Privacy Policy

Last updated: August 10, 2026

This Privacy Policy explains what information we collect when you use Descall ("we", "us"), how we use it, who we share it with, and what rights you have over your data. By creating an account or using the Service, you agree to the practices described in this policy.

1. Information We Collect

Account information: Your username, a securely hashed (bcrypt) form of your password, your optional email address, your profile photo, and any display name you choose when creating your account or editing your profile.

Communication content: The direct messages (DMs) and group messages you send, media/files you share, message pins, and reactions (emoji). This content is processed and stored so it can be shown to the participants of the relevant conversation.

Call metadata: Voice/video call duration, participant count, connection quality indicators (for adaptive bitrate), and screen-share session information; the audio/video content of a call is not recorded or stored by default.

Activity and DesCoin data: To ensure the DesCoin earning system operates fairly and without cheating, we collect server-verified activity data such as your time spent actively present in voice chat, your messaging frequency, and your screen-sharing activity, along with your DesCoin balance and transaction history (ledger).

Technical and device information: IP address, browser/operating system type, device identifier, app version, session tokens, and device registration information for push notifications (FCM/Web Push tokens).

We do not collect payment or financial information: Descall does not accept real-money payments; all shop purchases are made with DesCoin, so no credit card or similar financial information is collected or stored.

Local storage and cookies: We use your browser's local storage (localStorage) to keep you signed in and remember your language and theme preferences; we do not use third-party advertising or tracking cookies.

2. How We Use Information

To provide the Service: operating messaging, voice/video calling, screen sharing, friends, group management, and profile customization features.

Account security: to authenticate you, deliver 2FA and email verification codes, detect suspicious sessions, and prevent unauthorized access.

Anti-cheat and integrity: we analyze activity data to keep the DesCoin earning system fair and to detect bot/automation use, multi-accounting, and manipulation.

Communication: to send transactional notifications by email or push, such as verification codes, security alerts, friend requests, gift notifications, and important service updates.

Improvement: to analyze and improve the Service's performance, reliability, and user experience (e.g., connection quality diagnostics, error logs).

We never sell your personal data to third parties or share it for advertising purposes.

3. Legal Basis for Processing

We rely on the following legal bases when processing your data: (a) necessity for the performance of our service agreement (core features like messaging and calling), (b) our legitimate interests in maintaining account security and preventing cheating/abuse, (c) your explicit consent given when creating an account and enabling optional features (e.g., push notifications, Google Sign-In), and (d) compliance with legal obligations.

4. Sharing of Information and Service Providers

We share your data with trusted service providers (data processors) who help us operate the Service and act under our instructions: Supabase for database and authentication; Resend for transactional email delivery; Firebase Cloud Messaging (Google) for mobile push notifications; and Render for hosting infrastructure. Only the data necessary to provide the Service is shared with these providers.

Messages and media you send are shown only to your chosen recipients (the other party in a DM or group members); Descall staff may only access content when necessary for security investigations, reviewing user reports, or fulfilling legal obligations.

We do not share your personal data with law enforcement or other third parties except where required by a legal obligation (court order, legal request), where necessary to protect our rights, or where necessary to protect user safety.

5. Cookies and Local Storage

Descall does not use third-party advertising or tracking cookies. We use your browser's local storage (localStorage) to store your session token, language preference, theme settings, and similar UI preferences. You may clear this information from your browser settings at any time, though doing so may end your session.

6. Data Security

Your password is stored as an irreversible hash using the bcrypt algorithm; we never view or store your password in plain text.

We offer two-factor authentication (2FA) and email verification to add extra protection to your account. Session management also lets you individually terminate suspicious or old sessions.

Your data is hosted on infrastructure providers that use industry-standard encryption (TLS/HTTPS in transit). No system can be 100% secure; in the event of a suspected security breach, we act promptly and notify affected users where required.

7. Data Retention

We retain your data for as long as your account is active and as necessary to provide the Service. When you close your account, your personal data — including message history, DesCoin balance, and shop inventory — is deleted or anonymized within a reasonable period, except where we have a legal obligation to retain it.

Security logs and activity records kept for cheat detection purposes may be retained for a limited additional period for the purpose of investigating abuse.

8. Children's Privacy

Descall does not knowingly collect personal data from children under 13. If we learn that we have collected data from a child under 13, we will promptly delete the related account and data. If you are a parent or guardian and believe a child under 13 has provided us with personal data, please contact us via our Contact page.

9. Your Rights

You have the right to access, correct, delete, restrict processing of, or receive a portable copy of your personal data. You can exercise most of these rights directly from the in-app profile and settings menus (e.g., editing your profile information, deleting your account).

If you have difficulty exercising the rights above, or wish to make an additional request, you may contact us via our Contact page; we will review your request within a reasonable time.

10. International Data Transfers

Our service providers (Supabase, Resend, Firebase, Render) may process your data on servers located in countries other than the one you reside in. In such cases, we ensure appropriate contractual safeguards are in place with those providers to keep your data adequately protected.

11. Marketing Communications

Descall does not send you marketing emails without your consent. The emails we send are limited to transactional communications necessary for your account to function, such as email verification, 2FA codes, security alerts, and gift/DesCoin notifications.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When material changes are made, you will be notified through an in-Service notice or, if applicable, to your registered email address. Continuing to use the Service after an updated policy is published constitutes your acceptance of the updates.

13. Contact Us

If you have any questions about this Privacy Policy or the processing of your personal data, you may contact us via our Contact page.

Contact: contact@descall.com