Privacy Policy — Ittisal

Delete your Ittisal account

In the app (Android):

1. Open Ittisal and go to Settings → Identity & account.
2. Under Delete account, verify that it is you, then tap Continue to permanent deletion.
3. Type DELETE and tap Delete permanently.

By email: write to [email protected] with the subject "Delete my Ittisal account" and the phone number or email address you use in Ittisal. We will confirm the request with you and delete the account.

What is deleted: your profile, username, private settings, the messages and media you sent, your stories, call records, linked web/desktop sessions, backups, your sign-in account, and the app's data on your device.

What is kept: safety reports about abuse are kept for safety and legal reasons, linked to a one-way coded ID instead of your name, phone number or email. Crash reports already sent to Firebase Crashlytics are removed automatically after 90 days.

1) Who we are

Ittisal is provided by Saifullah Ahad ("we", "us", "our"). Our website/portfolio is: https://saifullah.ai.

2) What this policy covers

This Privacy Policy explains what information we collect, how we use it, and the choices you have when you use Ittisal (the "App"), a messaging and calling service available through the Android app, the Windows desktop client, and the web client at app.ittisal.org.

3) Information we collect

We collect the following categories of information depending on which features you use:

• Account identifiers: A phone number verified with a one-time code (OTP), or, when you choose Google sign-in (Android, Windows or web), your Google account's email address, name and profile photo. You may also add a recovery email address when you set up your profile (optional). Every account has a user ID. Stored in Firebase Authentication and Firebase Firestore.
• Linked desktop sessions: When you scan a Windows/web login QR code, a short-lived session ID and custom authentication token are processed through Firebase Cloud Functions to link that device.
• Profile information: Your name (required), username, profile photo, and status/about text that you choose to provide. Stored in Firebase Firestore.
• Stories: Text, photos and captions you choose to post as a story. Stories expire 24 hours after posting.
• Location (optional): Only when you choose to share your location or live location in a chat, or send an SOS alert to your emergency contacts, the app collects your device's precise or approximate location (coordinates and a place name) and stores it in Firebase Firestore as part of that message. Live location stops updating when you stop sharing or when the time you chose ends.
• Searches: When you look for someone by phone number, email address or username, that search is sent to our servers to find the matching account. When you search for GIFs, your search words go to GIPHY. When you search for blood donors, the blood group and area you enter go to our own service, donatebloodnow.app.
• Crash reports (Android): If the app crashes or hits an unexpected error, Firebase Crashlytics sends technical details about the crash: the error, app version, device model, operating system version, and a random installation ID. We use them only to find and fix problems.
• Technical diagnostics (Android): Google ML Kit powers smart replies, translation, language detection and QR code scanning on your device. It sends Google basic technical information such as device model, operating system version, app version, the languages detected or chosen, performance measurements, and an installation ID. The text of your messages is processed on your device for these features and is not sent.
• Messages: Text and structured messages you send and receive. Where end-to-end encryption is configured, message content is encrypted with AES-256-GCM before storage in Firebase Firestore.
• Media files: Photos, videos, voice messages, and files you share in chats. Stored in Firebase Cloud Storage.
• Contacts: On Android, if you grant permission, we read device contacts to help find friends who use Ittisal. The Windows/web client does not read your operating-system contacts automatically; it processes a contact file only when you explicitly choose one to import.
• Call data: Call metadata (caller, receiver, type, duration, status) for voice and video calls. Stored in Firebase Firestore. Call audio/video is transmitted peer-to-peer via WebRTC and is not recorded or stored.
• Device tokens: On Android and Wear OS, Firebase Cloud Messaging (FCM) tokens and Firebase installation IDs are stored to deliver push notifications. The Windows client keeps the signed-in web session active for desktop notifications while Ittisal is running.
• Local device data: Authentication state, preferences, cached web resources, and the optional end-to-end encryption passphrase are stored in the browser profile or the isolated Ittisal Windows profile on your device.
• Admin Mode data: If enabled, we store the hashed admin PIN and the list of allowed contact UIDs in Firebase Firestore.

4) How we use information

• Deliver messages, media, stories, and calls between users.
• Authenticate your identity via phone number verification or Google sign-in, and manage your account.
• Send push notifications for new messages and incoming calls.
• Enforce Admin Mode restrictions (blocking messages and calls from non-approved contacts).
• Display your profile to other users you communicate with.
• Help you find contacts who use Ittisal, and let others find you by your exact phone number or email address. You can turn this off in Settings → Identity & account.
• Share your location only when you choose to.
• Find and fix crashes and technical problems.

