Privacy Policy

01 Who we are

Where data protection law applies, the operator of iFart is the controller of the personal data described here. In this policy, "we" means the operator and "the app" means iFart for iOS and Android.

02 What we collect

Only what the app needs to work. There is no advertising SDK, no analytics profile built about you, and no tracking across other apps or websites.

If you play as a guest.

• A generated username and an account record. No email, no name, no provider identity — we do not know who you are.

If you sign in with Apple or Google.

• The account identifier that provider gives us, so we can recognise you next time.
• Your email address, if the provider shares it. Apple's Hide My Email relay address is fine and is all we ever see in that case.
• Your display name and profile photo URL, if the provider shares them.

What you create in the app.

• Your recordings, together with the title, category and duration you post them with.
• Your comments, your reactions, and the score the classifier assigned to each recording.
• Your username, display name, badges, and any cosmetic items you have equipped.

Safety and moderation.

• Who you have blocked, and any reports you file — including which item and the reason you gave.
• Reports filed about your content, and any moderation decision taken on it.

Purchases.

• Which items you bought and the store transaction identifier for each, so a purchase can be verified and restored. We never receive your card details or billing address — those stay with Apple, Google and our payments provider.

Technical.

• Your IP address, used to rate-limit sign-in attempts and to stop abuse. It is not used to build a profile of you.
• Server logs of requests, each with a request identifier so a support message can be traced to what actually happened.
• Session records so you stay signed in. The sign-in token itself is stored only as a hash — we cannot read it back.

03 Your recordings are public

Treat anything you post as public. Deleting a recording removes it from the app and deletes the stored file, after which the address stops working — but we cannot recall a copy somebody already downloaded.

Your profile — username, display name, badges, post count, vote count and best rank — is visible to other people using the app. Your email address never is.

04 Why we hold it

• To run the app — showing the feed, playing audio, keeping you signed in, ranking leaderboards, granting the items you bought. Where the GDPR applies, this is performance of our contract with you.
• To keep it usable — screening recordings for speech, rate limits, blocking, reporting, and acting on reports. Where the GDPR applies, this is our legitimate interest in a service that is not overrun.
• To meet legal obligations — responding to a lawful request, or keeping records we are required to keep.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in California law.

05 Who else processes it

These providers handle data on our behalf, under contract, for the purposes below and nothing else.

• Amazon Web Services — hosting, the database, and storage of the recordings themselves.
• OpenAI — recordings are sent for speech screening before they are allowed to post. This is how a clip containing talking is refused. The audio is sent for that check; the resulting text is used only to decide whether to reject the post.
• Our classification provider — recordings are sent to be scored for fart-likeness, producing the number that decides Verified-ish status and leaderboard eligibility.
• RevenueCat — verifying that a purchase really happened before we grant the item.
• Apple and Google — sign-in, and the app stores that process payment. Their own privacy policies cover what they do with it.

We may also disclose information where we are legally required to, or where it is necessary to investigate abuse or protect someone's safety. If iFart is ever sold or merged, account data may transfer with it, and we will say so here before that takes effect.

06 How long we keep it

• Your account, until you delete it. When you do, your profile, recordings and comments disappear from the app immediately and every session is ended on the spot.
• Thirty days, then it is gone. After the grace period the account is erased permanently, along with the stored audio files. This is not a soft delete that lingers.
• A deleted recording is removed from the app at once and its stored file is deleted with it.
• Expired sign-in sessions are cleared out automatically, every hour.
• Uploaded audio you never posted is swept away weekly.
• Moderation and safety records may be kept longer where we need them to stop someone returning after a ban, or to answer a legal request.
• Server logs are kept only as long as they are needed to run and secure the service, and are then discarded.

07 Your choices and rights

Inside the app, without asking us:

• Edit your username, display name and photo.
• Delete any recording or comment you posted.
• Block anyone, in both directions, everywhere at once.
• Report a recording, a comment or an account.
• Delete your account, in Settings under Danger Zone. If you are playing as a guest, note that signing out has the same effect — a guest account has no credential to sign back in with, so it cannot be recovered.
• Turn off microphone access in your device settings. You will not be able to record, but everything else still works.

Depending on where you live, you may also have the right to a copy of your data, to correct it, to have it erased, to restrict or object to how we use it, to take it elsewhere, and not to be discriminated against for asking. Write to [email protected] and we will respond within the time the law allows. We may need to confirm you control the account before acting.

If you are in the EEA or the UK and think we have got this wrong, you may complain to your local data protection authority. We would rather you told us first.

08 Children

iFart is not for children. You must be at least 13 to use it, and at least 16 in countries where that is the minimum age for consenting to this kind of service. We do not knowingly collect data from anyone below that age. If you believe a child has created an account, write to [email protected] and we will delete it.

09 Security

Traffic between the app and our servers is encrypted in transit. Sessions are signed with a private key that never leaves the server, sign-in tokens are stored only as hashes, and the app keeps your credentials in the device's own secure storage — the iOS Keychain or the Android equivalent. Access to production data is limited to people who need it.

No service is perfectly secure, and we will not pretend otherwise. If a breach affects you, we will tell you and the relevant authority as the law requires.

10 Where your data is held

Some of the providers above operate internationally, so your data may be processed outside your country — including in the United States. Where we transfer personal data out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses, or the UK Addendum, as applicable.

11 Changes

If we change this policy we will update the date at the top, and for anything that materially affects you we will say so in the app before it takes effect. Continuing to use iFart after a change means you accept the updated policy.

12 Contact

Privacy questions, requests and complaints: [email protected].