Privacy Policy
Effective July 1, 2026
What we collect
Poof collects account details (email, display name, username, authentication status), social data (friends, blocks, posts, likes, comments, notifications, and reports), selected avatar and queued photos, push tokens, and limited diagnostics when crash reporting is enabled.
Your photo library
Poof requests full photo-library access so it can select a photo on the device. The library remains on the device. Only a photo selected for an avatar or the queue is compressed and uploaded.
How we use data
Data is used to operate accounts, scheduled drops, the private friend feed, notifications, safety review, abuse prevention, and troubleshooting. Google Firebase processes authentication, database, storage, and server data; Expo processes push delivery and app services; Sentry processes diagnostics only when configured. Poof does not sell personal information.
Retention and your choices
Operational records follow the Data Retention Policy. Users can disable system notifications, block other users, or permanently delete their account from Settings. Account deletion removes the active Firebase Authentication identity, profile and username, uploaded avatar and queued photos, owned posts and comments, reactions and comments on other posts, relationship references, requests, notifications, reports, and push records. Limited provider backups and logs may persist temporarily. Contact support for privacy questions or requests.
Children
Poof is not intended for children under 13, or a higher minimum age where local law requires it.