ChatSecret - Privacy Policy

Last updated: April 29, 2026

1. Introduction

ChatSecret ("we", "our", "the app") is an encrypted messaging application designed with privacy as its core principle. This Privacy Policy explains how we handle your data.

2. Data We Collect

We collect the absolute minimum data required to operate the service:

Nickname: A username you choose (no real name required)
PIN: A 6-digit code, stored as a secure hash (we cannot see your PIN)
Display Name: A name shown to your contacts (can be any name you choose)
Device Information: Basic device type for push notifications

3. Data We Do NOT Collect

Phone number
Email address
Real name or identity
Location data
Contact list / address book
Photos, files, or media from your device
Browsing history
IP address logs (not stored)

4. Message Handling

All messages are automatically and permanently deleted from our servers after 12 hours. We do not archive, backup, or retain any message content beyond this period. Messages are stored temporarily only to facilitate delivery to the recipient.

5. Encryption

All communications are encrypted in transit using TLS/SSL. Messages are stored on our servers only temporarily for delivery purposes and are automatically purged after 12 hours.

6. Data Deletion

Users can delete their data at any time:

Nuke Conversation: Instantly deletes all messages in a conversation from both sides
Nuke All: Instantly deletes all conversations, messages, and associated data from the server and all parties
Account Deletion: Permanently deactivates your account and removes all associated data

7. No Account Recovery

By design, there is no account recovery mechanism. We do not store email addresses, phone numbers, or security questions. If you lose your PIN, your account cannot be recovered. This is an intentional privacy feature.

8. Push Notifications

We use Firebase Cloud Messaging (FCM) to deliver push notifications when you receive a new message. FCM tokens are stored on our server and are automatically removed when you log out or delete your account. Notification content is minimal and does not expose message content on the lock screen.

9. In-App Purchases

ChatSecret offers premium plans (weekly, monthly, quarterly) through Google Play Billing. Payment processing is handled entirely by Google. We do not collect, store, or have access to your payment information, credit card details, or billing address.

10. Third-Party Services

We use the following third-party services:

Google Play Billing: For processing in-app purchases
Firebase Cloud Messaging: For push notifications only

We do not use any analytics, tracking, advertising, or data collection SDKs.

11. Data Sharing

We do not sell, trade, rent, or share your personal data with any third parties. We do not display ads. We do not use your data for marketing purposes.

12. Children's Privacy

ChatSecret is not intended for use by children under the age of 13. We do not knowingly collect data from children under 13.

13. Data Storage and Security

Data is stored on secure servers with encrypted connections. All passwords/PINs are hashed using bcrypt with strong salt rounds. Messages are automatically purged after 12 hours. We employ rate limiting, input validation, and other security measures to protect the service.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date.

15. Data Deletion Request

To request complete deletion of your account and all associated data, use the "Nuke All" feature within the app, or contact us at the email below.

16. Contact

If you have any questions about this Privacy Policy, please contact us:

Email: emindeha@gmail.com