Privacy Policy

Effective 25 September 2026

cs-app puts you in a voice or text conversation with an AI support agent. It is operated by Netfizz Ltd, a company registered in the Isle of Man, which is the data controller for the information described here. The app is free and is not a commercial service. Questions, or to ask for your data to be removed: support@netfizz.im.

What is collected

• The full text of everything you type.
• What you say during a call. The agent transcribes your speech and stores it, with its own replies, alongside your typed messages — so a voice call produces a written record of both sides.
• An identifier the app sends so your messages stay together, stored on every message and used as your name inside the call.
• When each message was sent and stored.
• A copy of the conversation in a file on your device. Deleting the app removes it, but your phone's backup — iCloud or Google Drive — may still hold a copy and restore it if you reinstall.

There is no analytics, crash reporting, tracking or advertising identifier; no access to your location, contacts, photos, calendar or files; no payments; and no password of ours. We do not ask you directly for your name, email address or phone number — if you sign in with Google, see "Signing in with Google" below for exactly what we receive from it.

Voice and video

Call audio goes from your device to the media provider, LiveKit Cloud, and on to the agent. It does not pass through our server, and we make no recording of it. The written transcript is kept. The app never turns on your camera and sends no video.

Who else sees it

LiveKit Cloud handles the live audio and your participant identity, and the agent relies on third-party speech-to-text and language-model providers, so your audio and the resulting text reach them under their own terms. Fly.io hosts the app, stores the written record in London, and logs the IP address your device connects from. Some of these providers operate outside the UK, so your data may be processed abroad. Nobody else: we do not sell your data, pass it to data brokers, use it for advertising, or use it to train any model of our own.

Cookies

The mobile app uses none, and this page sets none. The staff console, at this same address, sets two strictly necessary first-party cookies: a session cookie carrying a security token, and a fourteen-day cookie set only if a staff member chooses to stay signed in. There are no third-party cookies.

Signing in with Google

When you sign in with Google, the only Google data we receive is what the openid, email and profile scopes provide: your email address, your basic profile such as your name and picture, and your Google account identifier. We use it for one purpose — to sign you in and identify your account — and store it on the same server described above. We do not sell it, share it with anyone, use it for advertising, or use it to train any AI model, and you can have it deleted by writing to support@netfizz.im.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How long it is kept, and deleting it

Indefinitely: there is no automatic deletion, expiry or scheduled clean-up. Write to support@netfizz.im with enough detail to identify the conversation and it will be deleted by hand. Because the app has no sign-in, we may be unable to confirm a conversation is yours, and will not delete one we cannot attribute to you.

Security

Traffic is encrypted in transit, and stored data gets whatever encryption the hosting provider applies and nothing further. Conversations are not protected by per-user access control, so a conversation is not private to you and the agent: the people who run the service can read it, and others may be able to. Treat anything you type or say as potentially readable, and do not send card or bank details, passwords, identity numbers or medical information.

Changes

This policy may be updated; the effective date above will change when it is.