Comichat Privacy Policy
Comichat is a comic-style messaging app developed and operated by jjdeveloperbd, based in Bangladesh. This policy explains what information is handled, why it is needed, and the choices you have. For questions or privacy requests, email jjdeveloperbd@gmail.com.
Your main controls: change email discoverability, typing indicators and read receipts in My profile. To remove your account, use My profile → Delete account or request deletion without the app.
1. Information we handle
- Account and profile: your verified email address, account identifier, unique comic username, chosen character, privacy preferences, and account-update and authentication information. You do not need to supply a real name or phone number to use the current email-based app.
- Messages: your phone creates a comic from your text and selected character/expression. The app uploads an encrypted comic and the encryption information needed by the current devices in that conversation. The service also stores conversation membership, invitation status, sender and message identifiers, timestamps and delivery/read metadata.
- Device and service information: device public keys and their fingerprints, notification tokens and installation identifiers, app/device integrity signals, IP addresses, request information and operational logs. Google Firebase and Google Play services process some of this information to authenticate users, protect the service and deliver notifications.
- Safety and support: block records, abuse reports, and information you send to support. A report contains the reporter and reported account identifiers, conversation identifier, written reason, time and review status. Comic contents are not automatically attached to a report; include only information needed to explain the issue.
- Local information: the app keeps account-specific preferences, drafts, pending messages, downloaded comics and private encryption keys on your phone. Private keys are held using Android Keystore. Downloaded comics and drafts can be readable within the app's private storage.
2. Why information is used
Information is used to create and recover accounts, find friends, process invitations, send comics, display unread counts and message status, deliver notifications, save preferences, investigate reports, respond to support requests, prevent abuse and operate the service.
Comichat does not include advertising or advertising-based tracking, sell personal information, or use a separate analytics or crash-reporting SDK. Operational service logs are still processed. The current app does not request access to your contacts, SMS, camera, microphone, photos or precise location. It does not infer your location to provide a location feature.
Comic creation and expression selection run locally. Message text and selfies are not sent to an AI image-generation service. The current app has no selfie-to-cartoon feature.
4. Discovery, typing and read receipts
Allow people to find me by email, Typing indicators and Send read receipts are ON by default for new accounts and preferences that have not previously been set. Existing saved choices, including OFF, are preserved. You can switch each setting off in My profile.
Email discovery uses an exact email-address match. Turning it off prevents that search method from returning your profile; your unique comic username remains searchable. The service maintains private email/username lookup indexes.
Typing indicators share a temporary typing state, not your unfinished message. Delivery receipts indicate that the recipient app fetched and saved a comic. Read receipts indicate that the comic was displayed in an open conversation. Turning off read receipts prevents new read receipts from being shared; it does not retract ones already sent. Your private unread position continues to update.
You can deny notification permission in Android and continue using ordinary chats. Blocking stops new messages between the accounts while the block is in place. Reporting submits a report to the developer; it does not automatically block the person.
5. Message protection and account recovery
Comics are encrypted on the sender's phone for the current devices in the conversation before upload. Private device keys are not uploaded by the app. Network requests use encrypted connections. Account, routing and status metadata are separate from encrypted comic content.
The service distributes device public keys. Use Verify chat security to compare fingerprints through a trusted channel, especially after a key changes. Comichat has not undergone an independent security audit and does not implement Signal's forward-secrecy protocol. No service can guarantee absolute security.
Email sign-in can restore access to your account, but it is not a backup of old encrypted chats. Reinstalling, clearing app data or moving to another phone can make old conversations unreadable. Signing out keeps saved local chats on the same phone.
6. Retention and deletion
- Account, directory and conversation records: retained while needed to operate the account. Account deletion removes the authentication account, profile, email/username directory entries and its shared server conversations, including stored message copies and conversation activity. Your own server block list is also removed.
- Encrypted server message copies: assigned an expiry time seven days after sending. Firestore's background expiry cleanup is asynchronous, so removal can occur after that time. Delivery/read information stored with each message follows that message's cleanup.
- Abuse-prevention counters: verification counters and deduplication records are assigned expiry times up to 40 days from their latest update. Other action-rate counters have three-day expiry times. Background deletion can be delayed. Hashed email, network or account identifiers in counters can remain until that cleanup.
- Typing records: a typing indicator becomes inactive after a short expiry, approximately 12 seconds unless refreshed. The latest activity record can remain until overwritten or its conversation is deleted; disappearance of the indicator does not mean immediate deletion of the record.
- Local history: the app limits saved history to approximately 100 comics per conversation during normal cleanup. Drafts and pending messages may remain until sent, discarded or local account data is removed. Successful in-app account deletion attempts to remove that account's local data and key on the device used. A remote deletion request cannot erase copies already stored on another phone.
- Reports, support and safety records: reports are reviewed manually and are not automatically erased with an account. Reports, support correspondence and relevant safety records, including another user's block record referring to an account, may be retained for abuse investigations, fraud prevention or legal obligations. Retention is reviewed by the developer; contact us to request review or deletion of information no longer needed for those purposes.
- Provider logs and backups: service providers apply their own operational retention and deletion processes. Deletion from active app records does not mean every provider backup or log is erased immediately; see the Firebase privacy information linked above.
Other people may keep comics they have already received, screenshots, or information you shared directly. Deleting your account cannot remove those copies.
Older phone-based pilot accounts may still have legacy phone credentials or historical verification records until the retirement cleanup is completed. The current email-based app does not request verification SMS or use phone-number friend search.
7. Your privacy requests
You can update your comic username, character and privacy preferences in My profile. To request access, correction or deletion of other account information, email jjdeveloperbd@gmail.com. We may need to verify ownership before acting. Do not send passwords, sign-in links, verification codes or private encryption keys.
Depending on the law that applies to you, you may also have rights to a copy of your data, restriction of processing, objection, withdrawal of consent or a complaint to your local data-protection authority. Where a legal basis is required, processing relates to providing the requested service, legitimate interests in security and administration, consent where required for optional processing, or legal obligations. Withdrawing consent does not affect earlier lawful processing.
To request account deletion without installing or signing into Comichat, use the account-deletion request page.
8. International processing and children
Comichat is operated from Bangladesh. Its current backend functions run in Google's Mumbai region, and Google services may process or store information in other countries. Your data is therefore not necessarily processed only in your own country. Regional launch availability and testing restrictions do not change these data practices.
If you believe a child has provided personal information without appropriate authorization, contact the developer so the information can be reviewed and, where appropriate, deleted.
9. These pages and policy changes
These privacy and deletion pages do not contain advertising, analytics scripts, tracking pixels or an embedded sign-in form. The hosting provider may process IP addresses and request logs to deliver and secure the pages. An email-request link opens your chosen email application; the message is sent only when you choose to send it.
We update this policy when data practices change and show the revision date above. Material changes will be brought to users' attention as required. Questions can be sent to the privacy contact listed on this page.