Fiammo Privacy Policy

Last updated: Sep 2, 2026

Overview

Fiammo is a private, text-first social app built around small, user-defined circles and friends. This policy explains what information we collect, how we use it, and the choices you have. That includes text message (SMS) notifications and AI-powered features.

Every SMS described in this policy is an automated message sent by fiammo to a person who asked us to send it. Fiammo does not carry messages between two people over SMS, and no text we send contains anything another person wrote to you.

Information We Collect

Account information: your phone number, or an email address and password, and any profile details you provide. You can also sign in with Google or Apple, in which case we receive basic profile information (such as your name and email) from that provider.
Content you create: posts, echoes, comments, direct messages, and circle and friend memberships.
Contact information you provide about others: when you add someone who isn't on fiammo to a circle, you provide their phone number and name so we can create the invitation link you send them. See "SMS Notifications and Consent" below for how this is used.
Contacts you choose to match: if you grant contacts access, phone numbers from your address book are sent to our backend to check which of them already have fiammo accounts, so we can suggest people you may know. This happens only while you have granted that permission, and we do not use these numbers to message anyone.
Consent records: when someone confirms an invitation to receive texts, we record the confirmation time, the IP address, and the browser user agent of the device that confirmed. This is how we demonstrate that consent to receive messages was actually given, and it applies whether or not that person is a fiammo user.
Device information for notifications: if you enable push notifications, we store the notification token your device provides so we can deliver them.

How We Use Your Information

To operate the app: displaying your circles, friends, posts, and echoes to the people you've chosen to share them with.
To send you SMS notifications you've opted into (see below).
To create the invitation link you send to someone you've added to a circle, and to record their response to it.
To suggest people you may already know, if you've granted contacts access.
To generate Constellation readings of your writing (see below).

AI Features (Constellation)

Constellation analyzes the text of your posts, including posts that have burned, to surface themes in your writing over time. Once you have written enough, a reading is generated automatically about once a week; Constellation is part of how fiammo works and is not a separate feature you turn on or off. Post text is processed by our AI provider, Groq, through a secure backend function. Groq processes it to generate the reading, does not store your raw post content, and does not use it to train any model.

SMS Notifications and Consent

Notifications to existing users. If you opt in, fiammo will text you when someone in your circle shares a new post. These messages name the author and carry a link to read the post; they never quote the post itself, because a post disappears after 24 hours and a text does not. Message frequency varies based on circle activity, and message and data rates may apply. You can opt out at any time by replying STOP, or by adjusting your notification settings in the app.

Invitations to new contacts. Fiammo never sends the first message to someone who hasn't already agreed to hear from us. When you add someone who isn't on fiammo to one of your circles, we create a personal confirmation link for that phone number and open your device's own messaging app with a draft. You send that invitation yourself, from your own number, and you can edit or cancel it before sending.

How someone opts in. The invitation link opens a page on fiammo.co showing who invited them, what they'd receive, how often, that message and data rates may apply, and how to get help or stop. To confirm, they type the full phone number that received the invitation and tick a consent checkbox, which is unchecked when the page loads and which they have to tick themselves before anything can be submitted. We then text a 6-digit code to that number, and they enter it on the page. The code goes only to the number on the invitation, never to a number someone else typed, which ties the consent to whoever is holding that phone. Only after that code checks out does fiammo send any further message to it. The whole flow, with screenshots, is at fiammo.co/sms. Anyone can decline on the same page, and a link that goes unanswered expires after 30 days.

Your responsibility. When you add someone's phone number to a circle, you are representing that you have permission to share that number with fiammo for this purpose. Please only add people who have agreed to be contacted.

Opting out. Anyone who no longer wishes to receive texts from fiammo, whether an existing user or someone who confirmed an invitation, can reply STOP to any message at any time. To resume receiving messages after opting out, text START to the same number. You can also opt out before ever receiving a post notification by choosing "no thanks" on the confirmation page, and users can turn SMS notifications off in the app's settings.

Sharing of Information

We do not sell your information. We share information only as necessary to run the app:

Hosting and storage (Supabase). Your account, posts, messages, circles, and consent records are stored in our database and processed by our backend functions, which run on Supabase. This is where fiammo's data lives.
Messaging (Twilio). SMS notifications are delivered through Twilio. Invitations are sent by you, from your own device and number, and do not pass through Twilio.
Push notifications (Apple). Push notifications are delivered through Apple's Push Notification service.
AI features (Groq). Post content is sent to Groq to generate your Constellation readings.
Sign-in (Google, Apple). Basic profile information is exchanged with Google or Apple if you choose to sign in with one of those providers.

We do not otherwise share your circle contents, friend connections, posts, messages, or echo activity outside the app.

Mobile numbers and SMS consent. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third party. The providers listed above receive what they need to deliver a message or store a record, and nothing about your SMS consent is passed to anyone else.

Data Retention

Posts become invisible to others 24 hours after posting ("burning"). Burned posts are not immediately deleted from our systems. We retain them on our backend after they burn. Burned posts remain visible in your own history and continue to be used by app features such as Constellation. Echo records and account information are retained as described in our terms of service. Consent records are kept for as long as we may need to show that consent was given, including after someone opts out. If you'd like a burned post permanently deleted from our systems, contact us at privacy@fiammo.co.

Your Choices

You can leave a circle, remove a friend connection, delete your account, or opt out of SMS notifications at any time.
You can request that we delete information we hold about you by contacting privacy@fiammo.co.

Changes to This Policy

We'll update this page if our practices change and note the date at the top.

Contact

Questions about this policy: privacy@fiammo.co