Privacy policy
Draft. This text is waiting for legal review and will change before ExpressListen opens to the public. The plain-language pages (Privacy, Safety, How it works) describe how the service really works today.
1. Who we are
ExpressListen is a pseudonymous listening service for adults. Contact details will be added after legal review.
2. Data we collect
- Account: email address (encrypted), password hash, nickname, chosen avatar, 18+ confirmation time, accepted terms version.
- Use of the service: messages (encrypted), conversation participants and times, message receipts, blocks, reports you make.
- Technical: login sessions with a coarse device label; short-lived hashed counters to prevent abuse. No IP addresses are stored.
- Preferences: colour theme, light or dark mode, text size, reduced motion.
3. Why we use it
To run your account and conversations, keep the service safe, review reports, and send account emails. We do not use your data for advertising and do not sell it.
4. Who can see it
Other users see only your nickname, public ID, avatar and, for listeners, languages and online badges. Our team can see reports and account status, never chat messages. Service providers (hosting, database, email delivery) process data on our behalf.
5. How long we keep it
- Messages: until the chat is deleted, or your account is deleted.
- Deleted-account record (encrypted email, account ID, nickname): 2 years, for support and abuse cases.
- Accounts unused for 24 months: deleted after a warning email.
- Reports: 180 days after closing. Admin action log: 1 year.
- Backups: up to 7 days.
6. Security
Email addresses and messages are encrypted in our database (AES-256-GCM). Messages are not end-to-end encrypted. See Privacy, honestly for what this means.
7. Your choices and rights
You can change your nickname and avatar, log out devices, delete chats and delete your account at any time in Settings. Further rights under applicable law will be described after legal review.