RayChat1. Who operates RayChat
RayChat is published and operated by DRAY Entertainment. Questions or privacy requests can be sent to support-raychat@drayentertainment.com.
RayChat is a private, invite-only communication service. Administrators create and manage membership; the app does not provide public registration, advertising, or public member discovery.
2. Information we collect
Account and profile information
We process an administrator-assigned display name, allowlisted phone number, internal user identifier, role, account status, group memberships, and a profile image if one is configured.
Authentication and security information
We process login-request records, hashed one-time passcodes, session and device identifiers, app version, device model and manufacturer, operating-system and SDK version, locale, time zone, physical-device indicator, sign-in IP address, security alerts, and administrative audit records. Raw one-time passcodes are not stored.
Optional approximate location
If a member grants the Android approximate-location permission during a security check, RayChat sends rounded coordinates, reported accuracy, permission status, and capture time. Location is optional, may be denied, and is used only to help administrators recognize unusual device access. It is not used for advertising.
Messages and media
We process group messages, replies, reactions, read state, timestamps, photos, videos, PDF documents, generated previews and thumbnails, sanitized file names, media metadata, and retention settings needed to provide group chat.
Notifications
If notifications are enabled, RayChat processes a Firebase Cloud Messaging registration token. Notifications use generic activity wording by default and do not include the sender or message content.
3. Device permissions
- Notifications: requested when a member chooses to enable private activity alerts.
- Camera: requested only after the member chooses to take a photo.
- Approximate location: optional and requested for device-access security context.
- Photos and documents: selected through Android system pickers rather than broad storage access.
Members can change permissions in Android Settings. Denying notification or location permission does not prevent chat access.
4. How we use information
We use information to authenticate invited members; deliver messages and media; apply group membership, posting, download, and retention rules; synchronize unread state; send private notifications; secure accounts and investigate suspicious access; support members; maintain service reliability; and comply with valid legal obligations.
RayChat does not sell personal information, show advertisements, build advertising profiles, or use third-party advertising or analytics SDKs.
6. Security
RayChat uses HTTPS in transit, server-side authorization, short-lived access tokens, rotating device sessions, hashed one-time passcodes, secure mobile token storage, restricted private administration, and access-controlled media. Android backup is disabled and private notification text is used by default.
RayChat does not claim end-to-end encryption. Authorized service components and administrators may process content as necessary to operate, secure, recover, or moderate the service.
No method of storage or transmission is completely secure. Members should report suspected unauthorized access promptly through the support page.
7. Retention
Account and security information is retained while an account is active and as needed to provide and protect RayChat. Message text remains according to group history and deletion actions. Media may be configured for deletion after one view, after a defined number of days, or to remain until an authorized deletion.
When an account-deletion request is verified, active access is revoked and associated personal data is permanently deleted within 30 days. Recovery copies are restricted to disaster recovery, follow the backup rotation, and are not used for ordinary processing. Data removed from active systems is not intentionally restored except where required to recover from an incident.
De-identified security and audit records may be retained for up to 90 days to investigate abuse, verify deletion, and protect the service. They will not retain the member's phone number, display name, or an identifier that can be used to reconnect them to the deleted account. Information may be retained longer only where required by law, and only for that purpose.
8. Member choices
Members may deny optional permissions, sign out, revoke a device with administrator assistance, ask support to correct profile information, or request permanent account deletion. Group administrators also control group membership and media-download access.
See Request account deletion for the verification steps and a precise description of deleted and temporarily retained information.
9. Children
RayChat is intended for adults aged 18 and over. DRAY Entertainment does not knowingly invite or provide accounts to children.
10. Policy changes
We may update this policy when RayChat features, service providers, or legal requirements change. The effective date at the top will be updated. Material changes will be communicated through an appropriate in-app or administrative notice before they take effect when reasonably possible.
11. Contact
Privacy questions and requests can be sent to:
DRAY Entertainment
support-raychat@drayentertainment.com