5) Third-party services

Ittisal uses the following third-party services:

• Firebase Authentication: Phone, Google, QR-linked, and session authentication. Privacy Policy
• Firebase Firestore: Message and user data storage. Privacy Policy
• Firebase Cloud Storage: Media file storage. Privacy Policy
• Firebase Cloud Messaging (FCM): Push notifications. Privacy Policy
• Firebase Cloud Functions: QR session linking, account lookup, and call-connection support. Privacy Policy
• Firebase Crashlytics (Android): Crash reports, kept for 90 days. Privacy Policy
• Firebase App Check (Android): Confirms that requests come from the genuine app, using Google Play Integrity. Privacy Policy
• Google ML Kit (Android): On-device smart replies, translation, language detection and QR code scanning, with basic technical diagnostics sent to Google. Privacy Policy
• Google Play services location (Android): Gets your device location only when you share it. Privacy Policy
• GIPHY: GIF search and display. Your GIF search words and anonymous usage events are sent to GIPHY. Privacy Policy
• donatebloodnow.app: Our own blood-donor service, used for blood donor search.
• Google identity and reCAPTCHA: Fraud prevention and optional sign-in verification on the hosted web client. Privacy Policy
• STUN/TURN services: WebRTC connection setup and relay when a direct peer-to-peer call cannot be established. These services may process network information such as IP addresses needed to connect the call.
• AllOrigins: The web/Windows client may send a public URL from a message to api.allorigins.win to retrieve a link preview. Message text and account credentials are not sent for this purpose. On Android, the app fetches link previews directly from the linked website.

We do not use advertising SDKs, and we do not sell or rent your data.

6) Sharing and disclosure

We do not sell your personal information. We do not share your data with third parties for advertising or marketing purposes.

Information is shared only in these cases:

• With other users: Your messages, media, stories, profile name, photo, and any location you choose to share are shared with the users you communicate with.
• Firebase infrastructure: Data is processed and stored on Google Firebase servers to provide app functionality.
• GIPHY: Your GIF search words, only when you use the GIF picker.
• Legal requirements: If required by law or to protect rights, safety, and security.

7) Data retention

Messages and media are retained in Firebase as long as the chat exists. Call metadata is retained for call history purposes. Stories expire after 24 hours. Crash reports are kept by Firebase Crashlytics for 90 days. You can delete your account and its data at any time. See Delete your Ittisal account at the top of this page.

8) Permissions used

Android: Ittisal may request the following permissions, each used only for its stated purpose:

• Camera: For video calls and taking photos to share in chats.
• Microphone: For voice calls, video calls, and recording voice messages.
• Contacts: To find friends who already use Ittisal (optional).
• Storage/Media: To send and receive photos, videos, and files in chats.
• Notifications: To alert you about new messages and incoming calls.
• Location: To share your location or live location in a chat, or include it in an SOS alert (optional).
• Nearby devices, Bluetooth and Wi-Fi: To find a nearby phone you choose and send files to it directly (optional). These files go device-to-device, not through our servers.
• Phone calls and full-screen alerts: To show incoming Ittisal calls on your lock screen and in your phone's call controls.
• Foreground services: To keep an active call, screen sharing, voice recording, or live location sharing running while a notification shows it.
• Internet: Required for all messaging, calling, and data synchronization.

All Android permissions are optional except Internet. You can deny any permission in Android settings, though the related feature may not work.

Windows and web: Ittisal asks for camera and microphone access only when you use calls or recording, notification access for message/call alerts, and file access only through files you select or download. Internet access is required for messaging, calling, authentication, and synchronization. The Windows shell denies other browser permissions by default.

9) Your choices and controls

• Permissions: Allow or deny permissions at any time through Android settings or Windows/browser privacy controls.
• Profile: Edit or remove your profile name, photo, and about text in Settings.
• Discovery: Choose whether people can find you by phone number or email address in Settings → Identity & account.
• Location: Location is shared only when you choose to share it, and you can stop live location at any time.
• Admin Mode: Admins can enable, disable, and manage allowed contacts with a PIN.
• Deletion: Delete your account in the app or by email. See Delete your Ittisal account.

10) Security

Where end-to-end encryption is enabled, Ittisal uses AES-256-GCM with per-chat key derivation. The web and Windows clients keep the encryption passphrase locally and can optionally back up key material encrypted with a PIN. Data in transit uses HTTPS, and voice/video calls use WebRTC's encrypted transport. Admin PINs are never stored in plain text; only a salted one-way hash is kept. We use reasonable technical safeguards to protect your information, but no method of transmission or storage is completely secure.

11) Children's privacy

Ittisal is not directed to children under 13. We do not knowingly collect personal information from children under 13. The Admin Mode feature allows an admin to manage device communications, and requires an admin to set up and control. Ittisal prohibits child sexual abuse and exploitation (CSAE), including child sexual abuse material (CSAM), grooming, sextortion, and sexual solicitation involving minors. Read our separate Child Safety Standards.

12) Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy at https://privacy.saifullah.ai/Ittisal and update the effective date above.

13) Contact

If you have questions or requests, contact: Saifullah Ahad
Email: [email protected]
Phone: +8801711134346
Website: https://saifullah.ai