Privacy Policy

1. Introduction

Welcome to Callege ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our video chat service for college students.

By using Callege, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address (must be a .edu email address for verification)
• Password (stored securely using Firebase Authentication)
• Gender
• Email verification status

2.2 Premium Account Information

If you subscribe to Callege Premium, we collect:

• Payment information (processed securely through Stripe - we do not store full payment card details)
• Stripe customer ID and subscription ID
• Subscription status and premium features usage

2.3 Usage Information

We automatically collect certain information when you use our service:

• Device information (browser type, operating system)
• Chat/conversation history (stored when reports are submitted)
• Camera and microphone access (required for video chat functionality)

2.4 Analytics Information

We use Google Analytics (Firebase Analytics) to understand how users interact with our service. This includes:

• Page views and navigation patterns
• Feature usage statistics
• Device and browser information
• General location data (country/region level)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our video chat service
• Verify your college student status through .edu email verification
• Facilitate matches between users based on preferences
• Process payments and manage premium subscriptions
• Send verification emails and important service notifications
• Respond to user reports and safety concerns
• Ensure platform safety and prevent abuse
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services that may collect or process your information:

4.1 Firebase (Google)

We use Firebase for authentication, database storage, and analytics. Firebase is operated by Google and is subject to Google's Privacy Policy. Your data is stored securely on Google Cloud infrastructure.

4.2 Stripe

We use Stripe to process premium subscription payments. Stripe handles all payment card information securely and is PCI DSS compliant. We only receive payment confirmation and subscription status information from Stripe.

4.3 Resend

We use Resend to send verification emails and service notifications. Resend processes email addresses and delivery status.

4.4 Google Cloud Platform

Our WebSocket matchmaking server runs on Google Cloud Platform. Video chat connections are facilitated through this infrastructure.

4.5 Discord

User reports are sent to a Discord webhook for moderation purposes. This includes reported user information and conversation history.

4.6 Google AdSense

We use Google AdSense to display advertisements. Google may use cookies and similar technologies to show you relevant ads based on your browsing behavior. Premium users do not see advertisements.

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information:

• All passwords are hashed and stored securely using Firebase Authentication
• Data is encrypted in transit using HTTPS/TLS
• Data is stored on secure cloud infrastructure (Google Cloud Platform)
• Access to user data is restricted to authorized personnel only
• Firestore security rules prevent unauthorized access to user data

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Account information is retained while your account is active
• After account deletion, we may retain certain information for up to 90 days for safety and legal compliance purposes
• Report data may be retained longer for safety and moderation purposes
• Payment records are retained as required by law (typically 7 years for tax purposes)

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent for data processing where applicable

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your login session
• Remember your preferences
• Analyze service usage through Google Analytics
• Display relevant advertisements (for non-premium users)

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our service.

9. Children's Privacy

Callege is designed for college students and requires a .edu email address for verification. We do not knowingly collect personal information from children under 13 years of age. If you believe we have collected information from a child under 13, please contact us immediately so we can delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our service, you consent to the transfer of your information to these countries.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights regarding your personal information, contact us at support@callege.org.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete personal information we have collected from you
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your CCPA rights

To exercise these rights, please contact us using the information provided in the "Contact Us" section.

14. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your personal data includes: (1) your consent, (2) performance of a contract, (3) compliance with legal obligations, and (4) legitimate interests.