Privacy policy

short, because there is little to disclose

── what we hold ──

  • Relay: a hash of your username, your public keys, and messages in transit, encrypted and held in memory only until delivery or for at most 48 hours. We cannot read message content, ever. No logs, no message history.
  • Network: the PyroChat relay and this site are served through Cloudflare, which terminates TLS. Cloudflare can see that a device connected and when, like any network provider; it never sees message content or usernames, which are encrypted or hashed before they leave your phone. If you need to hide the connection itself, the app can route through Tor or any SOCKS5 proxy.
  • Billing: payment records live with Stripe or your Bitcoin wallet. We store only a hash of the access key we issued. Access tokens are blind-signed, so a payment can't be linked to an app identity, and we cannot list who is subscribed.
  • Push: if you enable wake notifications, Apple receives content-free pings. Your push token is kept in relay memory only.
  • Reports: reporting a user sends us their address hash only. Never message content, never your identity.
  • Desktop link: the browser page holds no keys and stores nothing; the mirror is encrypted between your phone and the browser and is wiped when the link ends.

── delete your account ──

There is no account to close on our side, only an identity on your device. In the app, open [cfg] and choose BURN EVERYTHING: the app tells the relay to forget your identity (its public keys, any undelivered ciphertext and any push token are dropped at once) and then wipes every key and message on the phone. Nothing about you remains anywhere. Peers who write to you afterwards are told the account is gone. There is no recovery, by design, and nothing for us to delete on request because nothing was kept.

── what we cannot do ──

We cannot read your messages, recover your account, list our subscribers, or hand over message history. The architecture makes all four impossible, not merely against policy. The app's source will be published under the AGPL with the App Store release so you can verify this yourself.

Questions: [email protected]