Privacy Policy

Effective 2026-10-03. Last updated 2026-10-11.

Blink is built around anonymity: we do not ask for your name, email address or phone number, and conversations are never stored on our servers. This policy explains what we do process, why we process it, and the choices you have. It applies to the Blink: Random Chat app and any related services operated by Gyanendra Kumar.

Who we are

Blink: Random Chat (the "app" or "Blink") is operated by Gyanendra Kumar ("we", "us", "our"). We are the data controller for the personal data described in this policy.

You can contact us about anything in this policy, or to exercise your rights, at zespmity@gmail.com.

Information we process

Blink is designed to collect as little as possible. We do not ask for your name, email address, phone number or a password, and we do not keep a history of your conversations. The information processed when you use Blink is:

• Anonymous account ID. When you first open Blink, Firebase Anonymous Authentication creates a random identifier for your installation so the app can use the service. We do not link it to your real identity.
• Your matchmaking choices. The gender you select and the gender you want to meet. They are stored on your device. While you are searching they are also written to our matchmaking queue, together with your anonymous ID and timestamps, so that two compatible devices can be paired. The queue contains no name or contact details, and your entry is removed when you stop searching or disconnect. When you are matched, your app also tells the stranger your gender, which is shown to them as a symbol next to "Stranger".
• Strangers to skip. While you are searching, your queue entry also lists the anonymous IDs of up to 100 strangers you have blocked or just talked to, so that our matcher does not pair you with them. This list is removed with your queue entry.
• Match records. When you are matched, we keep a short record of the match: the two anonymous IDs, when it started, whether each side is still connected, and whether the conversation was resumed. It lets both of you rejoin a conversation that was interrupted, for up to 2 minutes. It contains no messages, and it is deleted when the conversation ends, or automatically shortly afterwards if neither app could remove it.
• Connection (handshake) data. To set up the direct device-to-device link, your device exchanges WebRTC session descriptions (offer and answer) and network candidates through Firebase. These may include IP addresses, which are required for the two devices to connect. They are deleted when the conversation ends.
• Messages and images. Text and images travel directly between the two devices over an encrypted WebRTC DataChannel. We do not store them on our servers, and they are removed from the app when the conversation ends.
• Images you choose to send. When you pick a photo, it is compressed on your device and streamed to the other person. It is not uploaded to our servers.
• Abuse reports. If you report someone, we store the reporter and reported anonymous IDs, the report category, any note you add, the match ID and the time of the report, so that we can investigate. The app also files a report automatically when its on-device check catches a message that breaks our child safety rules; these reports never contain the message itself.
• Device identifier and integrity check. So that a suspension cannot be escaped by reinstalling the app, Blink links your anonymous ID to an identifier for your device: on Android, the app-specific Android ID; on iOS, a random identifier Blink stores in your device's keychain. We store only a one-way hash of it, never the identifier itself. To make sure this comes from the genuine app on a genuine device, your device obtains a verdict from Google Play Integrity (Android) or Apple App Attest (iOS) and our server checks it with Google or Apple. These verdicts are not stored.
• Suspensions. Our server reviews each new report automatically and may suspend the reported account, as described in our Community Guidelines. If an account is suspended, we store its anonymous ID, the reason and when the suspension ends, so the suspension can be enforced. The suspension also applies to the hashed identifier of the device the account used, and to other anonymous IDs created on that device. The details of each suspension and the reports behind it are sent to our moderation email inbox so a person can review it.
• On-device safety check. Messages are checked on your device for content that sexualises minors. Nothing is uploaded for this check.
• Advertising data (free version). In the free version, Google AdMob displays a banner ad and, at most every few chats, a full-screen ad between conversations. AdMob may process your advertising identifier, IP address, device information and how you interact with ads, in line with the consent choices you make.
• Ad revenue data. When an ad is shown, the estimated revenue it earned, its format and placement are sent to RevenueCat together with your anonymous ID, so that we can measure how the app is funded. This contains nothing about your conversations.
• Purchase data. If you subscribe to Blink Premium, RevenueCat processes your anonymous ID and subscription status, and Apple or Google process the payment. We never receive your card details.
• Device and technical data. The service providers listed below process your IP address and basic device or app information, such as your operating system and app version, to run, secure and measure the service.
• Data kept on your device. Your gender, your preference, your block list, your photo and notification settings and your confirmation that you are 18 or older are stored in local storage on your device. Your block list is only shared with our matcher while you search, as described above.

Camera, photos and other permissions

• Camera and photos: requested only when you choose to take or send an image. The image is processed on your device before it is sent.
• Notifications: optional. If you allow them, Blink shows notifications from your device when a chat needs you back, such as when a message arrives while the app is in the background. They are created on your device, never include what was said or anything about the stranger, and you can turn them off in Settings at any time. We do not use push tokens or send notifications from our servers.
• Network access: required to reach the matchmaking service and to connect to the other person.
• App updates: on Android, Blink asks Google Play whether a newer version is available. This check is handled by Google Play.
• Screenshot protection: Blink blocks screenshots and screen recordings while it is open, as a privacy measure. This does not collect any data.

