1. Who is responsible
GG Messenger, LLC operates GG Messenger and is responsible for the processing described in this policy. For privacy questions and requests concerning your personal data, contact support@ggmsg.app.
2. Account and device information
We process your phone number, account identifier, profile name, username, avatar and profile information you provide. If used, two-step verification adds a password hash and optional recovery email. Sessions can include IP address, approximate location derived from IP, device and app information, language and push-delivery identifiers. These support authentication, delivery and account security.
3. Cloud messages and shared content
Ordinary messages, attachments, voice and video messages, stories, community membership, reactions and related delivery information are processed on our servers to provide communication, synchronization and search. Location or contact cards are processed if you send them. Public communities can expose your posts to a broad audience. Authorized recipients and administrators receive information according to the relevant feature and permissions.
4. Secret chats
Secret chats use a separate delivery mechanism designed for messages encrypted on your device. The server stores encrypted payloads, public key material, sender and conversation identifiers, timestamps and optional expiry metadata. Protection depends on the client’s implementation and secure devices; it should not be assumed for ordinary chats. Secret payloads are separate from ordinary search, translation and transcription. Expiry and disappearance from the interface do not guarantee immediate erasure of every stored copy.
5. Contacts and invitations
Contacts you add, the names you give them and referral relationships are stored to connect users. Address-book matching and invitations receive only phone-number hashes; the invitation itself is sent from your phone. Adding a contact by number sends that number only to look the person up. Hashes are still personal data, not anonymous information. Users who already have your number in their uploaded matching data may learn that you joined. Only submit contact information you are entitled to share.
6. Optional processing and notifications
When translation or transcription is requested, the relevant text or audio is sent to OpenAI for processing and results may be stored with the message. Push delivery uses infrastructure such as AWS SNS and Apple, Google or Microsoft services; ordinary-message notifications may contain a text preview. Secret-message notifications use a generic notice. Where calls or streams are enabled, media infrastructure processes the data needed to connect participants. Bots receive the content and permissions made available to them; OAuth applications receive the access you authorize.
7. Payments, advertising and analytics
RevenueCat and the relevant store or payment provider process purchases; we keep account-linked product, entitlement and transaction records. Stripe supports relevant payment and payout flows, including provider-managed verification. The service also processes usage events, referrals, advertising impressions and clicks, and profile or audience attributes used for analytics and advertising selection, such as interests and approximate geography. The exact inputs depend on the feature. This policy does not describe all advertising as anonymous or context-only.
8. Purposes and legal grounds
Data is used to deliver requested services, secure accounts, handle reports, administer payments, measure and improve features, and operate advertising. Where applicable law requires a legal basis, core delivery relies on the service contract, statutory records on legal obligations, and proportionate security and service operations on legitimate interests after considering users’ rights. Usage analytics is linked to your account and is part of operating the service. By creating an account you consent to interest-based ad personalization and to sending the text or audio you ask to translate or transcribe to OpenAI. You can opt out of either at sign-up or at any time in privacy settings; this stops that processing from then on and does not affect processing that already took place. Without ad personalization you still see ads, but they are not selected by your interests; without AI processing, translation and transcription are unavailable. Permission to access a device feature is not blanket consent to unrelated processing.
10. Retention and deletion
Cloud history and uploaded media are retained to provide the service while they remain associated with an active account or community. Retention also depends on the type of record, feature expiry, deletion requests and applicable legal obligations. Hiding, expiring or marking content deleted does not necessarily remove underlying records, backups or copies held by recipients. Transaction, security and dispute records may be retained as necessary for accounting, legal obligations, fraud prevention and resolving claims. Contact support@ggmsg.app to request account or data deletion and information about retention applicable to your records. We do not promise that deleting a message immediately erases every copy.
11. Your choices and rights
You can edit available profile fields, manage sessions, block users and adjust supported visibility, invitation and call settings, and turn ad personalization and AI processing on or off. Some controls depend on your subscription. You can manage notification permissions on your device and revoke authorized integrations. Depending on your location, you may request access, correction, erasure, portability, restriction or objection, withdraw consent and complain to a supervisory authority. Send these requests to support@ggmsg.app. We may need to verify your identity and will respond within the deadlines required by applicable law.
12. Website, children and policy changes
These legal pages use no analytics scripts, cookies or externally loaded fonts. Other app and website features have their own technical data flows described above. Do not use the service contrary to applicable age requirements; a parent or guardian can raise a child-data concern through support@ggmsg.app. We will date revised policies and provide any legally required notices or consent requests. The three language versions are intended to describe the same practices.