Privacy policy
Enc Chat is a private messenger written and run by Elia El Khoury. Messages, photos, voice notes, files and calls are encrypted on your device and can be opened only on the devices of the people you send them to. This page says what the server does keep, why, and for how long. Use Help, then Contact us, in the app.
What the server keeps
- Your account. Your user ID, the username and display name you choose, a protected (hashed) form of your password and of your recovery code, and your public encryption key. There is no phone number and no email address.
- Your profile. Your profile photo and About text, shown to people as your privacy settings allow.
- Who you talk to. The people you have chatted with or added, the people you have blocked, and the groups you are in with their names, members and admins. The server needs this to deliver messages and to apply your privacy settings.
- Messages and media, encrypted. The server cannot read them. It keeps the encrypted copy only until each of the recipient's devices has received it, and never longer than 30 days. It also sees who sent a message to whom, when, and how large it is.
- Calls. Calls are set up through the server and their sound and picture are encrypted end to end, including when they pass through our relay or group call server. The server sees who called whom, when, and whether the call was answered.
- Your devices. For each phone, computer or browser signed in to your account: its name, platform, app version and the address used to send it notifications.
- Presence. Whether you are online and when you were last seen, shown only to the people your settings allow.
- Things you choose to send us. If you turn on an online chat backup, it is encrypted with a password only you know and kept until you replace or delete it, or for a year without a new one. If you set a recovery PIN, your encryption key is kept locked with that PIN. Problem reports and diagnostic logs you send are kept to fix the problem; diagnostic logs are deleted after 30 days. Logs never contain your messages or keys.
- Security records. IP addresses and request records, kept for a short time to keep the service running and to stop abuse.
What stays on your device
Your message history, your private keys, your contacts' names as you saved them, translations and voice transcripts. Translation and transcription run on the device. Nobody, including us, can recover your history for you: a backup you made is the copy that survives.
Other services involved
- Google Firebase Cloud Messaging delivers notifications to Android phones. A notification tells your phone there is something new; the message text is not in it.
- Browser push services (Google, Apple, Mozilla, Microsoft) deliver notifications to the browser version, encrypted to your browser.
- Oracle Cloud hosts the server and stores encrypted media.
- Cloudflare carries traffic to the website and the server.
- KLIPY answers GIF searches, only when you search for a GIF. It receives your search words, not your messages.
- Google Play services download on-device models (translation, sticker cut out) only after you agree.
There are no ads, no analytics or tracking tools, and nothing about you is sold or shared for advertising.
Your choices
- Settings, then Privacy, decides who sees your last seen, online status, profile photo, About and links, and whether people can find you by username.
- You can delete any message for everyone, set disappearing messages, and send photos, videos and voice notes that open only once.
- You can delete your account at any time. How to delete your account.
Children
Enc Chat is not meant for children under 13, and we do not knowingly keep an account of one.
Changes and contact
When this policy changes, this page changes with a new date. Questions about it or about your data: Use Help, then Contact us, in the app.