Privacy Policy

1. Introduction

This Privacy Policy explains how OnFire ("OnFire," "Company," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use our mobile application, website, and related services (collectively, the "Service"). The company that operates OnFire and acts as data controller, together with its address, is identified in Section 16, Who We Are and How to Contact Us.

We are committed to protecting your privacy and being transparent about our data practices. By using OnFire, you consent to the practices described in this Privacy Policy.

1.1 Our Privacy Principles

2. Information We Collect

2.1 Information You Provide

2.2 Information Collected Automatically

2.3 Information from Third Parties

We may receive information from social sign-in providers, payment processors, partners and integrations, and other users (messages sent to you, tags, mentions, and contact uploads with your permission).

3. How We Use Your Information

4. How We Share Your Information

5. Your Privacy Controls and Rights

6. Data Retention

We retain your information for as long as your account is active, as needed to provide our services, and as required by law or for legitimate business purposes.

After Account Deletion

Profile and content are removed within 90 days. Some data may persist in backups temporarily. Certain information is retained for legal compliance. Aggregated/anonymous data may be kept indefinitely.

Specific Retention Periods

7. Data Security

Security Measures

• • Encryption in transit (TLS/SSL)
• • Encryption at rest for sensitive data
• • End-to-end encryption for private messages (where enabled)
• • Secure authentication systems
• • Regular security audits and testing
• • Access controls and monitoring
• • Incident response procedures

Your Role in Security

Use a strong, unique password; enable two-factor authentication; do not share login credentials; report suspicious activity; keep your device and apps updated.

Data Breach Response

In the event of a data breach, we will notify affected users as required by law, take steps to mitigate harm, and cooperate with authorities as appropriate.

8. International Data Transfers

OnFire operates globally, and your information may be transferred to and processed in countries outside your residence. Where we transfer your information across borders, we apply appropriate safeguards as required by applicable law.

9. Children's Privacy

OnFire is not intended for children under 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect information from children below this age.

OnFire does not hold a date of birth for any account and does not verify age, so we cannot identify which accounts belong to users aged 13 to 17. We therefore do not currently apply age-specific settings, feature restrictions, content filtering or consent requirements to those accounts. We would rather state this plainly than describe protections that are not in place.

Parents and guardians can request deletion of a child's account and contact us with concerns at [email protected]. OnFire does not currently offer parental controls, supervised accounts, or any facility for a parent to view or manage a child's account, and we do not hold a date of birth for any account, so we cannot identify which accounts belong to children. If we learn we have collected information from a child without proper consent, we will delete it promptly.

10. Child Safety Scanning & CSAM Protection

OnFire is committed to preventing child sexual exploitation and protecting minors from grooming and predatory behavior. We employ multiple layers of safety technology, including on-device artificial intelligence and server-side systems, to detect and respond to potential threats.

10.1 On-Device Safety Scanning

OnFire uses on-device AI classifiers to analyze conversation patterns for indicators of grooming behavior. This scanning occurs locally on your device, meaning conversation content is processed without being sent to our servers for this purpose. The AI model evaluates anonymized conversation metadata and patterns against known grooming indicators, including age probing, isolation tactics, secrecy requests, boundary testing, sexual escalation, and other recognized risk categories.

On-device scanning produces a risk assessment score. If the risk score falls below a safety threshold, no data leaves your device. Only when risk indicators exceed defined thresholds may limited safety event data (risk score, risk category, and conversation identifier — not the conversation content itself) be transmitted to our servers for review.

10.2 Server-Side Safety Systems

When on-device scanning identifies elevated risk, our server-side safety systems may perform additional analysis, including cloud-based AI confirmation of risk assessments. The capability to match uploaded images and video against known CSAM hash databases is built into OnFire but is not currently switched on, so uploads are not presently hash-matched. We describe it here because it exists and because we intend to enable it, not because it is running today. All safety processing is strictly limited to child safety purposes.

10.3 Safety Event Data

When safety systems detect potential risks, we may collect and process the following data:

• • Risk assessment scores and categories from on-device and cloud classifiers
• • Conversation identifiers (not message content) associated with safety events
• • Timestamps and metadata of safety events
• • Actions taken (e.g., conversation restrictions, review requests)
• • Evidence preserved for confirmed CSAM detections as required by law

Safety event data is retained for as long as necessary to fulfill legal obligations, complete investigations, and comply with reporting requirements. Evidence related to confirmed CSAM detections is retained in accordance with 18 U.S.C. § 2258A.

10.4 NCMEC Reporting

As a U.S. electronic service provider, OnFire is legally required under 18 U.S.C. § 2258A to report apparent child sexual abuse material (CSAM) to the National Center for Missing & Exploited Children (NCMEC) via the CyberTipline. When our systems detect confirmed or highly likely CSAM, we will:

• • Preserve evidence as required by law
• • Submit a CyberTipline report to NCMEC as soon as reasonably possible, as required by 18 U.S.C. § 2258A
• • Restrict the associated accounts and conversations
• • Cooperate with NCMEC, law enforcement, and other authorities as required

We are prohibited by law from notifying users when a CyberTipline report has been filed regarding their account.

10.5 Escalation and Conversation Restrictions

Our safety systems employ a tiered escalation model based on risk severity:

• • Low risk: Events are logged locally for pattern monitoring. No user-facing action is taken.
• • Elevated risk: Safety events are reported to our review team. Conversations may be placed under enhanced monitoring.
• • High risk: Both participants may be asked to complete age verification. The conversation may be temporarily paused pending verification.
• • Critical risk: The conversation is immediately locked for both participants. Our review team is notified with priority, and mandatory reporting obligations may be triggered.

Conversation restrictions are applied bilaterally to both participants in a flagged conversation. Users may request a review of safety restrictions through our support channels.

10.6 Apple Sensitive Content Analysis

OnFire supports Apple's Sensitive Content Analysis framework on supported Apple devices (iOS 17+), which detects potentially explicit images and video entirely on your own device using Apple's built-in technology. This integration is built but is not currently enabled, so it is not analysing content today. Where it is enabled, OnFire does not receive or process the content of images analysed by the framework; sensitive content is blurred and you are warned before choosing whether to view it.

11. Special Categories of Data

We may process certain sensitive information only with your explicit consent or as permitted by law, including biometric data (face recognition for verification), health information, religious or political views, and sexual orientation (only if you choose to include these in your profile).

You control whether to share sensitive information. Such data is processed only for the specific purposes you authorize.

12. Third-Party Services

OnFire may integrate with third-party services including payment processors, maps and location services, analytics providers, and communication APIs.

Our Service may contain links to external websites. We are not responsible for the privacy practices of third parties. We encourage you to review their privacy policies.

13. Cookies and Tracking Technologies

You can control cookies through browser settings, device settings, and our cookie preference center on the web. Note that disabling certain cookies may affect functionality.

14. California Privacy Rights (CCPA/CPRA)

California residents have additional rights:

To exercise these rights, contact us at [email protected] or through app settings.

15. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notice, update the "Last Updated" date, and provide at least 30 days notice before significant changes take effect. Your continued use after changes constitutes acceptance of the updated policy.

16. Who We Are and How to Contact Us

OnFire is operated by OnFire Messenger Inc., a Delaware corporation, which is the data controller for the information described in this Policy. For questions, concerns, or to exercise your rights: