Privacy Policy

1. The short version

Ivory collects as little as it can get away with. Nothing is sold. Nothing is handed to advertisers. There are no tracking pixels and no advertising networks anywhere in this app.

2. What is collected

Your account: the email address you use to sign in and the name you choose to show. At signup you may also provide an optional phone number and date of birth. Those details are kept apart from your public profile and are not shown to other members.

Your profile photo, if you choose one. It appears on your Profile page and beside your messages in live chat. Only people allowed to view that broadcast can view the chat photo. If you are a confirmed gifter on a post, your photo also appears beside your name in that post's gifts section, visible only to members who can open that post.

Your membership: which tier you hold, when it started and when it renews.

Your payments: the amount, the date, the reference number you type in after paying, and the screenshot if you send one. The house never sees your card, your bank login or your UPI PIN — those stay with your own bank and payment app.

Your activity in Ivory: what you have unlocked, which sessions you have booked, how long a session lasted, and the messages you send to the house.

Your Quiet Folio, if you use it: private notes, writing drafts, saved web links and optional notes linked to your own scheduled calls. These entries sync to your Ivory account so you can return to them on another device. They are not end-to-end encrypted.

Your device, for notifications only: a token from Google that lets a message reach your phone. It identifies the phone, not you, and it is deleted when you sign out.

3. What is not collected

No location. No contacts. No browsing of other apps. The app reads only the photo you deliberately choose for your profile; it does not scan your photo library. No microphone or camera except during a session you joined yourself, and nothing from them is recorded or stored. No advertising identifier.

4. Why

To let you in, to show you what your membership includes, to run the sessions you book, to confirm payments, to answer you when you write, to keep the private Folio pages you choose to save, and to meet the record-keeping the law requires of anyone taking money. A phone number is optional, is not a sign-in method, and is not displayed publicly. If you share your real birthday, Ivory will try to prepare a small birthday token; it is not guaranteed.

5. Who else sees it

Supabase holds sign-in, the database and private profile-photo files; Google Firebase delivers notifications; Agora carries the live audio and video; Cloudflare R2 stores film and voice files; Razorpay, where used, handles payment. Each receives only what is needed to make that service work.

The Ivory house can access optional phone and birthday details for account administration and the possible birthday token. Other members cannot see those details. A member who is allowed to view the same live broadcast can see your chat messages and, if you chose a photo, that photo beside them. Photo files are private; the app uses time-limited links to display them. Anyone given such a link may view it until it expires.

Quiet Folio pages are protected by database rules tied to your signed-in account; other members and the app's ordinary admin screens cannot read them. They are not end-to-end encrypted. Authorized service operators with privileged database access may access account data where needed to operate or support the service.

No advertiser or data broker receives your information. The only other exception is a demand the house is legally required to answer, and the house will tell you if that happens unless forbidden.

6. Calls are not recorded

Sessions are live only. No recording is made by the house, not of video, not of audio. What was said exists only in the memory of the two people who were there. Recording a session yourself is forbidden by the terms of use.

7. How long it is kept

Your account details stay while the account exists. Optional phone and birthday details are stored separately from the public profile. Quiet Folio entries stay until you delete them or ask for account erasure. Profile photos stay until you remove or replace them, or ask for erasure. Payment records are kept for eight years because tax law requires it. Messages to the house are kept while the matter is open and for a reasonable time after. Notification tokens die when you sign out. Nothing is auto-deleted behind your back.

8. Your rights

You may view, edit or delete each Quiet Folio page in the app. You may also ask what is held about you, ask for a mistake to be corrected, ask for your account and its data to be erased, and withdraw a consent you gave. Ask through the quiet door or write to the Grievance Officer. The house answers within 30 days, and usually the same day.

Erasure removes what the law allows to be removed. Payment records stay for the eight years mentioned above — the house is not permitted to delete those.

9. Children

Ivory is for adults. The house does not knowingly hold the data of anyone under 18, and deletes it on discovery.

10. Security

Everything travels encrypted. Access to the database is restricted by rules that run on the server, not in the app, so one member cannot read another's private account details. No system is beyond failure; if one happens and it affects you, the house will tell you and tell the authorities, as the law requires.

11. Where it lives

Data is stored on servers operated by the providers in section 5, which may be outside India. They are bound to protect it to the standard described here.

12. Changes

If this notice changes, the date at the top changes and the app says so.

13. Who to ask

The Grievance Officer named on this page. A real person, and the only address the house uses for this: fansupport.ivory@gmail.com.