Privacy Policy
Updated 18th January 2024
Our Policy
Our general policy is to save as little personal data as required. This document will explain what personal data we will store and how we handle that data.
What We Store
Account Data
Your email address and hashed password.
The date of your account creation.
Login/logout/reset password information so that the user will be able to track if there are any attempts to hack your account. The above event, event time, IP address, and Device ID are recorded and retrievable by the user.
Messages
Offline messages. If someone sends you a message while you are offline, that message will be stored and encrypted until you get back online.
Files
Every file you share with a contact or a group will be encrypted, uploaded, and stored for later retrieval by the recipients. For the case of our group chat file attachments, the files will be stored and encrypted for up to one month on our servers. For the case of sending files via peer-to-peer contacts, the attached files will be deleted once they are downloaded by the intended recipient.
Other Data
A list of your contacts (Roster, Buddylist). The list is maintained by you. You can decide who goes on that list and who gets deleted.
Handling Your Data
We will never look at the contents of your messages and files, nor process them in an automated fashion. Your messages are encrypted by the Advanced Encryption Standard (AES) 256 bits and Elliptic Curve Integrated Encryption Scheme (ECIES) P256. Messages are digitally signed by the Elliptic Curve Digital Signature Algorithm (ECDSA) P256.