Privacy & Security

Last updated September 20, 2026

Privacy is the point of this app: no ads, no tracking, no content scanning. Moderation only happens when someone reports abuse.

What we store

• Profile data: username, display name, bio, avatar, creation date
• Relationship data: friends, group memberships, blocked users
• Message metadata: timestamps, participants, counts
• Encrypted message content (not readable without the message keys)
• Your private key backup (envelope-encrypted on the server for multi-device support — a database leak alone cannot expose it)
• Push tokens so notifications can reach your devices

What we do NOT store or do

• Message content in readable form
• Phone numbers
• Location data
• Call recordings
• Selling data or serving ads, ever

Retention

• Attachments expire after 12 hours
• Messages are cleared after 90 days
• Stamps and avatars persist until you delete them

Infrastructure

The service runs on Cloudflare Workers with a Turso database and Backblaze B2 media storage. Voice calls run over encrypted Cloudflare Realtime sessions. Sign-in is handled by DogeGage Auth, which shares nothing with the app beyond an identifier unique to it.

Your rights

Under GDPR and similar laws you can access, export, correct, and delete your data. Export from Settings, delete from Settings > Danger Zone. Deletion is permanent.

Questions: [email protected]. Security issues: [email protected] (responsibly, not publicly).