Privacy Policy.

Last updated: June 11, 2026

Realer is built around the idea that your conversations belong to you and the people you're talking to — nobody else. Your videos and messages are end-to-end encrypted on your device before they ever reach our servers, and they are automatically deleted from our servers within roughly 24 hours. This policy explains exactly what we collect, why, who we share it with, and what we don't do.

1. Who we are and what this covers

Realer is operated by Real Apps LLC ("we," "us," "our"), a company based in the United States. We operate the website at realer.vip and the Realer mobile application for iOS (together, the "Service"). This policy describes how we collect, use, disclose, and retain personal information when you use the Service. It does not cover third-party services you reach through the Service (for example, apps you share an exported video to). For questions, email info@realer.vip.

2. Information we collect

Account information

• Phone number or email address — used to verify your identity and create your account. If you sign in with an email code, the code itself is stored only briefly (see Section 7).
• Date of birth — collected once during sign-up to verify you are old enough to use Realer (see Section 11). If you meet the age requirement, your date of birth is stored with your account; if you do not, your sign-up is cancelled and no account or profile is retained.
• Display name, an optional username, and an optional profile photo.
• A unique account identifier generated when your account is created, and your account creation date.
• Your encryption public key — generated on your device when you sign up. Your matching private key never leaves your device (see Section 3).

Your content

• Video clips and text messages you send. Both are end-to-end encrypted on your device before upload; our servers store only ciphertext we cannot read (see Section 3).
• Conversation metadata needed to deliver your content: sender and recipient account identifiers, timestamps, video durations and ordering, delivery state, and the cryptographic values (salt, nonce, sender public key) recipients need to decrypt. Metadata is protected in transit and at rest but is not end-to-end encrypted — we need it to route and deliver your messages.

Contacts

We never read or upload your address book. When you invite a friend, you choose them through Apple's system contact picker, and only the contacts you explicitly select are shared with the app. If you invite someone who isn't on Realer yet, we store the phone number and name you selected, together with your invitation (which may include a short blurred video preview), so we can connect you when they join.

Device and usage information

• Push notification token — so we can deliver notifications to your device. It is removed when you sign out, and invalid tokens are deleted automatically.
• App analytics — we use Google Firebase Analytics to understand how the app is used: events such as sign-up and login method, screens viewed, and when a video is sent or watched (including its duration and the account identifier of the other participant — never the content itself). Firebase also collects standard device information such as device model, operating system version, app version, and language. We do not use advertising identifiers (IDFA), advertising SDKs, or cross-app tracking.

Safety and moderation information

• Reports you submit about other users or content (reason, the accounts involved, timestamp).
• Your block list — visible only to you and to us.
• Activity counters — we keep daily counts of how many videos and messages each account sends. These are counts only, never content, and are used solely for moderation (see Section 6).

What we do not collect

We do not collect your location, your photo library (we only request permission to save videos you export), your health data, or your advertising identifier. Face ID, where used, is processed entirely by iOS on your device; we never receive biometric data.

3. End-to-end encryption

Realer videos and text messages are end-to-end encrypted. Each message or video is encrypted on your device with AES-256-GCM, using a one-time key derived (via HKDF-SHA256) from an elliptic-curve key exchange (P-256 ECDH) between your private key and the recipient's public key. Your private key is generated on your device, stored in the iOS Keychain, excluded from device backups, and is never transmitted to us or anyone else.

What this means in practice: we cannot read your videos or messages, and neither can our storage providers. Our servers hold only encrypted data. Notification previews are delivered encrypted and decrypted on your device, so the plain text of a message is not exposed to push notification infrastructure.

Two honest caveats:

• Metadata is not end-to-end encrypted. We can see who is talking to whom, when, and how long a video is — but not what was said or shown.
• Your encryption key is bound to your device. If you switch phones or reinstall the app, a new key is created and content encrypted to your old key cannot be recovered — by you or by us. This is a deliberate trade-off in favor of your privacy.

When you save or share a video out of Realer (which, for conversations containing the other person's videos, requires approval from both participants), the exported file is decrypted on your device. Once it leaves Realer — to your photo library or another app — it is no longer encrypted by us and is outside our control.

4. How we use your information

• To operate the Service — create and authenticate your account, deliver your encrypted videos and messages, send push notifications, and connect you with friends you invite.
• To keep the Service safe — review reports, enforce our Terms of Service, prevent abuse, and secure accounts.
• To improve the product — diagnose problems and understand which features are used, via the analytics described above.
• To communicate with you — verification codes and important account or service notices. We won't spam you.
• To comply with law — including age requirements for online services.

5. Automatic deletion and data retention

• Videos: automatically and permanently deleted from our servers within approximately 24 hours after the last activity in a conversation. This includes the encrypted video files and their metadata.
• Conversations you remove: when both participants remove each other, the conversation and its content are deleted after a 24-hour grace period.
• Email verification codes: expire after 10 minutes and are then deleted.
• Account information (profile, contacts, block list, public key): retained while your account is active. If you delete your account, we delete your profile, your messages, your contact connections, your block list, your profile photo, and the encryption keys on your device. Content you already sent that has not yet expired is removed on the normal 24-hour schedule.
• Moderation records (reports and activity counters): retained as needed for safety, to enforce our Terms, and to comply with legal obligations, even after account deletion.
• Analytics data: retained according to Google Firebase's standard retention settings.

Note that copies of videos a recipient saved with your approval, and notification previews displayed on a recipient's device, live on their device and are theirs to manage — automatic deletion applies to our servers. When we delete data, residual copies may persist for a limited time in our service providers' backup systems before being purged; Google, for example, commits to purging deleted data from its live and backup systems within 180 days.

