1. Information collected and its use
We use information to operate accounts and calls, secure the service, diagnose failures, and handle reports and abuse.
- Social profiles and connections: optional biography, interests, language, conversation goals, profile/cover images, discovery and privacy preferences, connection requests and accepted relationships. Profiles are not discoverable by default. Images are re-encoded to remove metadata.
- Private conversations: accepted Google-linked connections can exchange stored text, images and voice messages. The service stores message content, attachments, timestamps, optional reactions and privacy-controlled read status to provide history. This is separate from temporary text during random calls. Private conversation data is not end-to-end encrypted by this implementation. Attachments require authorised access; notification payloads do not include message contents.
- Account and profile: a generated user identifier, guest or Google sign-in type, alias, self-declared age, gender selection, manually entered country and city/region, and acceptance of rules. Bullsplit Live does not request GPS permission or collect GPS coordinates.
- Google sign-in: if selected, we verify a Google identity token and retain its account subject identifier, verified display-name default and available profile picture. Existing chosen Bullsplit names are preserved. The Bullsplit Live profile database does not collect your Google password, email address or phone number. Google separately processes authentication information.
- Camera and microphone: with your permission, the app accesses these for a private preview and sends enabled live video/audio to your assigned participant after you start matching. Preview access is separate from transmission. You can disable either, stop the call, or revoke device/browser permissions. Backgrounding stops media. Bullsplit Live does not record calls or capture call screenshots.
- Session and call metadata: session identifiers and expiry times, matching queue and participant associations, call allocation/end times and connection state, separate from call media.
- Activity and diagnostics: login/consent, matching and call events, Stop/Next, permission/connection results, media toggles, foreground/background events, bounded API error codes, platform and app/browser version. Android also supplies its SDK version. Client-reported events do not prove media was received.
- Safety information: report categories/comments, blocks, bans and moderation actions. Reporting a private conversation may include up to five recent text-message records as review evidence, available only through the protected moderation workflow. Reports do not capture call media. Avoid unnecessary personal information in report comments.
- Online presence: while signed in with the app visible, a heartbeat is sent about every 15 seconds. Other signed-in users see an aggregate count and generic icons, including themselves. This does not expose a directory or start a call. Lost connections normally expire from the count after about 45 seconds.
- Network and support information: servers and providers receive IP/network information needed for connections. Application rate limits use keyed IP hashes; hosting/security logs may separately contain IP addresses. If you contact support, we receive the information and email address you send.
Social data: profile information and message history are stored to provide your chosen features until removed or the account is deleted. Deleting your own message removes its content from normal retrieval; clearing a conversation only hides history for your account. Account deletion clears your social profile, uploads and authored message content. Unused private chat attachments are removed after one day. Call history, reports, appeals and moderation audit records may remain for up to 90 days. Blocking prevents future requests, messages and calls; unblocking does not recreate a connection.
3. Security and retention
API requests use HTTPS and calls use encrypted WebRTC transport. Android session tokens use Android Keystore protection; browser tokens use session storage. Server authentication records store token hashes. Activity logs exclude passwords, access/refresh tokens, Google tokens, provider secrets and call media. No system guarantees absolute security.
- Access tokens last 15 minutes; guest sessions at most 24 hours and Google sessions at most 30 days.
- Profiles remain until deletion. Expired guest profiles are anonymized by scheduled cleanup after sessions expire.
- Ordinary activity events and closed, unreported call metadata are retained for about 7 days.
- Reports, blocks and moderation audit records are retained for up to 90 days. Report-linked call metadata remains while referenced by a report, then becomes eligible for cleanup.
- Deletion immediately removes profile fields and sessions. Minimal pseudonymous identity/enforcement records may remain for safety. Cleanup removes deleted identities once they are at least 90 days old and no retained call, report or block references them.
- Presence entries are removed after one day of inactivity or removal of their session. Expired rate-limit buckets are cleaned up.
These periods describe the live application database and scheduled cleanup. Backups, support correspondence, infrastructure/provider security logs and legally required records may follow separate schedules; deletion does not instantly erase every backup copy. Contact us about particular requests. Provider practices are also described in their linked policies.
4. Account and data deletion
In the Android or web app, sign in and select Settings → Delete account, then confirm. This ends matching, revokes sessions and anonymizes your profile. Signing out or uninstalling does not delete a Google-linked account.
If you cannot use the app, email support@bullsplit.in with the subject Bullsplit Live account deletion. Request deletion of your account and associated data and provide account context. We may need to verify control of the account. Do not send passwords, tokens, identity documents or recordings in an initial request. An alias alone may not uniquely identify an account; an anonymous guest may be impossible to identify from an email if the original session has been lost.
Deletion removes alias, age, gender, country/city and consent fields and revokes authentication sessions. Limited pseudonymous enforcement/safety records may remain as described above. Deleting Bullsplit Live does not delete your Google account.
