Privacy Policy — GChat
Last updated: October 27, 2026
Applies to: the GChat (GOD Chat) app on Android (com.godhitech.chat) and iOS, version 1.0.0 and later.
GChat is an internal messaging app developed and operated by GodHiTech ("we", "us") for employees and partners of the organization. This policy explains what information the app collects, why, who it is shared with, and what rights you have.
By using GChat, you agree to the handling of information described below. If you do not agree, please stop using the app.
1. Information we collect
1.1. Account information
GChat accounts are issued by your organization. You do not sign up within the app.
| Information | Purpose |
|---|---|
| Employee ID (username) and password | Sign-in authentication. The password is only sent to the GChat server over an encrypted connection and is not stored on the device. |
| Display name, avatar, email, job title, department, office, company, role, status, leave periods | Showing your profile and the internal directory so colleagues can find and contact you. This information is managed by your organization. |
| Sign-in tokens (access/refresh tokens) | Keeping you signed in. Stored in the operating system's secure storage (Keychain on iOS, Keystore on Android). |
1.2. Content you create and share
- Text messages, reactions, stickers, and pinned, forwarded or replied-to messages.
- Photos, videos and attachments (including PDFs) you send or receive.
- Group chat information: group name, group photo, members, group announcements, group invite links.
- Links (URLs) in messages, used to generate link previews.
This content is sent to and stored on GChat servers so it can be delivered to recipients and synced across your devices.
1.3. Device information
| Information | Purpose |
|---|---|
| Installation ID (a random UUID generated when the app is installed) | Distinguishing the devices signed in to your account, so you can manage and sign out of each device. |
| Device name and operating system (iOS/Android), OS version | Showing the list of signed-in devices; diagnosing errors. |
| Push notification token (FCM token) | Delivering new-message notifications to your device. |
| App version | Diagnosing errors and showing the changelog. |
1.4. Usage and diagnostic data
In release builds, the app sends the following data to Firebase (see section 3):
- Usage events: app opens, screen names viewed, and key in-app actions. Event parameters contain only short values (numbers, true/false, strings of up to 100 characters) and never include message content.
- Crash reports: stack traces, app version, operating system, and the last screen before the crash.
- Internal user identifier (the numeric ID of your GChat account) is attached to events and crash reports so we can look up issues by account. This ID is cleared from Firebase on the device when you sign out.
In addition, the app sends technical tracing data for network requests (response times, error codes) to GChat monitoring servers to detect performance issues.
1.5. Information we do not collect
- Your location. (iOS requires a location permission declaration because of a bundled library, but GChat never requests or reads your location.)
- Phone contacts, calendar, microphone, call logs, SMS.
- Biometric data: fingerprints and faces are processed by the operating system; the app only receives a "success" or "failure" result.
- Payment information.
2. Permissions the app requests
The app only asks for a permission when you use a feature that needs it. You can deny or revoke permissions at any time in your device Settings; other features keep working normally.
| Permission | Platform | Used for | If denied |
|---|---|---|---|
| Internet | Android | Connecting to the server to send and receive messages. | Granted by default. |
Notifications (POST_NOTIFICATIONS / Notifications) | Android 13+, iOS | Alerting you to new messages when the app is not open. | No notifications; messages still appear when you open the app. |
Photos and videos (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO, READ_MEDIA_VISUAL_USER_SELECTED; READ_EXTERNAL_STORAGE on Android 12 and below) | Android | Picking photos and videos from your library to send in a conversation. On Android 14+ you can allow access to selected photos only. | Cannot send photos or videos from your library. |
| Photo Library | iOS | Picking photos to send in a conversation. | Cannot send photos from your library. |
Save to photo library (WRITE_EXTERNAL_STORAGE on Android 9 and below; Photo Library Add on iOS) | Android, iOS | Saving photos from a conversation to your device. | Cannot save photos to your device. |
| Camera | iOS, Android (via the system Camera app) | Taking a photo to send directly in a conversation. | Cannot take photos from within the app. |
Biometrics (USE_BIOMETRIC / Face ID) | Android, iOS | App lock: requiring a fingerprint or face before showing messages. Only used when you enable app lock. | Cannot enable biometric app lock. |
The app only reads photos, videos and files that you actively choose to send. It does not scan or upload your photo library.
3. Third parties
We do not sell your personal information and do not use your data for advertising. We only share data with service providers needed to operate the app.
3.1. Firebase (Google LLC)
| Service | Data processed | Purpose |
|---|---|---|
| Firebase Cloud Messaging | FCM token, app instance identifier, push notification content | Delivering new-message notifications to your device. |
| Firebase Analytics (Google Analytics for Firebase) | Usage events, screen names, GChat account ID, Firebase app instance ID, device type, operating system, app version, approximate country/region | Understanding how the app is used to improve the product. |
| Firebase Crashlytics | Crash reports, stack traces, recent screen log, GChat account ID, device and operating system information | Detecting and fixing app errors. |
Firebase data may be processed on Google servers outside Vietnam. See:
- Privacy and Security in Firebase: https://firebase.google.com/support/privacy
- Google Privacy Policy: https://policies.google.com/privacy
3.2. Operating system providers
Push notifications on iOS are delivered through Apple Push Notification service (APNs). Biometric authentication is handled on the device by the operating system (Apple, or Google/the device manufacturer).
3.3. Your organization
Because GChat is an internal messaging tool, your organization's administrators can manage your account (create, lock, reset password, update profile information) according to the organization's internal policies.
3.4. Legal requests
We may disclose information when required by law or by a competent government authority.
4. Storage and security
- All connections between the app and GChat servers use HTTPS/TLS.
- Sign-in tokens are stored in the Keychain (iOS) or Keystore (Android).
- Messages are cached on the device for offline viewing. This cache is encrypted with AES-256 using a key kept in the operating system's secure storage.
- You can enable app lock with fingerprint or face to prevent others from viewing messages on your device.
- Server data is retained while your account is active or for the period set by your organization. Firebase Analytics and Crashlytics data is retained according to Google's default retention periods.
No system is completely secure. We take reasonable measures to protect your data but cannot guarantee absolute security.
5. Your rights
You have the right to:
- View and update your profile information in the app, or through your organization's administrator.
- Revoke permissions for the app in your device Settings.
- Turn off notifications in your device Settings.
- Sign out of each device. When you sign out, the app deletes sign-in tokens and the on-device message cache, and unlinks your account from Firebase.
- Request access to, correction or deletion of your personal data by contacting us (section 8) or your organization's administrator.
Uninstalling the app deletes all data stored on the device, but does not delete data on the server.
6. Children
GChat is intended for employees of the organization and is not intended for anyone under 16. We do not knowingly collect information from children.
7. Changes to this policy
We may update this policy. When there are significant changes, we will notify you in the app or through your organization. The "Last updated" date at the top of this page shows the current version.
8. Contact
If you have questions about this policy or want to exercise your rights, please contact:
GodHiTech
Email: support@godhitech.com
Website: https://chat.godhitech.com/