Privacy Policy

Last updated: October 16, 2026

This policy explains what Phocod (the Phocod website and the Phocod Android app, operated by Prodnium) collects, why, and the choices you have. Questions: phocodweb@gmail.com.

What we collect

• Account information: your email address, name and password (stored only as a secure hash).
• Content you create: chat messages and media you send, stories, podcasts, professional profile, posts, connections, job and event activity, marketplace listings and interest you express, game moves, and agents and their events in Phocod Intelligent.
• Call information: who took part in a call, when it started and ended. Call audio and video are sent directly between participants or through an encrypted relay (see below); we do not record calls.
• Device information: an app-generated device identifier and a device name, used to list the phones signed in to your account and let you sign any of them out.
• Sign in with Google (optional): if you use it, Google tells us your email address, name, profile picture and a Google account ID. We don't receive your Google password.
• Notifications: a push token from Firebase Cloud Messaging so we can alert you to new messages and calls. You can turn notifications off in your phone's settings.
• Crash reports: when the app crashes, Firebase Crashlytics records technical details (device model, Android version, app version and what the app was doing) so we can fix it. It does not include your messages.
• Camera and microphone: used only while you are on a call or choose to record or share media. Android asks for your permission first.

SMS Gateway feature

The optional SMS Gateway in the Android app lets you send and receive text messages through your own phone using an API you control. It only runs if you turn it on. Messages it sends or receives are handled on your device and stored locally there. If you connect it to an external server (its “cloud” or “private server” modes), message data is sent to the server you configure. Phocod does not read your SMS messages. If an admin enables the Phocod SMS APIfor your account and you connect your phone, texts sent through the API (recipient numbers, message text and delivery status) are stored on Phocod's servers so your phone can fetch them and you can check delivery. Your API key is stored only in hashed form.

How we use information

• To provide the features you use: sign-in, messaging, calls, profiles, marketplace, games and agents.
• To keep accounts secure, for example detecting sign-ins on another device.
• To fix problems and keep the service running.

We do not sell your personal information.

Ads

Phocod shows no ads and does not use your device's advertising ID. If that ever changes, we'll update this policy and the date above before it does.

Who processes your data

• Amazon Web Services (United States): hosting, databases and file storage.
• Cloudflare: relays encrypted call media when a direct connection between participants is not possible.
• Google: Sign in with Google, Firebase Cloud Messaging (notifications), Firebase Crashlytics (crash reports).

We share information with other people only as you direct (for example, sending a message) or when required by law.

Security

Data is encrypted in transit (HTTPS/TLS; calls use encrypted WebRTC). Passwords are stored only as hashes.

Retention and deletion

We keep your data while your account exists. You can ask us to delete your account and associated data at any time — see Delete your account. We complete deletion within 30 days, except where the law requires us to keep something longer.

Children

Phocod is not directed to children under 13, and we do not knowingly collect their personal information.

Changes

If we change this policy we will update the date above and, for significant changes, tell you in the app.