DRAFT for the owner's review. Not yet in force. Bracketed items must be completed before launch.

Fabra Privacy Policy

Last updated: [date of publication]

Fabra is a file-sharing app made by [legal name of the company or person running Fabra] ("Fabra", "we"). This policy explains what we collect, why, and what we never see.

Files and messages are end-to-end encrypted. Fabra can't see them. Files pass through encrypted and are deleted once delivered, unless you save them to your own encrypted Fabra Cloud.

1. What we can't see

The files you share, their names, the comments and replies you write, and your reactions are encrypted on your phone before they leave it. Only the people in the chat can decrypt them. Our servers store and pass on only scrambled data, and we don't have the keys to unscramble it. Notifications don't contain file names or messages either: they say only who sent something ("New file from kofi").

2. What our servers can see

To deliver files, our servers handle some information that isn't encrypted:

• Who talks to whom and when: which accounts are in a chat or team, when a file or reply was sent, and the encrypted size of each file. We do not see what was sent.
• Your account: your phone number, your username, your profile photo, and your team names and memberships. Your username, photo and team names are visible to other Fabra users you share with.
• Your settings: notification and download preferences, the people you've blocked, and your two-step verification settings (we store only a protected hash of your PIN, and your recovery email if you add one).

3. Your phone number and contacts

You sign in with your phone number, which identifies your account and receives a one-time code by SMS (sent through Google Firebase).

If you allow access to your contacts, the app sends the phone numbers in your contacts (not their names) to our server to find which of them use Fabra. The numbers are compared in memory and are never stored or logged. Contact names stay on your phone.

4. How long we keep files

• Shared files are kept on our servers, encrypted, only until everyone in the chat has downloaded them, and for at most 7 days. Then they're deleted.
• Fabra Cloud (10 GB free): files you choose to save are kept, encrypted with your own key, until you delete them or delete your account. [If paid plans are introduced: files are kept until 30 days after a paid plan ends.]
• Files you download are saved on your phone and are under your control.

5. Encryption keys and backups

Your encryption keys are created on your phone. If you turn on Encrypted backup, they are backed up to your own Google account (Android Block Store) or iCloud Keychain, which Google and Apple protect. You can also choose a passphrase or recovery-key backup: we store it only in a form we cannot open without your passphrase or key.

6. Ads

Fabra is free and shows ads, provided by Google AdMob. To show and measure ads, Google may collect your device's advertising identifier, your approximate location from your IP address, your language, device information and how you interact with ads. Ads are non-personalised by default. Where the law requires it (for example in the EEA and the UK), you're asked for consent first. Ads never see or use your files, chats or messages. Google's use of this data is described at policies.google.com/technologies/partner-sites.

Saving a file to Fabra Cloud may involve watching a short rewarded video ad.

7. Notifications, analytics and crash reports

• Push notifications: we store a notification token for your phone so we can tell you when files and replies arrive.
• Analytics: we use Google Firebase Analytics to understand how the app is used (for example, which screens are opened), with device and app information. It never includes file contents or messages.
• Crash reports: Firebase Crashlytics sends us technical details when the app crashes.
• App Check: Google Play Integrity and Apple App Attest confirm requests come from the real Fabra app.

8. Reports

If you report someone, we receive the reason you choose and any details you write. Because content is encrypted, we only see content that you choose to include in your report.

9. Who processes data for us

Fabra runs on Google Cloud and Firebase (Google LLC). Our database and file storage are located in the European Union (Belgium, europe-west1). Ads are provided by Google AdMob. Data may be processed in other countries by these providers under their own safeguards.

10. Your choices and rights

• You can change notification, download and backup settings, block people, and delete files from Fabra Cloud at any time.
• You can delete your account in the app: Settings, then Account, then Delete account. This removes your profile, photo, username, team memberships, encryption key records and cloud files. Files you already saved on your phone stay there. Reports about an account are kept for safety.
• Depending on where you live, you may have rights to access, correct or delete your data. Contact us to use them.

11. Children

Fabra is not meant for children under 13 [or the minimum age required where you live]. We don't knowingly collect data from them.

12. Changes

We'll update this policy as Fabra changes, and tell you in the app about important changes.

13. Contact

fabra@marvydery.com · [postal address of the company]