Privacy

We collect what we need to run Gistroom and nothing we do not need. This page explains it. Last updated 10 October 2026

Enter Gistroom

Who we are

Gistroom is run from Nigeria. For privacy questions or to use your rights, write to support@gistroom.ng.

What we collect

Account details: your email, name, username, profile photo and bio
Your sign in method and a salted hash of your password if you set one
Messages, voice notes, photos, videos and files you send, and the call and room records you create
Devices signed in to your account, with a coarse device name and last active time
Settings such as privacy, notifications and data saver
Basic technical data such as your IP address for security and rate limits

Why we use it

To run the service: deliver messages, connect calls and rooms, and send alerts you asked for
To keep people safe: stop abuse, review reports and enforce our rules
To keep the service secure and working: rate limits, fraud checks and fixing bugs
To contact you about your account, such as sign in codes and security notices

How long we keep it

Chats and media stay until you or the other person delete them, or until you delete your account
Room chat is removed 24 hours after a room ends, kept only so reports can be handled
Expired codes and old sessions are cleaned up regularly
Reports are kept so we can protect people, even after an account is deleted

Your rights

Under the Nigeria Data Protection Act you can ask to see your data, correct it, export it and delete it. You can export your data and delete your account from Settings. For anything else, write to support@gistroom.ng.