Privacy Policy — tvoy.chat

Updated: July 31, 2026

tvoy.chat is a peer-to-peer messenger: your messages travel directly between devices whenever both are online. A server is used only to help devices find each other, to wake a phone with a notification, and to hold an undelivered message until it can be handed over — it never sees the contents. We aim to collect as little data as possible.

What we cannot see

The content of your chats and calls. Messages, files, audio/video and calls are end-to-end encrypted. Only the participants can read them: encryption and decryption happen on the devices, and the keys never leave them. Our server has no access to the contents — not even to an undelivered message that briefly passes through it (see below).

Data we process

• Device identifier (public key / address). Created on your device so contacts can connect to you. The private key never leaves your device: the app is excluded from iCloud and Google backups on purpose, so your key and chats are never uploaded to Apple or Google. To move to a new phone, use Settings → Save a copy of your chats — that file is encrypted with a password you choose.
• Push notification token (Apple APNs / Google FCM) — used to deliver a "new message" notification to your lock screen. Shared with Apple/Google only to deliver the notification. Message content is not included in the push.
• Connection metadata — when connecting to our relay server, your IP address and timestamps are processed transiently, only to route the connection between devices. We do not build profiles.
• TURN for calls — for calls behind NAT a media relay may be used; it forwards encrypted packets but cannot decrypt them.
• Undelivered messages — if your contact is offline, the message is placed in a mailbox on our server so it is not lost. It is stored already encrypted for that contact: we cannot read it, and neither can anyone with access to the server. It is deleted as soon as the contact confirms receipt, and in any case after 25 hours. Attachments are never placed in the mailbox — they are sent directly between devices.
• Pending-delivery marker — so we can wake a sender whose attachment did not go through, the server keeps for up to 24 hours the fact that one address has something pending for another. No content and no message history is kept.

What we do NOT do

• No ads and we do not sell data.
• No cross-app or cross-site tracking.
• No phone number, email or sign-up required.

Storage and deletion

• Your chats are stored on your device, encrypted at rest. Your identity key is stored encrypted as well. Your contact list (names and addresses) is stored on the device without additional encryption — it is protected by your phone's own lock and app sandbox.
• The server stores active push subscriptions (until you unsubscribe), transient connection state, and encrypted undelivered messages for up to 25 hours (see above).
• You can delete all your data at any time: Settings → Delete all data.

Children

The app is not intended for children under 13 (or the age of consent in your region).

Changes

We may update this policy; the current version is always available at this address.

Contact

support@tvoy.chat