GnoosiS

Appearance

Privacy & Security ​

GnoosiS handles a wide range of sensitive data — your social graph, private messages, and payment information — so security is built into each module rather than bolted on afterward.

Account security ​

  • Firebase Authentication backs sign-up and login, whether by email/password or Google Sign-In.
  • Role-based permissions separate what a regular user, creator, moderator, and admin can do within the app.
  • Multi-factor authentication (MFA) is on the roadmap as a short-term addition — see Roadmap.

Chat privacy ​

Messages sent through the Chat module are protected with end-to-end encryption, implemented client-side using the cryptography package (RSA/AES). This means:

  • Message content is encrypted on the sender's device and decrypted only on the recipient's device.
  • GnoosiS's backend relays encrypted payloads — it does not have plaintext access to message content in transit.
  • Ephemeral 24h stories, voice calls, and video calls (via WebRTC) sit alongside 1:1 and group text chat under the same privacy goals.

Scaling E2E-encrypted chat reliably to large groups is an active short-term roadmap item — see Roadmap.

Payments & KYC ​

The Payments module handles fiat (Stripe, PayPal) and DracmaS transactions, and includes KYC (Know Your Customer) compliance checks appropriate to the transaction type and jurisdiction. Payment card data is handled by Stripe/PayPal directly — GnoosiS does not store raw card numbers.

Ad fraud prevention — Proof of View ​

The Adsxx module's Proof of View system validates that an ad impression is genuine before it counts toward advertiser billing, using signals like:

  • Time the ad was actually on-screen
  • Percentage of the ad visible to the user
  • User interaction with the ad unit

This protects both advertisers (who pay for real views) and users (rewarded-ad payouts only trigger on genuine engagement).

Data handling ​

  • Firebase (Firestore, Storage, Authentication, Analytics) is the backbone for account, feed, and chat metadata.
  • Hive provides local/offline caching on-device, reducing how much data needs to be re-fetched over the network.
  • See Privacy Policy for the full picture of what data GnoosiS collects and how it's used.

Reporting a security issue ​

If you believe you've found a security vulnerability in GnoosiS, please report it responsibly rather than disclosing it publicly. See FAQ for current contact guidance.

Next steps ​

  • Roadmap — upcoming security work (MFA, large-group E2EE)
  • Privacy Policy — full data handling details
  • FAQ — common privacy and security questions