5. Your choices and privacy requests
You can edit your profile, stop matching, disable camera/microphone, revoke permissions, report/block a participant and delete your account. Clearing browser session storage or uninstalling clears local app data; use account deletion separately for server-side profile data.
Optional Android online alerts
If you enable People online alerts, Firebase Cloud Messaging processes an app-installation identifier, a messaging token and delivery metadata to deliver a generic alert when someone signs in and is still online. No name, location or email is included. The payload includes a random login-specific source key so the initiating installation can suppress its own alert; no stable account identifier is broadcast. Bullsplit does not maintain a server-side list of recipients or messaging tokens for these alerts. A shared broadcast limit allows at most one send attempt per hour; the app also limits displayed alerts to one per hour and discards old messages. Delivery and continued availability are not guaranteed.
Alerts are optional and off by default. Enable or disable them under Alerts in the app, or revoke notification permission in Android settings. Notification preferences and a local hourly timestamp stay on the device and are excluded from app backup. Google processes messaging under its Firebase privacy information. These alerts are separate from public directory visibility.
Website and installed-PWA online alerts use the same browser Web Push subscription service as Bullsplit blog updates. Browser permission controls delivery. Online alerts expire after two minutes and have an hourly display limit; blog notification limits are separate.
Optional recently active profile
This setting is off by default. If you enable “Show me in Recent online”, anyone visiting Bullsplit Live can see your chosen display name, gender icon and online status. Recent activity is shown without a timestamp. Age, location, email, account identifiers and call history are not included in this public list. Guests use a placeholder avatar. Online does not necessarily mean available for a call; searching status reflects the matching queue.
The activity table keeps at most 20 offline profiles active within the last 24 hours, plus currently online opted-in profiles. The public list displays up to 50 online profiles. Expired and excess activity entries are removed during presence updates, public-list reads and scheduled cleanup. Turn visibility off in Settings to remove your public activity entry immediately; other visitors' screens refresh approximately every 15 seconds. Deletion or a ban also removes the entry. The visibility preference and photo URL are profile settings, rather than an unlimited history of visits. Signing out ends online presence but an opted-in recent entry can remain for up to 24 hours.
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, request a portable copy or complain to your local data-protection authority. Send requests to support@bullsplit.in. We may verify ownership and explain lawful limitations.
The web app uses session storage for login tokens and the shared Bullsplit traffic-source cookie, which lasts up to 30 days. Google sign-in can use Google's own storage/cookies. Other Bullsplit pages may use different features covered by their separate policy.
6. Adults only
Bullsplit Live is for people aged 18 or older. Age is currently self-declared, not independently verified. Do not use the service if under 18. Report suspected underage use through Report → Underage or support@bullsplit.in. Do not send illegal or abusive media to support. Contact local emergency services for immediate danger.
Optional Chat Coach
Chat Coach is off by default for each private conversation. Local icebreakers are authored templates and do not use AI or read your chat. If you enable AI and explicitly request a suggestion, Bullsplit sends your draft and your own optional context to Groq. Recent text messages (at most eight, with a small size limit) and confirmed common interests are included only if both participants have given informed permission for that conversation and the requester selects recent context. Names, account identifiers, attachments, images and audio are excluded. Detected email addresses, phone numbers and links are removed; this filter cannot recognise all sensitive information, so remove private details yourself.
Suggestions are not automatically sent. You choose whether to copy, insert, edit or discard them. AI may make mistakes; tone feedback is tentative and does not establish anyone's feelings. You can disable AI and withdraw message-sharing permission in Chat Coach. Withdrawing permission prevents future context use but cannot undo a request already sent to the provider. Bullsplit does not save AI prompts or suggestions, create emotional profiles, or use conversation data to train models. Content-free request metadata (action, token counts, estimated cost, latency and optional feedback) is retained for seven days; conversation permissions remain until you change them or delete your account. Groq's processing and any limited security retention follow its data policy. Bullsplit does not represent that provider retention is always zero.
7. Updates and contact
Updates appear here with a revised date. We provide additional notice or request consent where required. Contact Bullsplit at support@bullsplit.in for Bullsplit Live privacy, support, deletion and moderation-review requests.
Terms and community rules
Use the service only if you are at least 18 and accept its rules. No nudity, sexual behavior, child sexual abuse or exploitation, harassment, hate, violence, threats, scams, impersonation or recording others. Do not bypass bans/blocks/rate limits or disclose another person's private information.
You can stop, report and block at any time. Reporting also blocks that participant. Moderators can ban accounts and review account/report metadata; reports contain no call recording. Matching depends on networks and participant availability. We cannot guarantee a match, another person's conduct or prevention of repeat offenders creating guest identities. Request moderation review through support@bullsplit.in with relevant account context.