Kosher Groups Privacy Policy

Last updated October 2026. Kosher Groups connects a device to a GroupMe account so it can display and send messages in groups selected by the device administrator.

Information we use

When you connect GroupMe, we receive your GroupMe account ID, display name, and access token. We use the token to retrieve your groups and approved-group messages and to send messages you compose. The relay stores your account ID, name, and an encrypted access token. It also stores device identifiers, hashed device credentials, administrator settings, approved groups, and an optional push token. A short-lived cookie connects the GroupMe authorization callback to your pairing request.

The app stores recent messages, sender names, avatar URLs, and read positions in an encrypted database on your device. The relay normally passes messages through without storing message bodies. When you submit a safety report, it stores the selected message, sender and group identifiers, report reason, and any details you provide for review. It also stores terms acceptance, blocked-user preferences, and moderation decisions. The service records basic request paths and device-session events for operation and troubleshooting; it excludes authorization credentials from request logs.

How information is used and shared

We use this information only to pair devices, enforce approved-group access, show and send GroupMe messages, deliver optional notifications, and investigate safety reports. GroupMe processes requests made through your connected account. If notifications are enabled, we send a push token, group name, sender name, and message preview to Expo's push service, which uses the device platform's notification service. Railway hosts the relay and its database. We do not use this information for advertising or sell it.

Retention and choices

When the app uses its cache, it removes messages cached more than 72 hours earlier. Signing out clears its local cache and credentials and revokes that device's relay session; another paired device can stay connected. Safety reports are removed after 90 days by cleanup that runs hourly. Moderation restrictions remain until lifted or removed in response to an applicable deletion request. You can unblock users in Safety & privacy and disable notifications in your device settings. To request deletion of your Kosher Groups relay account and associated records, contact us at the address below. Removing this app does not delete your separate GroupMe account or GroupMe messages.

Request deletion of your Kosher Groups account or data

Email info@bitbean.com with the subject “Kosher Groups deletion request” and your GroupMe account ID or display name. Tell us whether you want your whole Kosher Groups relay account deleted or only particular safety reports or preferences removed. Do not send your password or access token. We may ask you to verify ownership before acting.

Deleting your relay account removes its stored account name, encrypted GroupMe token, device sessions and push tokens, approved-group settings, reviewer access, terms acceptance, blocked-user preferences, and reports you submitted. Sign out on each device to clear its local cache. Group-wide moderation restrictions may remain to protect other users until reviewed; ordinary operational logs follow their existing retention. Your separate GroupMe account and original GroupMe messages are not deleted.

Security and contact

The relay encrypts GroupMe access tokens, stores device credentials as hashes, and uses HTTPS. The on-device message cache is encrypted. For privacy questions or deletion requests, email info@bitbean.com.