Humming Bird — Privacy Policy

Last Updated: August 25, 2026

Humming Bird ("we," "us," or "our") operates the Humming Bird mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App and related services.

By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: Phone number (verified via SMS one-time password), display name, profile picture, and optional "about" text.
• Contacts: With your permission, we access your device contacts to help you find and connect with other Humming Bird users. Contact data is processed solely for matching accounts.
• Messages and Communications: Text messages, voice messages, images, videos, documents, and other media you send through the App.
• Status/Stories: Photos, videos, text stories, and scheduled moments you choose to share.
• Call Data: Audio and video call content is transmitted peer-to-peer and is not stored on our servers. Call metadata (duration, participants, timestamps) may be logged for call history.
• Scheduled Messages: Content and scheduling details for messages you schedule for future delivery.

1.2 Information Collected Automatically

• Device Information: Device model, operating system version, unique device identifiers, and network type.
• Log Data: IP address, access times, pages viewed, and app crash logs.
• Push Notification Token: Firebase Cloud Messaging (FCM) token used to deliver push notifications.

1.3 Information from Third Parties

• Firebase Analytics: Aggregated, anonymised usage statistics.
• SMS Verification: We use MSG91 to send one-time passwords. MSG91 processes your phone number solely for delivery of the verification message.

2. How We Use Your Information

• Provide, operate, and maintain the Service.
• Verify your identity via phone number OTP.
• Deliver messages, calls, media, and notifications in real time.
• Match your device contacts with existing Humming Bird users.
• Display your profile, status/stories, and call history.
• Schedule and deliver messages and moments at your specified times.
• Provide AI-assisted features (message suggestions) via OpenAI's API.
• Detect and prevent fraud, abuse, and security incidents.
• Communicate with you about updates, security alerts, and support.

3. How We Share Your Information

We do not sell your personal information. We may share information with:

• Amazon Web Services (AWS) — cloud hosting and database infrastructure.
• Firebase (Google) — push notifications and analytics.
• MSG91 — SMS/OTP delivery.
• OpenAI — AI message generation (only the text you submit is sent; it is not linked to your identity).
• Other Users: Your display name, profile picture, and about text are visible to users you communicate with. Your phone number is not publicly displayed.
• Legal Requirements: We may disclose information if required by law, court order, or governmental request.

4. Data Retention

• Messages and Media: Retained on our servers as long as your account is active. Deleted messages are removed from active storage.
• Account Data: Retained until you request account deletion.
• Call Metadata: Retained for the duration shown in your call history; you may clear it within the App.
• Local Data: The App stores messages, contacts, and media locally on your device using encrypted local storage. This data is removed when you uninstall the App or clear App data.

5. Data Security

We implement industry-standard security measures:

• End-to-end client-side encryption using a multi-layer encryption cascade (AES-256-CBC, Salsa20, Blowfish, TripleDES, RC4) applied before transmission.
• Server-side encryption (AES-256-GCM) for data at rest.
• TLS/SSL for all data in transit.
• JWT-based authentication for API access.
• MySQL database hosted on AWS RDS with network access controls.

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights and Choices

• Access & Correction: You may update your name, profile picture, and about text at any time through the App settings.
• Contact Permissions: You may revoke contact access at any time through your device settings.
• Notification Permissions: You may disable push notifications through your device settings.
• Data Deletion: You may request deletion of your account and associated data by contacting us at the email below.
• Call History: You may clear your call history within the App.
• Status Privacy: You may control who sees your status/stories (Everyone, Contacts, Close Friends, or specific users).

7. Children's Privacy

The App is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Our servers are hosted in India on AWS. By using the App, you consent to such transfers.

9. Third-Party Services

The App uses third-party services that collect information. Their privacy policies are linked below:

• Google Firebase / Google Play Services
• MSG91
• OpenAI
• Amazon Web Services (AWS)

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy in the App and updating the "Last Updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Humming Bird Team
Email: support@myhummingbird.net
Website: https://myhummingbird.net