not use third-party analytics or tracking SDKs. We
do not build advertising profiles and we do not track you across other apps or websites.
3. Device permissions
Permission
Why ConvoX uses it
Camera
Only during a video call you start or accept, and when you take a photo to attach to a post or message. Not used in the background.
Microphone
Only during a voice or video call you start or accept. Not used in the background or for any other purpose.
Notifications
To show message, call, and social notifications.
Display over other apps / full-screen intent
To show an incoming-call screen when your phone is locked, like a normal phone dialer.
Foreground service
To keep an ongoing call connected while the app is in the background.
You can revoke any permission at any time in your device’s system settings; some features will
stop working without them.
4. Data stored only on your device
The following are kept locally on your device and are not transmitted to us:
Your login session tokens (stored in the app’s private storage).
Your recent search terms.
Your language, theme (light/dark), and translation preferences.
A local cache of previously translated message text.
On-device translation
Message translation for Bengali, English, and Hindi is performed entirely on your device using
Google ML Kit. Translating a message does not send its text to our servers. The
first time you translate to or from a given language, ML Kit downloads a language model from
Google’s servers. The one exception is “Banglish” (Bengali written using Latin letters), which
Google ML Kit cannot process; those messages are sent to our server for transliteration.
5. How we use information
To create and maintain your account and authenticate you.
To operate core features: the feed, profiles, messaging, voice/video calls, groups, and
communities.
To display your profile, posts, and other content to other users in accordance with your
privacy settings.
To deliver push notifications you have enabled.
To keep the platform safe: enforcing our terms, reviewing reports, and detecting and
preventing spam, abuse, fraud, and security incidents.
To respond to your support requests.
To comply with applicable law and legal process.
6. Legal bases for processing (EEA/UK users)
Where the EU or UK GDPR applies, we rely on the following legal bases:
Performance of a contract — to provide the service you sign up for.
Legitimate interests — to secure the platform, prevent abuse, and maintain
and improve the service, balanced against your rights.
Consent — for camera, microphone, and notification access, which you grant
through Android’s permission prompts and can withdraw at any time.
Legal obligation — where we must process data to comply with the law.
7. How information is shared
With other users. Your profile details, posts, comments, and other content
are shared with other users according to your settings (for example, a private account limits
who can see your posts and profile). Your display name and profile photo are visible to people
you message or call and to members of groups and communities you join.
With service providers. We share limited data with the vendors listed in
Section 8, who process it on our behalf to run the service.
For legal reasons. We may disclose information if we believe it is required
by law, regulation, legal process, or governmental request, or where necessary to protect the
rights, property, or safety of ConvoX, our users, or the public.
Business transfer. If ConvoX is involved in a merger, acquisition, or sale
of assets, information may be transferred as part of that transaction; we will notify you of any
change in ownership or use of your personal data.
We do not sell your personal data, and we do not share it with advertisers
or data brokers.
8. Third-party service providers
Provider
Purpose
Data involved
Google — Firebase Cloud Messaging
Delivering push notifications
Device push token; notification content routed through Google’s delivery service
Google — ML Kit
On-device translation language models
Language-model downloads only; message text is not sent
Google Play Services
Core platform functionality and app distribution
As described in Google’s privacy policy
LiveKit, Inc. (LiveKit Cloud)
Real-time transport of voice and video call streams
Live audio/video during a call, connection metadata; not recorded
Microsoft Azure
Cloud hosting for the ConvoX backend and stored data
All data described in this Policy that is stored server-side
Our backend is hosted on Microsoft Azure. Some service providers (including Google and LiveKit)
may store or process data on servers located outside your country, including in the United States.
Where required, such transfers are made under appropriate safeguards such as the European
Commission’s Standard Contractual Clauses.
10. Data retention
Account and profile data is retained for as long as your account is active.
Content you post or send remains available to its intended audience until you or (where
applicable) a group/community admin deletes it. Deleting a message “for everyone” removes it for
all participants; “delete for me” removes it only from your view.
When you delete your account, your personal data and content are deleted from our active
systems within 30 days, except where limited data must be retained for legal compliance,
dispute resolution, security, or fraud prevention. Residual copies may persist in encrypted
backups for a limited period before being overwritten.
11. Deleting your account and data
You can delete your ConvoX account and associated personal data in either of these ways:
In the app: open Settings → Danger Zone → Delete Account, confirm
your password, and confirm the deletion.
By email: send a deletion request from your account email address to
imdadulhaque1440@gmail.com with the subject
“Delete my account”.
Deletion permanently removes your profile, posts, comments, messages you sent, media you uploaded,
social connections, and call history, subject to the limited exceptions in Section 10.
12. Your rights and choices
Access and update: view and edit your profile information at any time in
the app.
Delete: delete individual posts, comments, and messages, or your entire
account (Section 11).
Visibility controls: set your account to private, hide your last-seen and
online status, hide your profile photo from non-connections, manage follow requests, and block
users, all in Settings.
Notifications: turn off notifications for ConvoX in your device settings.
Permissions: revoke camera or microphone access in your device settings.
EEA / UK users have the rights to access, rectify, erase, restrict, and port
their personal data, to object to certain processing, and to lodge a complaint with their local
data protection authority.
California users have the rights to know what personal information we collect,
to request deletion or correction, and to not be discriminated against for exercising these
rights. ConvoX does not “sell” or “share” personal information as those terms are defined under
California law.
To exercise any right, contact us at
imdadulhaque1440@gmail.com. We may need to verify
your identity before acting on a request, and we will respond within the timeframe required by
applicable law.
13. Security
We use reasonable technical and organizational measures to protect your information, including
encrypted connections (TLS/HTTPS) between the app and our servers, hashed password storage,
access controls on our backend, and encryption of session credentials in the app’s private
storage. No method of transmission or storage is completely secure, and we cannot guarantee
absolute security. If we become aware of a personal data breach affecting you, we will notify you
and the relevant authorities as required by law.
14. Children
ConvoX is not directed to children under the age of 13, and you must be at least 13 years old to
create an account. We do not knowingly collect personal information from children under 13. If you
believe a child under 13 has provided us with personal information, please contact us at
imdadulhaque1440@gmail.com and we will delete it.
Some jurisdictions set a higher minimum age for consent to data processing; where that applies,
you must meet that age or have verifiable parental consent.
15. Third-party links and content
Posts and messages may contain links to third-party websites or services that we do not operate or
control. This Policy does not apply to those third parties, and we are not responsible for their
content or privacy practices. Review their policies before providing them with information.
16. Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the “Last updated” date at
the top of this page, and for material changes we will provide additional notice in the app or by
email where appropriate. Your continued use of ConvoX after an update means you accept the revised
Policy.
17. Contact us
For any question or request regarding this Policy or your personal data: