Privacy
Who operates PSHH
Operator: PSHH
Privacy and support contact: support@heypshh.com
Legal contact: legal@heypshh.com
What PSHH collects
PSHH may process your Apple sign-in identity, Firebase account identifiers, profile values (display name and avatar color), device notification token, channel membership, invite usage, short voice metadata, and safety reports.
PSHH does not provide a saved voice archive and does not offer in-app voice forwarding. PSHH is not end-to-end encrypted in this release.
How voice access and retention work
A sent voice can be up to 30 seconds. Recipient access closes after first listen and an optional one-time replay flow, or after 24 hours from send time, whichever comes first.
Replay may be started within 10 seconds after first pass end, or 60 seconds if Extended replay was enabled before that first pass. A replay started in time can finish within its playback session budget, but the 24-hour expiry still applies.
On-device recordings can wait up to 24 hours for connection retry. Server cleanup and blob deletion run asynchronously after access closes.
Security and storage
Data is protected with transport encryption and encrypted storage at rest. PSHH uses role-based authorization checks for channel access and delivery events.
Operational logs and audit data are retained for service reliability and safety operations according to backend retention policies.
Reports, blocks, and safety processing
You can block users and submit safety reports in-app. Reports include category and optional user-entered context; they do not create a hidden saved voice archive.
Account deletion and retention windows
You can request account deletion in the app. If you own channels, you must transfer ownership or close those channels before deletion completes.
Deletion propagation and related cleanup jobs may continue after request acceptance according to service retention windows and backup schedules.
Internet requirement
Internet is required to send and hear voices. Delivery is not guaranteed under offline, background, or interrupted network conditions.