6. Safety and moderation

Realer has no ability to scan the contents of your encrypted videos or messages, so our moderation relies on user reports. When you report a user or content, our review team receives the report you submitted — including your account identifier and the reported account's identifier and display name — along with that account's recent activity counts (how many videos and messages they sent per day over the past 7 days; counts only, never content). Reports are reviewed by a human. Report records are retained for safety purposes. You can also block any user at any time; blocked users are not notified.

7. Who we share information with

We do not sell or rent your personal information. We share it only as follows:

Service providers (processors)

• Google Firebase (Google LLC) — authentication, database, file storage, push notification delivery, serverless functions, and analytics. All content stored with Google is end-to-end encrypted ciphertext.
• Cloudflare (Cloudflare, Inc.) — object storage for encrypted video files and the access layer that issues short-lived, authenticated upload/download links. Cloudflare stores only ciphertext and cannot decrypt it.
• Apple (Apple Inc.) — push notification delivery via the Apple Push Notification service. Message previews transit Apple's infrastructure encrypted and are decrypted only on your device.
• Google Workspace / Gmail — delivery of verification emails and internal moderation emails to our review team.

These providers process personal information on our behalf under data processing agreements, may not use it for their own purposes, and are required to provide the same or equal protection of your data as described in this policy. Google's Firebase Data Processing and Security Terms and Cloudflare's Data Processing Addendum govern that processing.

Before launch, our website waitlist was operated by Getwaitlist.com; any email submitted there is governed by their privacy policy.

Other people on Realer

• Your display name, username, and profile photo are visible to other users you interact with.
• When you share an invite link, the link contains your account identifier and (optionally) your name so the recipient's app can connect you. Anyone you give the link to can see it; share invite links only with people you want to connect with.

Legal and safety disclosures

We may disclose information if required by law (for example, a subpoena or court order) or where we believe in good faith it is necessary to protect against fraud, abuse, or threats to anyone's safety. Because your content is end-to-end encrypted and auto-deleted, what we are able to produce is limited largely to account information and metadata. If we receive a government request, we will push back where we can and notify you where legally permitted.

Business transfers

If Realer is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will notify you of any change in ownership or in how your personal information is handled.

8. What we don't do

• We don't sell your data. Ever. To anyone.
• We don't run ads inside the app.
• We don't — and, because of end-to-end encryption, can't — scan, read, or train AI models on your messages or videos.
• We don't use third-party trackers for advertising or behavioral profiling.
• We don't upload your address book.

9. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you, and receive a copy in a portable format.
• Correct inaccurate information (you can edit your profile in the app at any time).
• Delete your account and associated personal information — available directly in the app under Settings, or by emailing us.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent (for example, by disabling notifications or contact access in iOS Settings).
• Not be discriminated against for exercising any of these rights.

To exercise any of these rights, use the in-app controls or email info@realer.vip from the address or account tied to your profile. We will verify your identity before acting on a request and respond within the timeframe required by applicable law. If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority.

United States state privacy rights

If you live in California or another U.S. state with a comprehensive privacy law, the rights above are available to you. In the past 12 months we have collected the categories of personal information described in Section 2 — identifiers and account information, your end-to-end encrypted content and conversation metadata, device and usage information, and safety and moderation information — directly from you and from your device, for the purposes described in Section 4, and disclosed them only to the service providers listed in Section 7. We do not sell personal information, we do not "share" it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information for any purpose beyond providing the Service. We respond to verified requests within 45 days. If we decline a request, you may appeal by replying to our response, and we will answer your appeal within the period your state's law requires.

10. Legal bases for processing (EEA/UK)

Where the GDPR or UK GDPR applies, we process your personal information on these bases:

• Performance of a contract — account creation, message and video delivery, notifications.
• Legitimate interests — service analytics, abuse prevention, moderation, and securing the Service, balanced against your rights.
• Consent — optional permissions such as contact selection and saving to your photo library.
• Legal obligation — age verification, responding to lawful requests, and other compliance requirements.

11. Children

Realer is not directed to children under 13 (or under 16 in the EU/UK, or the higher minimum age your jurisdiction requires). We ask for your date of birth during sign-up; if it indicates you are under the minimum age, sign-up is cancelled and no account or personal information is retained. On supported versions of iOS, we also honor Apple's Declared Age Range system, which lets the device confirm an age range without revealing a birthdate to us. If you believe a child under the minimum age has created an account, contact info@realer.vip and we will delete it.

12. International users

Realer is operated from the United States, and your information is processed on infrastructure in the US, which may have different data protection rules than your home country. Where required, we rely on appropriate safeguards for international transfers: Google and Cloudflare are each certified under the EU-U.S. Data Privacy Framework (including the UK Extension and the Swiss-U.S. framework), and their data processing agreements incorporate standard contractual clauses. Remember that your content itself is end-to-end encrypted regardless of where it is stored.

13. Security

Beyond end-to-end encryption of your content, all connections to the Service use TLS, data is encrypted at rest by our storage providers, encryption keys live in the iOS Keychain, and access links to stored video files are short-lived and require authentication. No system is perfectly secure, and we cannot guarantee absolute security — but we design so that the most sensitive thing you give us, your conversations, is something we never possess in readable form. If a breach affects your data, we will notify you promptly as required by applicable law.

14. Changes to this policy

We may update this policy as Realer evolves. If we make material changes, we will notify you by email or via a notice in the app before they take effect. The "Last updated" date at the top will always reflect the latest version, and prior versions are available on request.

15. Contact

Questions, requests, or concerns? Email info@realer.vip.