Privacy Policy
Last updated: June 27, 2026
Anonymity by design
MaskedFriend is built to store the minimum personal data needed to run. You are identified by an opaque id and a handle you choose — never your real name. When you sign in with Google, a wallet, or email, we hash the provider identifier; your raw email or wallet address is not kept on your profile.
Location data
To show nearby people we use a coarse, obfuscated location. The moment your device reports a position we snap it to a neighbourhood grid and store only that grid cell (a short geohash). We never store or transmit your exact latitude and longitude, and others only ever see an approximate distance.
Media
Photos you upload have their EXIF/GPS metadata stripped before storage, and profile pictures are masked by default. We store a URL and lightweight metadata, never the original camera file with embedded location.
Payments
Subscription payments are processed in cryptocurrency through an external payment service. We record a payment reference and your plan period; we do not store card numbers or take custody of your wallet.
Safety data
When you report or block someone, we store the report (for our moderation team) and the block (to hide content both ways). Content may be automatically flagged for human review by moderation tools. We never auto-publish a moderation result as “approved” — a person reviews flagged content.
Your rights: export & deletion
You can export everything we hold about you as a JSON file, and you can delete your account at any time from your profile. Deletion is irreversible: it removes your account, profile, posts, media references, messages, reactions, blocks, and reports that you filed. These controls are available in the app under your profile.
Contact
Questions about your privacy or a data request? Reach us through the in-app support channel. Material changes to this policy are reflected by the “last updated” date above.