Privacy
Draft. This describes how DeepChat works today. It has not been reviewed by a lawyer, and the operator's name and contact address still have to be added before the app is offered to the public.
The short version
DeepChat passes your messages between phones and keeps almost nothing. Your messages are encrypted on your phone and can only be read on the phone they are sent to.
What we hold
- Your phone number, to create your account and let others reach you. We send you a code by SMS through an SMS provider to check it.
- Encryption keys that are public by design for each of your devices, so others can start an encrypted conversation with you. Private keys never leave your phone.
- Who you accepted or blocked, so a number you blocked cannot message you from another phone of yours.
- A push token for your phone, if you allow notifications, only to wake the app. It never carries message content.
- If you use the developer API: your API keys (as one-way hashes), webhook address, and the status of messages you sent.
What passes through but is not kept
- Messages. While someone is online they are passed straight through. If the recipient is offline, an encrypted text message can wait on our relay for up to 7 days and is deleted as soon as it is delivered. We cannot read it.
- Photos, videos and documents stay on the sender's phone and are fetched by the recipient directly through the relay, encrypted. They are not stored on our servers.
- What our servers can see while routing: who is messaging whom, when, and how large the message is. Not what it says.
Businesses and bots
A number with API access is marked as a bot or business, and its first message to you arrives as a request you can accept, block or report. If a business uses hosted mode, DeepChat's servers hold the encryption keys for that business, so the business's side of a conversation is not private from DeepChat. You can see which numbers are bots in the app.
Your contacts
The app does not upload your address book.
Your choices
- Block or report anyone from the message request screen.
- Sign out in the app to remove messages and keys from the phone.
- Ask us to delete your account: [contact address to be added].