How and why we use information

• To create an anonymous account and operate matchmaking.
• To connect you to the person you are matched with and to deliver your messages and images.
• To keep Blink safe, prevent abuse, and review and act on reports.
• To show and measure ads in the free version.
• To process and manage subscriptions.
• To comply with our legal obligations and to enforce our Terms & Conditions.

Legal bases (EEA and UK)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Performance of a contract: providing matchmaking, chat and any subscription you buy.
• Legitimate interests: keeping the service safe, preventing abuse and improving reliability.
• Consent: personalised advertising and any optional tracking, which you can withdraw at any time.
• Legal obligation: retaining information where the law requires it.

Sharing information

We do not sell your personal data. We share it only where it is needed:

• With the stranger you are matched with, to the extent the connection requires it. Because Blink connects devices directly, your IP address may be visible to the person you talk to, and anything you send can be saved or screenshotted by them.
• With service providers who process data on our behalf: Google (Firebase, AdMob and Play services), RevenueCat, Expo, and Apple or Google for payments.
• With authorities or other parties where we are legally required to do so, or where it is necessary to protect rights or safety, or to investigate abuse.
• In connection with a merger, acquisition or sale of assets, where information may be transferred as part of the business.

Third-party services

Blink uses the following third-party services. Each has its own privacy policy, which we encourage you to read:

• Firebase (Google)
• Google Privacy Policy
• Google AdMob
• RevenueCat
• Expo
• Apple

Advertising and your choices

The free version of Blink is supported by ads. Before any ad is requested we ask for your consent using Google's consent tool, and on iOS we ask whether the app may track you across other apps and websites.

• You can change or withdraw your advertising consent within the app, or reset it in your device settings.
• iOS: Settings then Privacy & Security then Tracking, and Settings then Privacy & Security then Apple Advertising.
• Android: Settings then Privacy then Ads, where you can delete or reset your advertising ID and opt out of personalised ads.
• Subscribing to Blink Premium removes ads.

International data transfers

Our service providers may process your information in countries outside your own, including the United States. Where the law requires safeguards for international transfers, we rely on mechanisms such as the European Commission's Standard Contractual Clauses and adequacy decisions.

How long we keep information

• Conversations and images: not stored; they are removed from the app when the conversation ends.
• Matchmaking queue entries: deleted when you stop searching or disconnect.
• Match and handshake records: deleted when the conversation ends. If the app could not delete them, for example because it closed unexpectedly, our server deletes them automatically, usually within an hour.
• Abuse reports: kept for as long as needed to investigate and to meet legal obligations.
• Suspension records: kept while the suspension is in force and for as long as needed to review or appeal it.
• Device links (the hashed device identifier and the anonymous IDs created on that device): kept for as long as needed to enforce suspensions.
• Device-local data: kept until you erase it in Settings, Privacy & safety, or uninstall the app.
• Purchase records: kept by the stores and RevenueCat as required for tax and accounting law.

Security

Messages and images are carried over an encrypted WebRTC DataChannel, and data in transit to our service providers is encrypted. We use physical, electronic and procedural safeguards to protect the information we process. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, to data portability, and to withdraw consent at any time without affecting processing carried out before you withdrew it. You can erase everything Blink keeps on your device at any time with "Erase and start over" in Settings, Privacy & safety. Because we do not know who you are, include your anonymous ID or the time of the relevant conversation when you contact us, so that we can find the records about you. To exercise these rights, contact us at zespmity@gmail.com. You also have the right to complain to your local data protection authority.

Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request its deletion or correction, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising your rights. We do not sell your personal information. Because ad partners may use data for personalised advertising, you can limit that sharing through the in-app consent choice and your device's advertising settings. To exercise your rights, contact us at zespmity@gmail.com.

Children

Blink is only for people aged 18 or over. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 is using Blink, contact us and we will act to remove their data.

Content moderation and platform rules

Blink lets people talk to strangers, so it has rules and tools to keep it safe: you can report a person, block them, end a conversation immediately, and turn off receiving photos. Reports are checked automatically by our server: an account reported for child safety is suspended until reviewed, and an account reported by several different people is suspended for a period. Suspended accounts cannot enter matchmaking. Our Community Guidelines and Child Safety Standards explain the rules in full. Where the EU Digital Services Act applies, we provide a point of contact, give reasons for any moderation decision, and process notices of illegal content promptly. Reports are the one type of content-related information we store, and they never include your messages.

Changes to this policy

We may update this policy from time to time. When we make material changes we will update the date above and, where required, ask for your consent. Continuing to use Blink after an update means you accept the revised policy.

Contact us

If you have any questions about this policy or about your data, contact us at zespmity@gmail.com.