Privacy Policy

Last updated: 2026-04-26

Fantasies is operated by Beltrix LLC, a Wyoming limited liability company ("Beltrix", "we", "us"). This Privacy Policy describes how we collect, use, and protect your personal data when you use the Fantasies mobile application, our Telegram bot, and the website at fantasiesapp.com (together, the "Service").

Fantasies is intended for adults aged 18 and older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us personal data, contact us at [email protected] and we will delete it.

Data we collect

When you use the Service, we collect:

• Account data: email address, display name, authentication identifier from Google or Apple if you sign in with those providers.
• Couple data: the identifier of your paired partner (if any), and shared content the two of you create together.
• Content you create: fantasies, descriptions, tags, desire ratings, fulfillment notes and ratings, and any photos, videos, or other media you upload.
• Telegram bridge data: if you link a Telegram account, we receive your Telegram user identifier and display name, plus any text or media you send to our Telegram bot. This content is stored on our infrastructure and persists even if you later unlink Telegram.
• Device data: push notification tokens, app version, device platform (iOS or Android), and basic crash diagnostics.
• Operational data: server-side request logs (IP address, timestamp, route accessed) retained for security and abuse prevention.

How we use your data

• To provide the Service: authenticate you, sync content between you and your partner, deliver push notifications, store the media you upload.
• To support you: respond to questions, account recovery, deletion requests.
• To keep the Service safe: detect abuse, prevent fraud, comply with legal obligations.
• To improve the Service: aggregated, anonymized usage signals (e.g. how many users used the random picker this week). We never use the content you create for product analytics.

We do not sell your personal data. We do not share your content with advertisers. We do not use your fantasies, fulfillments, or media for any purpose other than providing the Service to you and your partner.

Service providers

We use the following third-party providers ("sub-processors") to operate the Service. Each receives only the data necessary for its function:

• Cloudflare — CDN and security
• Open Edge Cloud — cloud hosting and object storage
• Resend — transactional email delivery
• Firebase Cloud Messaging — push notification delivery
• Google — account authentication (when you sign in with Google)
• Apple — account authentication (when you sign in with Apple)
• Telegram — messaging integration (when you use our Telegram bot)
• Umami — self-hosted, cookieless website analytics for fantasiesapp.com

Cookies and tracking

The website at fantasiesapp.com uses one essential security cookie (__cf_bm) set by Cloudflare to detect automated bots. We do not use advertising or tracking cookies. Our analytics provider (Umami) does not set cookies and does not use cross-site identifiers.

The mobile applications do not use cookies. They communicate with our servers using authenticated API calls.

International transfers

The Service is operated from the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States. We are not specifically targeting users in the European Union or the United Kingdom; by using the Service from those regions you consent to this transfer.

Data retention

We retain your account data and content for as long as your account is active. When you delete your account (see delete account), we mark the account for deletion. Within 30 days, we permanently remove your data from our active systems. Encrypted backups expire on a separate 30-day cycle and are then overwritten.

Your choices

• Access and correction: view and edit your profile in the app.
• Notification preferences: turn individual push notification categories on or off in the app.
• Account deletion: see delete account.
• Questions: email [email protected].

Security

We protect your data with TLS in transit, encryption at rest, and strong authentication. No system is perfectly secure. If we confirm a security incident that materially affects your data, we will notify affected users by email within 72 hours of confirmation.

Changes to this Policy

We may update this Policy. For material changes, we will give at least 14 days' notice through an in-app notice and an email to your registered address before the change takes effect.

Contact

Beltrix LLC, Wyoming, USA. Email: [email protected].