Privacy, honestly
What other people see, what we keep, how long we keep it, and the limits of what any online service can promise.
What other people see
- Your nickname, a short random ID (for example Asha · 7KQ2M9XA) and the animal you chose.
- For listeners: their languages and an Online or Available badge. Never “last seen”.
- Never your email address. No real names, no photos, no profiles.
What we keep, and why
- Your email, to log you in and send account emails. It is encrypted in our database and only decrypted to send you an email.
- Your password, only as a one-way hash (Argon2id). We cannot see it.
- When you confirmed you are 18 or older and which terms you accepted. No date of birth, no ID documents.
- A rough device name for each login, like “Chrome on Android”, so you can log out other devices. We do not store your IP address.
- Your messages, encrypted in our database, until the chat is deleted.
- Your look-and-feel choices (theme, text size), so every device looks the same.
What we never do
- No advertising, and we never sell your data.
- Staff have no tool to read chats, and we never do.
- Reports never include chat messages, only what the reporter writes.
- No photo or file uploads.
The honest limits
- Not end-to-end encrypted. Messages are encrypted on our servers, but the service holds the keys, so it could technically decrypt them. We chose this so your chats survive a lost phone; we built no way for staff to read them.
- The other person can keep what you send, for example with a screenshot. Share only what you are comfortable sharing.
- No service can promise perfect anonymity. Details you write in a chat can identify you. Keep your real name, address, phone number and social profiles to yourself.
Deleting things
- Delete a chat for everyone: erased for both of you straight away. Delete for me: hidden from you, and erased once the other person deletes it too.
- Delete your account any time from Settings, with your password. It happens immediately and cannot be undone. Your messages are erased.
- After deletion we keep a small record (your encrypted email, account ID and nickname) for 2 years, only for support and abuse cases, then delete it.
- Accounts unused for 24 months are deleted, with a warning email 30 days before.
- Reports are deleted 180 days after they are closed.
- Backups are kept for at most 7 days, so deleted data leaves them within a week.
The formal privacy policy is still a draft under legal review.